Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/00835FE3B3B65459D0B1F496CF7277321403C989.cer
File:                     00835FE3B3B65459D0B1F496CF7277321403C989.cer (raw, json)
Hash identifier:          LKSUknV/tQ8HhxcGY48LkYUTuU93jEmF5hVtbZ12RGk=
Subject key identifier:   00:83:5F:E3:B3:B6:54:59:D0:B1:F4:96:CF:72:77:32:14:03:C9:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D1C94A97EDFEA1461E916B59884AA654C30918D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/00835FE3B3B65459D0B1F496CF7277321403C989.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 12:17:57 +0000
Certificate not after:    Tue 11 Mar 2025 12:22:57 +0000
Subordinate resources:    AS: 269647
                          IP: 45.190.136.0/22
                          IP: 2804:67bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:1c:94:a9:7e:df:ea:14:61:e9:16:b5:98:84:aa:65:4c:30:91:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 12:17:57 2024 GMT
            Not After : Mar 11 12:22:57 2025 GMT
        Subject: CN=00835FE3B3B65459D0B1F496CF7277321403C989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:5b:a6:e7:45:83:41:77:ce:c3:cc:b9:73:
                    f8:be:4f:b9:70:92:70:0e:7a:8f:b8:9c:4e:9c:9d:
                    ab:15:a4:a7:10:81:bc:4c:44:7d:8d:b8:14:ff:17:
                    07:17:ea:2a:43:e8:92:71:4e:0c:a7:a4:5d:d3:60:
                    f0:1a:34:fe:eb:92:0e:97:3e:b8:00:39:0e:5f:43:
                    9e:29:92:1d:9b:11:66:d3:47:e2:3a:eb:9e:95:e0:
                    12:65:f7:aa:e3:73:e1:e1:55:c9:20:db:4e:13:40:
                    c6:a8:d7:91:30:7b:58:94:30:24:47:a5:b4:1e:a0:
                    c7:a0:ab:7e:26:05:34:34:c7:db:da:34:12:c7:9b:
                    fe:01:d6:8d:26:e9:05:e9:f5:5e:24:99:94:57:74:
                    55:bd:95:3d:a9:d8:61:27:d8:20:7d:d0:95:9c:7d:
                    c7:18:45:91:2a:91:f4:c8:e3:ce:17:d0:c8:be:8a:
                    6d:7c:29:de:37:26:30:1c:0b:e2:05:7c:1c:21:ba:
                    25:28:f6:aa:d9:00:7d:50:20:2c:81:a1:b2:61:ca:
                    90:56:54:e0:e3:b1:a9:2a:7d:2b:e4:d6:50:e9:81:
                    e0:40:07:dd:c5:12:35:66:93:93:c8:38:76:1a:f8:
                    5a:5a:c6:5a:8a:ff:cb:d3:ed:19:5f:f5:49:d0:f3:
                    4d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                00:83:5F:E3:B3:B6:54:59:D0:B1:F4:96:CF:72:77:32:14:03:C9:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/00835FE3B3B65459D0B1F496CF7277321403C989.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.136.0/22
                IPv6:
                  2804:67bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269647

    Signature Algorithm: sha256WithRSAEncryption
         a0:85:4f:40:a4:48:3b:0b:75:8d:b4:41:ef:3d:3c:1c:05:a9:
         72:56:d5:62:e3:57:eb:aa:38:b3:a6:7a:e4:54:82:bd:ce:0f:
         64:91:31:71:28:4f:fb:79:55:dd:da:85:7c:0b:9b:42:2b:a3:
         a2:aa:18:29:52:b0:40:3d:9b:bb:fb:52:17:23:83:57:17:1d:
         09:1d:ff:3f:11:b7:67:00:3d:07:2d:bd:d1:03:63:4d:24:e1:
         a4:6d:f6:c5:b6:2c:41:d8:f1:95:d5:55:c7:f0:17:6a:3a:08:
         92:7d:f7:45:2d:05:54:1e:a0:d8:3a:c1:e0:46:c5:82:bc:5c:
         21:8b:4d:78:99:65:2b:5e:0f:fc:5c:f4:15:cc:79:75:00:b3:
         d4:b7:20:da:4f:4a:ce:94:b6:59:f2:bb:49:da:e9:e9:c5:72:
         d8:4e:5e:10:88:11:db:df:7c:98:11:b5:c8:2b:48:0e:41:1c:
         79:fc:8b:30:7c:3b:cd:ea:49:2d:4f:7c:c2:65:ed:8b:fb:42:
         ab:fa:61:73:81:c1:5f:64:60:e1:76:40:d3:19:24:b6:6d:39:
         a1:4f:ce:8b:62:d8:02:4d:35:d3:4f:cc:f2:62:15:8d:e6:a8:
         08:b5:d5:67:7d:b8:c7:b2:70:cb:71:df:dd:5f:cd:45:a7:09:
         bf:6f:75:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org