Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D4A38721DF06693E4AAB26F859A1713FEF02F478.cer
File:                     D4A38721DF06693E4AAB26F859A1713FEF02F478.cer (raw, json)
Hash identifier:          T6OzBdXw+N7XvqqJZBt5YR8xcJLzYxOGg9kihNDtnn0=
Subject key identifier:   D4:A3:87:21:DF:06:69:3E:4A:AB:26:F8:59:A1:71:3F:EF:02:F4:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0CEF0BFF9C476085D37E855EA67A63262B4105A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D4A38721DF06693E4AAB26F859A1713FEF02F478.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Dec 2023 02:15:09 +0000
Certificate not after:    Fri 06 Dec 2024 02:20:09 +0000
Subordinate resources:    AS: 272195
                          IP: 2804:8364::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ef:0b:ff:9c:47:60:85:d3:7e:85:5e:a6:7a:63:26:2b:41:05:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  8 02:15:09 2023 GMT
            Not After : Dec  6 02:20:09 2024 GMT
        Subject: CN=D4A38721DF06693E4AAB26F859A1713FEF02F478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:b9:89:54:37:a9:b0:23:f6:ac:16:3e:7d:
                    d3:94:b8:1b:0b:03:99:44:e3:f3:11:3b:63:df:fb:
                    ff:b6:8e:34:f9:dc:f1:e9:64:1b:00:39:be:e0:84:
                    d7:51:55:63:bb:27:f5:e6:7b:52:c8:23:99:88:b9:
                    87:0b:92:0b:a5:38:f8:be:65:f1:6f:89:ab:48:d7:
                    59:27:c1:c7:97:29:c0:e1:ec:28:a7:b9:0f:c7:0e:
                    ef:07:69:6a:21:8c:9b:04:15:e9:ee:a2:55:0f:d2:
                    fc:a8:28:16:6c:b5:1c:40:b3:f2:cd:2e:40:e2:3e:
                    d0:ff:9e:ce:a4:d3:82:55:3e:38:64:7c:b7:53:e7:
                    50:d2:40:5e:79:82:e9:44:27:da:aa:3c:c8:bf:a1:
                    d9:46:65:fa:17:0c:39:4c:5a:7b:b4:be:a0:c5:6c:
                    35:bf:8c:88:e2:ed:5c:85:04:6c:45:26:4e:24:98:
                    5b:20:50:ee:9d:11:c9:5e:f4:ff:e0:b8:78:40:45:
                    47:a6:80:6f:5e:1b:45:3c:8e:1d:c6:62:20:ad:16:
                    b1:6c:7d:42:16:d8:de:4a:b8:31:69:15:f3:d9:46:
                    34:a6:a0:a9:15:06:d6:60:14:77:26:76:18:2c:8c:
                    88:31:ad:02:5a:2c:6a:a8:a8:7c:0a:c1:1d:b5:bd:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:A3:87:21:DF:06:69:3E:4A:AB:26:F8:59:A1:71:3F:EF:02:F4:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AoP5WZpZLZez1d3WSmeuJJf5feDkNfkyBukAtFBWvYdA/0/D4A38721DF06693E4AAB26F859A1713FEF02F478.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8364::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272195

    Signature Algorithm: sha256WithRSAEncryption
         27:70:7b:3c:60:82:a7:36:28:42:d2:7a:e6:5e:42:0b:4b:95:
         5a:62:b5:d5:4b:0f:a7:d3:df:bd:50:26:41:a4:b7:57:9e:10:
         4a:b4:2a:9d:80:1c:b7:0e:5b:a0:7f:8f:fe:c4:4c:a1:e0:1f:
         37:9f:68:3b:10:d8:e5:d7:a3:f3:b7:a3:a0:d2:26:71:82:a1:
         05:b6:2e:e8:64:57:14:d8:7b:48:e3:b4:98:50:54:bf:53:66:
         51:de:a5:16:47:d5:63:63:43:81:34:1e:51:a8:35:b8:94:a4:
         09:eb:73:3a:86:42:01:a0:58:92:02:97:f9:83:61:fb:36:15:
         e2:20:2c:25:30:d5:4a:63:39:c1:79:2a:55:ee:96:6b:fc:c9:
         18:2a:e0:15:b2:73:36:49:17:80:74:f4:75:33:de:2c:45:b1:
         36:d8:1f:37:e3:70:ba:2d:e0:bd:88:e1:26:8d:a2:f8:25:a0:
         17:b9:cd:20:42:f9:34:b1:00:2b:18:14:ca:a8:e0:50:d5:d9:
         4b:09:0f:48:ab:76:79:93:91:99:57:73:17:2c:b8:b5:eb:1d:
         25:d5:30:11:36:94:4c:16:56:7d:88:82:40:f8:11:1a:23:a4:
         63:46:97:f8:c2:11:07:69:4f:e3:98:c7:15:ed:41:e8:bb:88:
         29:96:6a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org