Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E4996BF8277F2DE1319C47994A7667E13E3077A7.cer
File:                     E4996BF8277F2DE1319C47994A7667E13E3077A7.cer (raw, json)
Hash identifier:          tjHf4MHw2124irLCuG4ZTXfs6RxFtgXgWRSWYcUryO4=
Subject key identifier:   E4:99:6B:F8:27:7F:2D:E1:31:9C:47:99:4A:76:67:E1:3E:30:77:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D8EA80248314CDAC426583FBFC1C3FBDB74223B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/E4996BF8277F2DE1319C47994A7667E13E3077A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 16 Jan 2023 20:55:13 +0000
Certificate not after:    Mon 15 Jan 2024 21:00:13 +0000
Subordinate resources:    AS: 266072
                          IP: 45.4.140.0/22
                          IP: 2804:3a20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8e:a8:02:48:31:4c:da:c4:26:58:3f:bf:c1:c3:fb:db:74:22:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 16 20:55:13 2023 GMT
            Not After : Jan 15 21:00:13 2024 GMT
        Subject: CN=E4996BF8277F2DE1319C47994A7667E13E3077A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c2:0d:0e:6f:f9:12:35:d7:5c:37:6c:56:09:
                    be:f2:dc:2b:73:50:7c:0a:13:bf:48:8a:48:51:27:
                    c0:16:1a:a8:50:00:b8:16:47:94:6f:43:13:ad:fc:
                    9d:18:22:f1:79:d8:19:b0:9e:35:d1:e7:0a:48:19:
                    17:3a:6a:04:1c:3d:ec:82:b1:bd:46:72:8e:9f:68:
                    75:42:88:df:02:83:ca:60:a5:d6:9a:e8:d0:27:64:
                    fc:0e:6c:81:41:4a:19:6e:b8:ae:cd:fe:f5:40:28:
                    83:3c:57:e0:12:66:93:00:a0:a3:b5:aa:c8:43:2f:
                    15:e7:b1:6a:a8:d2:95:4c:24:b1:8c:8b:1d:87:ad:
                    79:c8:27:46:43:90:fc:97:93:dd:06:fa:c1:8b:00:
                    1e:b7:c2:31:e2:3c:5d:4c:08:b0:79:47:2b:71:9f:
                    aa:aa:36:85:ba:f6:ad:c5:fe:52:b8:82:e4:37:18:
                    cf:ef:7c:92:42:64:89:94:56:b5:4f:1a:79:51:d7:
                    ce:b2:56:c9:0c:6e:94:2f:0d:70:de:4a:01:02:2c:
                    b2:12:b9:5d:93:12:2f:de:f5:e6:0c:9b:05:a9:37:
                    a0:6c:cb:47:e1:d0:58:dc:94:5e:90:13:2d:d5:53:
                    41:82:16:94:ed:29:cb:78:fb:b7:06:3e:5d:95:1d:
                    f1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:99:6B:F8:27:7F:2D:E1:31:9C:47:99:4A:76:67:E1:3E:30:77:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/E4996BF8277F2DE1319C47994A7667E13E3077A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.140.0/22
                IPv6:
                  2804:3a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266072

    Signature Algorithm: sha256WithRSAEncryption
         b5:e3:6a:52:fe:b0:f1:04:2f:43:a2:21:8d:53:3f:e9:cc:7b:
         95:6a:3a:0b:d6:c8:ed:cf:82:14:44:8c:ca:82:27:71:73:1f:
         02:3b:66:fa:c5:5d:7a:df:2b:28:85:c8:8d:66:a4:18:d5:d9:
         6b:4b:5b:f0:19:c6:b0:91:6d:ba:4a:62:76:bf:69:81:17:de:
         cf:9a:1d:10:e2:f8:27:57:5a:f9:fa:6c:ba:77:8d:c3:f4:d4:
         b7:2c:e3:d1:8a:61:43:81:6f:5c:fb:77:34:94:a6:68:e5:dc:
         a1:19:3f:4e:22:73:78:fe:16:4c:24:43:54:49:3a:95:0d:8e:
         67:51:10:92:d9:fb:71:d1:a9:dd:f0:1d:f5:4c:00:f3:fc:6a:
         38:bf:0e:26:a2:dd:ae:68:ac:04:fd:1d:cf:db:e9:5e:60:69:
         9d:af:5d:5c:2b:93:da:65:bd:6f:00:8d:74:f5:e3:fc:d9:16:
         f2:b2:ed:16:47:ff:4d:c5:c0:56:ab:7c:ec:46:89:3d:e8:91:
         49:2b:ef:6e:f6:03:90:23:a6:f0:6b:e9:82:ee:84:3f:50:6c:
         33:f1:e2:66:2d:32:3c:02:80:6e:0c:ff:ef:69:61:dd:0a:8e:
         89:f1:02:e9:a1:ac:c3:85:b6:10:cf:bd:bf:d1:e4:80:6c:07:
         00:2e:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org