Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2.cer
File:                     CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2.cer (raw, json)
Hash identifier:          999xprGa2GT9Ku/UUUc4RcfS/bwf1bpAq7eLi0FjtZk=
Subject key identifier:   CF:4B:7D:9C:BF:77:0F:DE:80:94:E6:B7:92:E5:17:8E:1C:4A:CB:C2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F8B03FD76EBE8274FB94606BD4AC2A4F763175D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8ynsbsbpRLC3BsP3GuCXATqZAR7jvDNnG71ZJShpjs4v/0/CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8ynsbsbpRLC3BsP3GuCXATqZAR7jvDNnG71ZJShpjs4v/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 21 May 2023 06:26:34 +0000
Certificate not after:    Sun 19 May 2024 06:31:34 +0000
Subordinate resources:    AS: 270996
                          IP: 177.23.24.0/22
                          IP: 2804:74ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8b:03:fd:76:eb:e8:27:4f:b9:46:06:bd:4a:c2:a4:f7:63:17:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 21 06:26:34 2023 GMT
            Not After : May 19 06:31:34 2024 GMT
        Subject: CN=CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:df:95:08:3e:b6:ff:6c:52:d8:45:e0:15:
                    ff:ad:b5:63:36:37:5c:ab:47:c2:91:08:70:db:c5:
                    4e:61:2c:95:c4:dc:cd:ac:92:80:a7:8d:95:41:1d:
                    9d:1a:e0:4f:58:e1:e5:97:21:0b:7c:22:d5:46:37:
                    54:80:d1:98:12:cc:df:e9:74:a9:e1:c1:4e:7b:9b:
                    cd:23:18:3d:f2:f3:34:16:fd:2f:58:56:76:97:6e:
                    5d:0e:c8:4d:2b:ed:47:45:b3:14:80:38:4f:ee:80:
                    a8:42:fa:5d:73:88:ed:fe:7d:7b:9d:4c:ae:db:09:
                    d2:99:3a:0a:17:e4:7f:f4:91:c8:7e:00:38:65:c5:
                    d8:11:66:e2:d5:62:b8:12:e5:75:22:87:ca:03:81:
                    c9:5b:e7:49:c7:76:15:c0:d3:38:01:86:79:cf:2c:
                    0c:0e:1b:97:64:88:c7:4d:75:a0:ec:59:12:90:69:
                    61:cf:98:4c:0f:42:5f:37:02:09:6e:14:80:6f:e2:
                    d2:ef:5b:53:b7:bb:22:f8:63:1b:1a:f6:2f:93:37:
                    a0:95:ce:fe:43:60:d1:df:d7:35:c0:77:e0:8c:d1:
                    f0:db:71:d8:47:1a:73:3d:02:98:8a:3e:83:5c:0e:
                    5d:e4:e6:da:41:85:45:9d:4e:2b:19:4e:f9:54:00:
                    dc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:4B:7D:9C:BF:77:0F:DE:80:94:E6:B7:92:E5:17:8E:1C:4A:CB:C2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8ynsbsbpRLC3BsP3GuCXATqZAR7jvDNnG71ZJShpjs4v/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8ynsbsbpRLC3BsP3GuCXATqZAR7jvDNnG71ZJShpjs4v/0/CF4B7D9CBF770FDE8094E6B792E5178E1C4ACBC2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.24.0/22
                IPv6:
                  2804:74ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270996

    Signature Algorithm: sha256WithRSAEncryption
         3f:39:df:0b:f3:74:a6:3b:d2:1a:9d:53:8c:60:af:20:8c:6f:
         af:22:2f:64:f5:84:06:41:4d:21:a8:9e:5e:5d:e4:6b:ea:2f:
         9c:42:a8:54:3a:38:63:ed:7c:51:7b:ee:fa:e3:0f:0c:a1:ba:
         a0:bb:1a:e1:b3:06:27:47:11:f6:c7:f9:cd:13:fc:9d:ec:f8:
         f8:19:6d:cd:a9:ec:22:62:40:11:df:bf:36:96:53:6b:6b:16:
         50:21:83:ff:bb:dd:13:f8:46:07:59:31:cc:b9:d3:4c:c5:6a:
         de:96:da:c1:97:ee:63:f0:87:bf:1c:b9:fc:4c:4b:1a:95:c5:
         6e:05:12:8f:ea:48:65:45:d8:58:b4:f8:72:ea:17:82:61:72:
         bd:cc:e0:3b:38:74:4a:6e:9f:40:89:1a:fd:1b:f2:f8:a8:91:
         ba:2f:67:94:95:4e:41:ac:64:f8:a7:31:35:6e:32:3d:aa:0b:
         ca:4f:2b:a8:8f:82:c4:94:e7:ae:be:3e:fb:40:60:ae:18:33:
         6d:bd:2b:d9:8a:d6:fc:e4:a8:56:f8:cc:78:5a:8d:ff:ff:cf:
         5c:9f:cb:49:ea:b3:0b:bc:49:15:f9:16:17:66:0f:57:4d:17:
         c5:cd:b3:97:80:0d:79:0a:f1:00:91:15:c1:44:79:1e:cc:e4:
         39:a8:ff:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org