Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer
File:                     D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer (raw, json)
Hash identifier:          HIFCRkZkNBa2eWc3ixidEeI1RxOHTebqzD098mk7JGE=
Subject key identifier:   D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       377E9E47EBD5605379466A5587C8BB37A6ADF503
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 21:41:37 +0000
Certificate not after:    Fri 04 Oct 2024 21:46:37 +0000
Subordinate resources:    AS: 263509
                          IP: 191.243.176.0/20
                          IP: 2804:1300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7e:9e:47:eb:d5:60:53:79:46:6a:55:87:c8:bb:37:a6:ad:f5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  6 21:41:37 2023 GMT
            Not After : Oct  4 21:46:37 2024 GMT
        Subject: CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:51:4e:87:4d:ca:10:ed:4e:23:28:c5:7b:
                    fc:85:60:81:33:23:52:a4:a0:62:73:4a:20:7e:2f:
                    b2:2d:6c:87:c1:7e:82:a9:8b:a4:94:54:2a:fb:b1:
                    13:e7:e6:82:1f:6c:20:46:08:10:ee:bd:5e:e1:17:
                    c0:35:a4:1a:57:66:dc:dd:c1:82:80:8f:58:e6:eb:
                    1a:09:aa:b1:78:c3:d2:fd:ed:db:9a:f9:87:27:c7:
                    89:ae:90:8f:6f:34:49:78:3e:25:2d:b9:d4:9b:55:
                    39:89:12:aa:3b:85:31:ee:3a:f4:12:ed:82:77:b5:
                    8d:f1:0c:61:b1:a6:93:b6:61:f9:b0:60:f0:3c:ab:
                    b3:d2:f4:fe:c4:f6:22:4f:8b:5c:b0:a1:2d:ae:fe:
                    49:5b:b0:bd:cb:8d:e1:1b:1e:96:4b:c7:24:a2:4b:
                    e1:c6:8e:04:85:a5:95:0f:68:67:76:ae:06:36:4a:
                    07:59:9f:b1:89:53:7b:a0:28:6b:ac:dc:51:8b:cb:
                    63:7e:15:56:70:e7:da:db:89:53:7d:7c:45:3f:7c:
                    72:17:23:ca:ad:a8:37:dc:70:73:c7:5d:09:46:e5:
                    9f:5d:64:0b:b9:d4:97:68:59:b2:24:58:cd:99:96:
                    93:ab:e9:ce:7c:91:72:78:2d:08:96:7d:36:78:c5:
                    38:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.176.0/20
                IPv6:
                  2804:1300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263509

    Signature Algorithm: sha256WithRSAEncryption
         71:51:c9:ff:23:ea:c4:8a:fa:50:32:be:19:f1:7b:96:30:1b:
         bb:0a:d3:50:db:f7:30:11:19:f3:c7:3b:dc:86:57:1a:49:97:
         11:85:5c:1b:c5:1d:ff:8e:d3:21:4b:d3:37:9c:38:4d:28:44:
         9d:0d:1b:83:68:78:ad:86:ee:27:3c:20:b2:e1:cf:fd:f9:4d:
         94:0c:7f:f2:4e:60:45:1d:f6:84:db:f4:45:bf:8d:34:e6:8e:
         7f:cf:34:a6:0b:f0:e6:0e:4a:5f:c0:e7:e8:3d:11:af:73:c4:
         d8:fd:6d:f5:c8:4c:f3:52:f0:db:8a:31:1d:55:63:2b:20:56:
         57:c0:45:e8:0f:35:eb:39:ee:5f:9f:07:82:fb:2c:0a:24:08:
         fe:f5:02:be:85:77:15:b7:9d:b9:46:62:b4:f6:b6:f4:25:e6:
         7c:41:f7:1f:43:f2:4d:57:a7:57:ee:be:87:11:e9:ea:18:78:
         71:ad:69:8a:e9:2a:21:1b:5f:f1:e2:22:55:8e:53:1e:55:14:
         86:20:cd:9d:25:cd:39:1a:8b:23:81:42:1d:b2:a3:f0:dc:51:
         67:6c:35:21:2b:a6:c8:01:23:02:8b:d5:38:77:29:7b:b9:91:
         a7:84:1c:2f:68:44:b2:4b:df:25:78:4e:61:2d:f1:87:15:c0:
         18:c9:c7:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org