Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CBF316E6B2EE03544A2F46C3011C57AA5538C054.cer
File:                     CBF316E6B2EE03544A2F46C3011C57AA5538C054.cer (raw, json)
Hash identifier:          j+y1oTMVY4JGzTjeymwcGyqftr/jT9W1JWea2NbAxHM=
Subject key identifier:   CB:F3:16:E6:B2:EE:03:54:4A:2F:46:C3:01:1C:57:AA:55:38:C0:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1277AE79AE896795776DCDDE8F3768B9FA20EC7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/CBF316E6B2EE03544A2F46C3011C57AA5538C054.mft
caRepository:             rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 05:23:42 +0000
Certificate not after:    Mon 21 Oct 2024 05:28:42 +0000
Subordinate resources:    AS: 268397
                          IP: 45.160.104.0/22
                          IP: 2804:5094::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:77:ae:79:ae:89:67:95:77:6d:cd:de:8f:37:68:b9:fa:20:ec:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 23 05:23:42 2023 GMT
            Not After : Oct 21 05:28:42 2024 GMT
        Subject: CN=CBF316E6B2EE03544A2F46C3011C57AA5538C054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d8:ac:39:94:f0:d7:90:41:a2:be:4b:e0:d8:
                    1d:97:6f:ce:d5:e9:b1:07:d6:40:05:bd:4b:cd:2f:
                    20:d8:19:27:5e:de:e8:24:c5:bf:fc:20:99:bc:50:
                    d2:5a:3f:a1:cb:74:4a:03:17:ed:d4:59:74:4b:bd:
                    34:f6:9f:d7:8a:3d:92:5f:cb:97:bb:bc:88:e3:6e:
                    77:d8:42:05:bb:df:a0:38:04:f2:0d:85:97:72:34:
                    35:13:be:67:95:b9:43:9d:65:5e:0c:37:5e:f0:83:
                    aa:a2:bb:c6:2c:1a:94:08:3a:56:1a:1a:56:9a:0a:
                    23:7d:67:91:8d:94:66:87:50:12:4d:be:87:ef:a8:
                    b8:ff:79:f6:55:b4:68:d2:98:14:77:3b:f4:e2:38:
                    fd:be:78:e4:b6:6f:16:d2:23:c7:26:40:35:bb:a2:
                    19:62:b4:d5:44:27:e2:3f:1e:64:91:14:92:ef:3c:
                    45:cb:a0:29:f7:09:4d:fb:86:13:a7:c3:20:02:1c:
                    29:b0:71:da:84:54:69:68:46:80:28:d2:fc:59:3b:
                    ff:cc:5b:c4:29:e1:d0:e6:06:14:80:14:40:3f:e5:
                    a6:ae:f5:5b:86:ac:f0:3c:30:61:d7:b9:5f:e2:c7:
                    6b:66:c9:74:0b:00:12:e4:5b:06:a5:aa:66:85:4b:
                    92:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:F3:16:E6:B2:EE:03:54:4A:2F:46:C3:01:1C:57:AA:55:38:C0:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/CBF316E6B2EE03544A2F46C3011C57AA5538C054.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.104.0/22
                IPv6:
                  2804:5094::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268397

    Signature Algorithm: sha256WithRSAEncryption
         92:91:f1:51:0f:9e:04:00:99:60:a8:85:d4:29:c8:ae:ef:e6:
         8c:ed:11:3d:97:aa:8c:de:3d:85:a9:3c:fc:4f:1c:2e:ca:52:
         1b:a6:77:f8:e4:f8:90:71:67:34:61:53:75:b4:f4:5f:1c:f4:
         fb:35:dc:94:28:1a:eb:53:e9:90:92:bf:e1:f2:10:99:41:97:
         93:c5:c9:70:a0:db:c4:c3:b5:bf:f5:fb:4e:49:cf:93:26:5c:
         41:35:61:19:6e:ca:23:67:7f:07:61:4a:ba:98:c7:9c:c3:7c:
         0f:03:08:5f:84:e6:6f:ea:8a:0e:2c:0c:10:a4:15:c0:41:af:
         90:d5:39:d5:fa:74:58:e8:eb:15:83:86:4c:c0:60:11:8d:d6:
         b9:a8:0c:42:9b:1a:07:e8:9a:b6:80:ae:62:3e:16:fc:56:ff:
         40:f4:d9:62:d2:36:46:46:b3:24:6c:09:72:13:fc:07:e0:05:
         3a:c4:77:1c:92:18:bc:0c:f6:ec:fb:96:4a:e8:70:5b:78:af:
         66:93:f6:0e:78:1e:8e:2f:bc:b6:90:52:b6:90:65:57:79:40:
         8d:2d:21:00:6e:a0:e9:51:02:b9:98:27:7a:97:8d:8a:b4:c7:
         d0:4d:e3:60:db:7b:44:50:87:72:19:c7:51:1a:ab:a9:4d:92:
         6a:32:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org