Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer
File:                     D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer (raw, json)
Hash identifier:          r12MaDCUqd1gBrfIoDEse7oYTlMi3jSl4L6Yb9szNNQ=
Subject key identifier:   D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1CAB505D80BFBFB158ECF6AA56B3883969609CDC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 19:25:59 +0000
Certificate not after:    Mon 20 May 2024 19:30:59 +0000
Subordinate resources:    AS: 266385
                          IP: 170.80.224.0/22
                          IP: 2804:3708::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ab:50:5d:80:bf:bf:b1:58:ec:f6:aa:56:b3:88:39:69:60:9c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 22 19:25:59 2023 GMT
            Not After : May 20 19:30:59 2024 GMT
        Subject: CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1f:a5:03:e4:67:1a:a7:1c:86:c0:6a:69:77:
                    99:e4:eb:97:0a:b1:6a:fe:fe:60:49:b5:14:46:74:
                    49:a6:85:f4:75:3b:83:79:85:1e:f0:7a:98:f1:7f:
                    23:83:c1:b5:88:d9:9f:fd:a3:92:c8:f0:43:4d:0b:
                    bd:f9:f0:f2:d5:d0:1e:8e:b8:c5:28:e2:37:03:a1:
                    8f:8c:ba:a9:4c:97:34:72:78:8a:23:b6:b2:58:0e:
                    bd:ec:18:ec:a8:55:f0:99:b3:0a:2e:18:05:dd:0a:
                    92:67:b2:b8:97:7f:5d:1a:74:1f:51:0c:53:f6:7a:
                    b9:08:9b:ee:1d:12:a3:35:03:6e:54:d1:b5:7c:af:
                    91:28:6b:38:2e:51:ae:45:d8:97:2a:42:7a:44:41:
                    86:f6:4e:23:8d:f4:6c:5f:ca:72:f2:a6:e0:d7:3a:
                    ef:a6:ac:78:c8:09:74:4d:c7:97:74:56:4f:5a:f1:
                    09:67:83:59:17:72:76:3f:76:4a:8c:9d:66:ce:6f:
                    58:94:14:c0:dd:17:4d:c6:cb:4b:20:61:e3:86:33:
                    6f:a6:18:38:f5:31:ca:c7:6c:38:fe:be:38:ab:66:
                    d8:be:ca:cc:fc:46:e6:fd:c7:8f:e6:47:e5:c3:33:
                    41:d9:72:b3:e6:b3:bd:6f:9e:cd:3e:c3:01:16:5d:
                    f3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.224.0/22
                IPv6:
                  2804:3708::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266385

    Signature Algorithm: sha256WithRSAEncryption
         47:0b:16:f4:0e:c3:1b:6d:15:2d:d8:19:56:fb:da:e0:c5:43:
         09:c1:cd:41:8e:5e:e1:d4:df:b4:33:13:27:53:c6:11:4d:a8:
         d7:cd:0b:ba:97:ba:d4:91:6d:3e:4e:04:4e:85:b3:6e:4a:34:
         36:e3:7b:2c:02:0e:ea:7e:aa:7c:05:2b:f0:b1:87:ab:54:05:
         36:5a:e0:a0:19:e7:e7:db:13:60:67:75:06:97:29:44:7e:20:
         89:b8:44:06:04:ba:a6:4b:e7:a6:a3:c9:e6:05:f5:8f:b4:c1:
         03:9c:13:f3:d5:a0:87:e4:16:8c:8f:fe:70:58:5a:05:87:94:
         e7:8b:ca:83:6c:0e:69:16:6b:57:1c:92:a0:2d:fb:48:ef:f0:
         c2:42:35:a8:0a:94:a3:14:03:93:7a:2d:92:a5:5a:83:b4:4e:
         74:ee:e8:f7:42:32:10:8c:b4:4a:1a:d7:7b:20:9c:2f:e6:a3:
         9f:98:dc:2d:c9:2c:ec:e4:49:45:d1:39:6a:f5:8a:e3:40:97:
         88:20:e2:7e:0f:3e:01:59:38:35:bf:29:ca:6f:2c:a6:76:8a:
         ca:db:1a:58:8a:77:7d:72:15:8a:97:59:e2:5f:2e:ea:48:28:
         d2:08:83:9a:d7:95:27:3a:20:21:b0:4c:cd:41:66:50:8b:20:
         76:d5:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org