Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E.cer
File:                     82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E.cer (raw, json)
Hash identifier:          KKgxW2J46VgzQQCrSyFGiSyKc/9vQ78zZtY5kD+71tM=
Subject key identifier:   82:FD:5E:A2:E5:AB:89:9B:E1:2B:B6:FF:32:00:02:5B:14:7B:8D:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2267717782C8CA5B018324CC666A9AAA24DBB59C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 22:56:15 +0000
Certificate not after:    Tue 08 Oct 2024 23:01:15 +0000
Subordinate resources:    AS: 266166
                          IP: 72.44.20.0/22
                          IP: 2804:3bb4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:67:71:77:82:c8:ca:5b:01:83:24:cc:66:6a:9a:aa:24:db:b5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 22:56:15 2023 GMT
            Not After : Oct  8 23:01:15 2024 GMT
        Subject: CN=82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:34:7f:bf:fc:67:fb:f8:8e:7f:ce:05:b0:91:
                    db:49:56:39:9e:d2:90:0b:cb:13:8b:16:3c:65:dd:
                    91:8b:fa:43:46:1f:3e:8e:27:95:8f:6a:57:59:dd:
                    b9:f2:b2:a5:60:ae:e2:cd:8a:7e:1f:3a:0e:8d:71:
                    a4:0e:23:15:26:7c:86:59:17:0b:d0:85:03:3a:7a:
                    8f:fc:bc:f3:d0:53:e2:f6:60:f1:6b:01:71:36:53:
                    e7:da:a2:c6:3a:39:da:d7:c3:e5:02:84:3c:1d:aa:
                    7b:e4:17:39:cb:47:7a:ff:b6:df:c6:bd:c5:61:3f:
                    87:c7:f0:b4:c9:e8:e1:5a:27:eb:10:59:5b:52:f8:
                    30:1f:6d:cc:38:72:0b:7d:2d:df:22:01:42:5b:fa:
                    c2:e2:81:fe:f2:11:e7:a0:fe:9d:df:ea:75:62:81:
                    8e:8a:e1:20:d4:b9:5e:92:ca:d0:60:a3:f6:0b:3b:
                    c8:03:16:d7:9f:c7:5a:7c:64:33:4d:c7:08:e7:b5:
                    94:9b:a2:d4:9a:e2:6b:43:7d:02:37:10:8e:05:f7:
                    78:fc:a2:18:2b:d3:95:0e:c2:e2:12:13:76:0e:78:
                    16:96:ff:42:3e:e3:50:1c:63:28:3f:8c:fb:81:bf:
                    d9:11:86:d8:1d:b3:2a:a5:19:17:07:64:d4:88:61:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:FD:5E:A2:E5:AB:89:9B:E1:2B:B6:FF:32:00:02:5B:14:7B:8D:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/82FD5EA2E5AB899BE12BB6FF3200025B147B8D6E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.20.0/22
                IPv6:
                  2804:3bb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266166

    Signature Algorithm: sha256WithRSAEncryption
         45:e9:3b:10:df:97:2d:d3:15:bd:fd:77:06:67:36:17:01:95:
         ed:6f:14:6d:19:69:8c:0b:8f:ad:b3:46:0c:f4:d2:82:f5:6e:
         6f:55:fd:98:2b:30:47:2f:1f:39:3e:a8:9c:4a:3f:6e:6c:bf:
         5a:59:1e:e1:93:97:67:7b:74:9b:2a:29:f5:8f:ab:e5:0c:b2:
         8e:fd:75:7f:24:c6:7c:cd:85:68:1b:1c:ff:06:01:4e:43:ff:
         36:6d:7c:fb:19:fd:9f:2a:69:b3:3d:45:c3:cb:0f:c4:66:70:
         0c:b6:8c:25:71:f4:fd:b1:47:a3:6e:9d:c1:23:39:0b:62:ea:
         40:85:3a:5b:29:8e:1a:00:95:c2:29:a0:59:67:d9:eb:87:1e:
         10:bf:4b:e8:6b:d0:d6:61:2f:84:9d:39:33:aa:a7:19:e4:ab:
         92:b3:6d:f1:16:ce:3c:87:26:6f:12:91:dc:99:3f:de:54:2f:
         4d:07:28:ed:9f:48:aa:5b:5b:96:62:6e:b5:fa:54:81:e7:c1:
         69:d7:1c:c7:dd:2e:65:35:eb:cb:22:9b:b5:26:d8:6d:19:9c:
         82:ef:7d:d8:ae:14:16:a7:f2:0f:ad:73:13:3c:f8:ba:6e:38:
         21:64:de:92:47:9d:c1:48:27:a8:1e:d1:69:e4:4e:78:65:cc:
         16:65:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org