Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/098243CC22148E7E11D5F92807DC95833099C169.cer
File:                     098243CC22148E7E11D5F92807DC95833099C169.cer (raw, json)
Hash identifier:          odsZ5cC4+6xgK0ytadnuzDwCmGW/szvvjhIb50jcKNE=
Subject key identifier:   09:82:43:CC:22:14:8E:7E:11:D5:F9:28:07:DC:95:83:30:99:C1:69
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       541B923B371AF585C9C04BFFB953377D4F7608B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Wkx98C15GAyRLux4AGgUHHEYyeti72i8u2xrDpkbKxt/0/098243CC22148E7E11D5F92807DC95833099C169.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Wkx98C15GAyRLux4AGgUHHEYyeti72i8u2xrDpkbKxt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 16:43:26 +0000
Certificate not after:    Mon 07 Oct 2024 16:48:26 +0000
Subordinate resources:    AS: 264258
                          IP: 138.118.72.0/22
                          IP: 2801:80:f30::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1b:92:3b:37:1a:f5:85:c9:c0:4b:ff:b9:53:37:7d:4f:76:08:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  9 16:43:26 2023 GMT
            Not After : Oct  7 16:48:26 2024 GMT
        Subject: CN=098243CC22148E7E11D5F92807DC95833099C169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d5:50:73:18:23:30:10:ae:5d:19:06:15:bc:
                    df:23:2c:28:6e:68:8a:a7:7f:78:82:23:a4:35:40:
                    47:7c:66:7b:63:42:dc:29:8a:f8:94:54:d7:6c:7c:
                    73:39:d1:25:05:5b:2e:ca:49:7d:19:10:f3:e3:38:
                    e0:4e:20:33:b4:90:97:24:66:37:b5:37:bd:78:db:
                    7c:47:97:b3:49:c0:2b:1b:56:98:82:12:0d:5e:49:
                    c8:a6:ac:fd:ca:4f:97:59:aa:c7:7d:18:3a:f0:2d:
                    f9:bd:c4:5e:e4:30:20:af:28:91:60:14:0b:c5:87:
                    86:45:47:db:d8:87:a8:6c:7c:14:4f:fd:4c:19:93:
                    bf:6d:14:d3:d7:69:d1:a7:d1:63:97:2f:7f:34:ae:
                    f0:18:5c:55:98:1e:13:19:cd:0f:20:4e:8b:f5:9a:
                    05:15:ed:22:29:d7:f1:24:91:bf:10:b2:7e:fc:a7:
                    69:ca:cd:a8:69:02:53:d0:a4:9d:e7:03:9f:6b:36:
                    31:2e:d9:7f:04:a9:f0:8e:60:34:5a:bb:60:cc:13:
                    6e:4b:41:2f:92:ca:12:f4:c2:4d:c5:a1:f2:c3:5a:
                    34:61:30:b2:53:2a:b1:aa:f1:d8:d5:10:7f:32:92:
                    a4:32:71:c0:ac:c6:15:4d:f8:74:88:3e:22:bd:33:
                    bf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:82:43:CC:22:14:8E:7E:11:D5:F9:28:07:DC:95:83:30:99:C1:69
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Wkx98C15GAyRLux4AGgUHHEYyeti72i8u2xrDpkbKxt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Wkx98C15GAyRLux4AGgUHHEYyeti72i8u2xrDpkbKxt/0/098243CC22148E7E11D5F92807DC95833099C169.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.72.0/22
                IPv6:
                  2801:80:f30::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264258

    Signature Algorithm: sha256WithRSAEncryption
         4d:45:5b:55:b6:26:8a:42:9b:f3:f6:b8:20:76:fa:65:4e:e8:
         7b:e3:34:87:fd:19:e3:09:5f:2f:1c:31:1a:28:49:92:ac:fa:
         39:1a:03:a3:2e:91:b8:ac:e1:23:fd:a4:9b:18:a5:e5:c0:c9:
         69:26:8e:47:29:91:de:74:e4:09:0a:ce:94:54:0c:9f:83:e9:
         ef:10:5f:8f:4d:54:2b:d5:20:96:9c:fc:39:06:6e:b4:55:74:
         d0:7f:a5:99:1f:60:1a:ae:7b:49:45:be:0b:69:8a:d1:0d:1c:
         60:a0:db:d5:9e:5c:40:e3:fd:42:eb:fe:28:d4:ff:bb:a3:32:
         9a:aa:7c:9a:28:d7:bf:89:69:d7:cc:4d:e9:05:11:0f:d1:03:
         99:85:e7:47:a7:a2:9d:03:79:97:13:f7:e3:34:01:01:81:bd:
         ff:cd:9e:9c:6b:af:09:ad:81:e2:b6:e3:ea:95:ed:20:f9:0a:
         7d:15:f7:ea:5b:2b:88:c3:50:29:f7:4c:9d:a4:70:bd:ad:a7:
         70:d2:52:1e:0c:f9:4e:22:fb:6d:8f:19:cf:4f:43:0e:43:44:
         4e:fc:5f:0f:d4:ca:b8:eb:6a:28:da:4a:5f:a2:9b:5a:18:b8:
         ad:6a:f3:23:d8:c0:8c:a4:b2:1f:3f:95:bc:7e:a9:f5:ea:33:
         c7:53:26:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org