Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
File:                     022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer (raw, json)
Hash identifier:          X3MiEqOn26/sEb4YoRvm16OZIumKbO+Qima3IrwMW5E=
Subject key identifier:   02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0626A73B119F897E9F9026BFC31831553A756CFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.mft
caRepository:             rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Jul 2023 10:23:58 +0000
Certificate not after:    Mon 01 Jul 2024 10:28:58 +0000
Subordinate resources:    AS: 28594
                          IP: 200.218.240.0/20
                          IP: 2804:5208::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:26:a7:3b:11:9f:89:7e:9f:90:26:bf:c3:18:31:55:3a:75:6c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  3 10:23:58 2023 GMT
            Not After : Jul  1 10:28:58 2024 GMT
        Subject: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:60:cc:0b:56:30:c8:4b:65:76:67:82:a2:0a:
                    09:cf:d9:67:e2:b4:e9:4e:b6:3c:42:c7:5c:52:fa:
                    94:98:1f:13:b2:e6:0c:c0:ae:8a:12:36:d3:35:97:
                    22:53:65:34:8b:11:aa:3a:3e:23:44:46:d5:11:6c:
                    58:96:b8:1e:22:53:1a:a7:cd:1c:51:10:aa:bf:fe:
                    bf:52:25:c8:4c:77:42:7a:92:d1:94:cb:24:b3:c4:
                    8b:b4:20:22:e0:79:a8:a5:31:e9:f8:6d:9f:a1:9c:
                    15:60:01:35:a3:e4:59:7d:7a:53:93:4d:4a:99:ad:
                    1f:08:81:4b:7d:a7:bd:67:9a:08:17:ef:09:d0:89:
                    1a:e2:f0:b2:f2:b6:4a:4b:1a:c2:90:48:81:69:03:
                    36:db:be:cd:e0:6b:7c:d8:71:37:93:c1:68:2f:c6:
                    f7:d5:58:ca:6b:45:1b:51:0b:53:91:df:8c:eb:82:
                    90:f5:8e:90:1e:72:13:7e:20:37:57:e6:8b:fc:39:
                    e0:a7:dc:29:d8:50:78:f2:88:cf:a6:dc:28:08:62:
                    7d:a4:c2:16:c4:95:7a:d5:93:41:da:9d:9e:df:3a:
                    7c:27:ac:8d:95:39:ab:f1:04:9d:43:bf:1d:8c:8e:
                    fd:23:e5:23:d0:eb:24:42:86:bf:59:74:74:f3:93:
                    e8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/20
                IPv6:
                  2804:5208::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28594

    Signature Algorithm: sha256WithRSAEncryption
         8f:ce:e4:65:70:82:82:cb:b5:75:e2:8c:d8:5e:df:43:38:91:
         f8:56:90:04:39:64:58:ce:7b:99:ab:5a:e2:89:df:01:63:06:
         1a:d9:bc:45:3b:5a:5a:eb:9c:c9:50:3b:83:38:85:74:99:7f:
         c3:28:d1:27:ad:2f:32:5d:07:79:86:22:db:27:d1:51:c1:39:
         c0:10:ac:a7:b8:2a:f9:96:41:0b:ce:d9:77:0e:47:af:c7:ef:
         b8:be:42:cf:e6:8b:1f:68:41:bd:53:98:70:19:b7:22:28:b3:
         dd:04:19:35:76:a0:4e:d6:70:93:ac:c3:4f:7c:29:ea:f1:80:
         c5:d4:8e:b2:37:e0:fa:0d:87:e9:9d:6d:87:e9:22:96:41:39:
         5a:e7:d4:7e:1f:36:d7:bf:e3:d7:d9:fa:55:ce:dd:3c:cd:d5:
         ae:09:9b:28:bc:4e:bd:86:ec:27:8a:cd:f5:13:21:f2:1f:81:
         a0:de:41:88:3f:d7:77:c5:17:cf:e4:69:82:e0:58:01:ae:9e:
         35:85:25:76:4d:26:6b:22:7c:31:70:3c:99:ad:5c:14:40:b9:
         50:55:e6:9d:de:73:d5:d1:92:2f:8a:06:03:6d:72:d8:66:33:
         ce:e3:34:a9:b6:f7:44:55:48:f1:4c:87:fc:4d:d3:ed:04:84:
         e8:d9:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org