Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/01BD4EA843E55AF6E6D645D74C2221FB6B121CCE.cer
File:                     01BD4EA843E55AF6E6D645D74C2221FB6B121CCE.cer (raw, json)
Hash identifier:          8+SOIdwv/Agz3s4bUxcannh+gkjEmYItLICnxvhl4IU=
Subject key identifier:   01:BD:4E:A8:43:E5:5A:F6:E6:D6:45:D7:4C:22:21:FB:6B:12:1C:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4105CA3560CE0679838AD978B9ADFF66EBD366C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/01BD4EA843E55AF6E6D645D74C2221FB6B121CCE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Mar 2024 01:32:27 +0000
Certificate not after:    Fri 14 Mar 2025 01:37:27 +0000
Subordinate resources:    AS: 269674
                          IP: 45.191.140.0/22
                          IP: 2804:6830::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:05:ca:35:60:ce:06:79:83:8a:d9:78:b9:ad:ff:66:eb:d3:66:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 15 01:32:27 2024 GMT
            Not After : Mar 14 01:37:27 2025 GMT
        Subject: CN=01BD4EA843E55AF6E6D645D74C2221FB6B121CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:71:64:9f:ce:a7:31:e5:75:e4:1d:9e:91:
                    3f:f7:23:3b:98:ec:c7:ad:5e:e8:b2:fc:70:35:5c:
                    e9:03:f5:86:12:70:49:3c:71:9e:e2:08:6a:cc:c9:
                    3f:a0:b4:28:aa:8d:f9:03:f7:f5:02:35:31:bd:40:
                    e2:31:80:f7:1f:f4:0d:2b:71:82:9d:24:9b:c7:13:
                    42:d7:5d:4f:f0:ac:3a:75:51:60:73:2c:db:42:f4:
                    8b:c6:55:b6:fa:8b:ca:ff:68:cc:63:e0:46:4d:fe:
                    b2:a9:42:23:05:e5:6e:49:48:35:45:0b:a0:39:9c:
                    9a:03:97:e9:de:62:2e:e1:ac:93:1a:7a:d1:f8:bd:
                    92:bf:10:d6:f7:53:27:7e:a1:86:52:2e:a4:fa:07:
                    ae:3e:da:bd:50:01:10:e1:72:44:c6:e1:20:3c:41:
                    6a:d1:09:8b:14:23:a4:22:43:ad:69:b8:96:f8:f0:
                    8f:53:31:0e:a3:00:c4:41:65:e4:3d:99:25:a2:50:
                    bb:09:5a:e4:f4:8f:ca:a4:63:f5:f3:9a:20:8b:9c:
                    31:d4:51:18:00:8a:66:6b:cf:25:ea:2a:4d:9f:3d:
                    15:87:9b:24:03:31:fe:0c:8b:8f:22:e2:95:22:39:
                    00:67:d8:dd:c2:f4:de:82:7d:2a:cd:12:6d:a7:71:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:BD:4E:A8:43:E5:5A:F6:E6:D6:45:D7:4C:22:21:FB:6B:12:1C:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/01BD4EA843E55AF6E6D645D74C2221FB6B121CCE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.140.0/22
                IPv6:
                  2804:6830::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269674

    Signature Algorithm: sha256WithRSAEncryption
         07:55:3d:16:f7:e5:63:ea:46:61:f2:a7:86:4c:b1:2b:87:1d:
         59:51:94:0a:b1:ea:84:16:16:54:8d:fc:dc:61:c1:c7:be:c0:
         63:6d:e7:0b:bf:a1:ac:42:08:96:d6:69:92:a3:ca:f2:cd:d6:
         bc:8d:be:2c:c2:34:64:f5:9a:04:bf:13:5a:52:76:aa:3f:0f:
         bc:ac:a7:ab:df:b7:e5:a0:55:43:af:c5:64:36:ce:01:aa:e9:
         d5:8b:65:cc:a2:4d:e6:26:44:59:fe:e5:fa:7c:19:d0:4d:c1:
         96:44:eb:4c:ed:90:6b:2c:7f:05:06:d5:04:aa:1c:1d:ea:67:
         96:d5:d2:96:42:00:63:dc:2d:af:3f:3f:af:ce:49:8f:5c:c4:
         6b:f1:aa:cf:29:3d:d9:50:25:1d:47:00:10:bb:f5:5e:94:f1:
         2a:d6:f7:04:85:01:a3:29:41:a8:d7:d3:11:ac:0e:4b:8d:be:
         65:6d:cf:3a:d9:cf:09:d5:c2:ff:05:b0:97:be:1b:cd:49:49:
         93:c4:4d:ac:73:fd:94:7c:f6:b2:80:d4:fd:e6:00:80:c7:18:
         1e:3b:18:98:99:06:1e:ff:55:4d:92:39:c9:8d:14:07:ae:e4:
         ee:6c:19:6b:54:0a:ea:a8:e2:e1:b8:f5:cd:e7:7d:38:8a:8b:
         52:82:72:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org