Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer
File:                     CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.cer (raw, json)
Hash identifier:          Wi9TxgD48UuaZMQzkRKhXY7OURUNYdJCaSF/9uQdEvQ=
Subject key identifier:   CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       202A3543C868F1DDA3498E528C108B34E9F30AC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 12:19:04 +0000
Certificate not after:    Wed 15 Jan 2025 12:24:04 +0000
Subordinate resources:    AS: 273412
                          IP: 200.196.40.0/22
                          IP: 2804:8e3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2a:35:43:c8:68:f1:dd:a3:49:8e:52:8c:10:8b:34:e9:f3:0a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 12:19:04 2024 GMT
            Not After : Jan 15 12:24:04 2025 GMT
        Subject: CN=CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:10:41:9c:b0:86:18:04:27:7f:8e:66:4f:3f:
                    24:f0:0a:0d:90:fb:9b:7a:48:ff:ae:77:61:0c:54:
                    ac:97:1c:2a:cc:1d:3a:15:e0:9a:bb:c9:cc:d1:c0:
                    4a:b2:cd:d5:1c:2f:91:33:b9:57:8b:70:5d:eb:fc:
                    7b:5f:8b:c1:f3:9f:fe:69:0f:b9:a7:47:d6:27:a4:
                    f3:1e:91:84:67:62:56:81:c7:f7:a1:55:01:48:fd:
                    7f:02:d6:54:5e:ca:f7:25:14:3e:1b:ca:d7:c7:50:
                    3a:87:97:4a:5b:e9:dd:e3:41:8d:d3:91:f3:af:80:
                    ba:14:20:68:1f:a7:f0:2f:17:a1:38:9a:3d:27:14:
                    09:c2:88:8d:97:e4:70:b3:fa:02:7f:ba:67:be:24:
                    4e:ad:1b:18:b6:12:ac:3e:d4:68:23:aa:63:d7:45:
                    3e:b4:e1:52:0c:6c:32:fa:03:0d:dd:0c:4d:72:c9:
                    cf:0d:5e:20:90:c3:73:43:fc:d9:b3:2a:e4:34:ad:
                    e0:e8:67:89:39:18:d6:08:46:1c:d8:b0:62:19:da:
                    87:0a:bc:41:7d:37:49:1d:fd:75:e9:68:fd:fa:ea:
                    25:7d:40:ef:96:6d:e0:92:eb:d3:2c:ca:55:f9:9e:
                    5c:f2:9e:57:33:e5:a0:58:8b:bf:d7:a7:f7:c6:90:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CE:F7:84:55:DE:B7:C5:CB:67:AC:1A:1A:4F:3E:5E:FD:D7:60:9A:5E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6B8gJne7v5w1Cv7tgTdhbjNdYKtR44c5pqHQ3cHCPVv1/0/CEF78455DEB7C5CB67AC1A1A4F3E5EFDD7609A5E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.40.0/22
                IPv6:
                  2804:8e3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273412

    Signature Algorithm: sha256WithRSAEncryption
         7e:d4:37:10:40:20:8d:f9:cb:1c:46:20:3f:be:ee:94:0c:05:
         60:8e:98:9d:26:02:72:9b:69:92:08:c7:33:cf:9e:4b:85:57:
         19:7a:45:7d:59:29:b1:e2:b8:3e:3c:51:e0:7b:8e:90:08:a9:
         1f:36:06:69:78:d2:31:de:b2:78:d9:7c:11:96:bc:40:74:ea:
         dc:a2:17:20:80:ba:6e:5c:4d:6b:4d:d6:90:5c:6c:4e:27:38:
         16:b5:2a:ff:86:70:b0:d8:1a:06:e5:c3:e7:eb:86:d1:e6:8a:
         36:40:8d:9e:c6:aa:dd:e4:10:36:65:70:12:69:65:ac:39:3e:
         a6:0d:d1:ac:ab:50:cb:22:0c:89:18:6b:0c:b7:8e:8d:07:63:
         68:86:f6:ec:c9:b4:c7:96:33:f5:d7:16:3c:d9:6b:40:00:25:
         96:c6:03:f4:13:f1:16:cd:06:77:19:2c:47:7f:62:14:1d:51:
         e0:91:f9:35:b3:b2:f7:ae:8d:2a:36:14:93:a7:16:25:23:d5:
         fc:97:d7:ab:3b:15:11:ee:37:5b:c4:8f:33:a1:a1:c8:f7:45:
         82:46:f6:0b:bf:3c:a5:db:5c:1d:3f:30:92:fc:8a:45:a9:f8:
         19:23:1a:e7:ec:dc:a7:ed:e7:1d:2d:ae:2c:8d:83:61:98:25:
         dd:47:d6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org