Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/548D6970267EF22027E90B3D68AB2E122A2BA170.cer
File:                     548D6970267EF22027E90B3D68AB2E122A2BA170.cer (raw, json)
Hash identifier:          C7D1o2/8FdvMEzLxjsFqgET64RX7/NDfiRc0Q9gUmPw=
Subject key identifier:   54:8D:69:70:26:7E:F2:20:27:E9:0B:3D:68:AB:2E:12:2A:2B:A1:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3407834C956045B9498B361C69431CEB2D8D4E93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/548D6970267EF22027E90B3D68AB2E122A2BA170.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 13:02:09 +0000
Certificate not after:    Thu 20 Feb 2025 13:07:09 +0000
Subordinate resources:    AS: 266453
                          IP: 170.83.36.0/22
                          IP: 2804:3810::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:07:83:4c:95:60:45:b9:49:8b:36:1c:69:43:1c:eb:2d:8d:4e:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 13:02:09 2024 GMT
            Not After : Feb 20 13:07:09 2025 GMT
        Subject: CN=548D6970267EF22027E90B3D68AB2E122A2BA170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:14:c3:db:71:54:10:71:60:f3:8a:c8:34:
                    f6:59:a4:57:56:2a:32:58:1b:e5:6f:b9:8c:34:ce:
                    4a:30:17:67:57:17:15:88:9a:d6:eb:7a:2e:a9:d4:
                    70:24:9f:53:87:93:ef:bd:67:8e:b7:7d:95:3c:ea:
                    a3:56:a0:53:6d:58:65:28:f1:81:2a:91:57:7c:cd:
                    80:dd:77:21:ed:bc:17:91:76:dd:c6:f2:56:d1:72:
                    02:82:d8:33:ae:2a:8b:78:65:ca:1b:d3:fe:29:82:
                    85:7c:15:de:dc:2e:84:0c:f4:4d:73:e2:77:49:e4:
                    c7:5f:bb:13:9a:49:da:0d:80:3a:13:f5:75:6e:cd:
                    ce:34:87:84:2e:b1:32:21:bc:f2:16:54:3c:de:99:
                    cb:86:57:ec:0d:97:9a:4a:3e:ba:64:27:c4:3e:a4:
                    1f:ed:48:9b:be:d9:0d:ad:c4:47:ad:c9:27:72:9b:
                    87:42:6d:4e:cb:e8:b3:9b:63:7f:f9:04:3b:dc:51:
                    42:dc:9f:a4:85:1e:61:80:1b:d8:ac:02:ba:9b:d8:
                    23:3a:3f:ed:ad:29:e1:df:11:36:68:a2:f6:87:0d:
                    38:60:2a:b7:06:74:01:8f:64:7f:e1:2d:c3:cd:1d:
                    13:10:1a:5f:72:d9:a3:0d:52:05:c9:4d:07:3e:0d:
                    26:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:8D:69:70:26:7E:F2:20:27:E9:0B:3D:68:AB:2E:12:2A:2B:A1:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3NF7aHvVeaZo3C5LtfYQpxAsXXCNE2y8YHLuZu7JLYqb/0/548D6970267EF22027E90B3D68AB2E122A2BA170.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.36.0/22
                IPv6:
                  2804:3810::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266453

    Signature Algorithm: sha256WithRSAEncryption
         06:52:8c:0c:1d:61:87:3c:a6:ea:bd:a3:9d:09:2c:c6:63:7b:
         6b:9c:6b:e7:25:64:b0:f1:f9:70:d2:b0:59:9c:8c:00:24:91:
         80:d4:47:ee:74:6c:14:c2:05:88:c2:fe:04:64:6d:0c:3d:e7:
         5a:54:df:47:8d:f1:81:c4:00:90:bb:d4:b8:79:1b:c0:d2:e4:
         76:93:a1:eb:fa:c6:1b:3a:cd:e0:e0:32:78:f0:65:73:56:f7:
         70:b0:31:e5:e3:65:62:ba:c8:22:f1:c9:2a:b8:93:ca:43:ac:
         d0:02:80:9c:2f:5f:54:3b:04:ac:c5:64:f3:88:69:9e:3e:dc:
         ca:99:60:66:34:b7:54:38:27:92:78:79:3f:dc:09:68:63:c6:
         18:5b:ff:01:d6:89:ac:47:3c:b5:83:e2:5d:80:a2:e4:a8:a2:
         6c:4c:e2:15:d1:bd:a0:09:0b:bf:90:27:2d:0c:b9:06:19:52:
         5c:54:85:99:47:68:72:b1:00:73:24:51:02:87:cb:ee:4a:af:
         5c:2a:b5:82:f1:31:c3:cf:6a:ca:bc:b1:db:93:a4:79:6c:5e:
         c9:76:d8:1b:b8:6c:d2:21:99:26:41:f3:b1:1f:94:3e:be:bc:
         f5:67:80:33:00:00:db:ad:80:5d:48:68:44:57:69:f8:8e:10:
         e3:bc:cb:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org