Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/55086A695A81138C17CC984B7773F3BC07D84ADA.cer
File:                     55086A695A81138C17CC984B7773F3BC07D84ADA.cer (raw, json)
Hash identifier:          aOTpNwMqoJFgWPaP0aOewzEJNwaVRK/ESXDH9WI1aaQ=
Subject key identifier:   55:08:6A:69:5A:81:13:8C:17:CC:98:4B:77:73:F3:BC:07:D8:4A:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6AC02BEC7AE7D1228674EAF53ECCD8375CAA1535
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/55086A695A81138C17CC984B7773F3BC07D84ADA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 09:21:25 +0000
Certificate not after:    Mon 21 Oct 2024 09:26:25 +0000
Subordinate resources:    AS: 268878
                          IP: 45.174.16.0/22
                          IP: 2804:5bf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c0:2b:ec:7a:e7:d1:22:86:74:ea:f5:3e:cc:d8:37:5c:aa:15:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 09:21:25 2023 GMT
            Not After : Oct 21 09:26:25 2024 GMT
        Subject: CN=55086A695A81138C17CC984B7773F3BC07D84ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:30:18:c5:29:85:43:0a:e5:8b:18:5a:ff:
                    5b:34:de:9c:02:90:af:fb:fe:f0:11:ed:5d:1b:61:
                    70:08:f8:ac:55:6d:52:b4:4a:80:c8:21:68:f9:34:
                    e5:a3:88:da:c2:16:73:4a:38:6a:3d:20:81:df:ac:
                    a2:3f:40:db:4a:be:cc:82:38:54:20:b7:d8:81:31:
                    b8:96:1e:fe:60:9c:b9:e2:3b:88:8e:4f:a5:89:83:
                    e9:81:ce:ea:47:44:b2:a9:b3:9b:87:cb:fe:f6:0d:
                    cb:a5:df:b3:59:25:bd:25:d5:bb:16:db:6a:03:ad:
                    b5:53:58:d3:39:47:46:bf:2b:ca:b6:91:37:35:e7:
                    05:7a:1b:6c:e2:0c:f6:5d:7f:de:69:48:a1:e7:f7:
                    78:51:16:41:68:e6:f2:8e:f0:ef:ea:99:5e:66:f6:
                    5f:cb:fe:ce:e4:48:82:d4:ff:3b:94:eb:cd:86:b2:
                    9d:48:e9:33:e3:37:93:d7:f8:4a:58:e5:cd:96:f8:
                    c6:ce:a0:db:b3:49:9e:3a:53:08:92:23:b1:ac:05:
                    af:1a:13:30:00:a8:68:a7:07:24:1b:7d:37:5b:54:
                    3f:54:54:1d:47:68:5a:88:ac:b2:d8:80:d7:a3:ea:
                    8f:b3:76:ef:ba:4b:1d:ce:1d:11:bc:10:6d:79:59:
                    46:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:08:6A:69:5A:81:13:8C:17:CC:98:4B:77:73:F3:BC:07:D8:4A:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/55086A695A81138C17CC984B7773F3BC07D84ADA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.16.0/22
                IPv6:
                  2804:5bf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268878

    Signature Algorithm: sha256WithRSAEncryption
         24:6d:b7:68:22:00:73:03:8b:1d:bc:6c:8d:4e:11:03:05:d4:
         96:2e:89:83:f5:b8:95:fa:69:15:18:52:d7:21:58:bf:c8:8c:
         8f:17:d2:dd:71:02:e6:51:e5:85:ea:7c:9d:75:8d:81:95:a8:
         00:29:48:76:3c:99:ff:78:3a:0b:f4:cb:b6:33:8e:c9:22:08:
         6d:7f:5a:dd:67:18:3d:20:38:56:c5:30:ae:33:61:b3:06:44:
         9a:f6:49:bc:c3:1b:a1:01:f2:55:c7:f1:1f:8b:b4:d1:72:cf:
         74:83:71:35:0b:fb:53:cc:c0:9f:8b:ae:0d:a7:1e:9c:4f:36:
         4d:75:ca:26:1a:13:c6:d1:9e:69:65:34:71:6d:32:29:59:ea:
         a9:06:15:9c:1a:d3:ea:84:fc:43:d0:2c:e3:2c:b3:33:72:54:
         ff:29:8f:21:b6:f5:76:1b:3d:ec:bd:a5:d1:05:f1:c3:c4:f6:
         81:68:e7:15:38:af:04:70:57:8f:48:87:92:c4:7e:1f:5b:40:
         a2:da:41:e3:68:c9:4e:e1:d7:da:df:fb:cd:a0:01:4f:e5:7f:
         05:50:60:4e:ac:77:46:c3:4c:87:8f:db:0f:51:49:47:25:f0:
         3e:2d:35:04:0a:a6:00:82:05:d1:95:b5:f7:84:e7:f5:d4:07:
         49:b3:db:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org