Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3.cer
File:                     02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3.cer (raw, json)
Hash identifier:          WDGAZHO7h1FGm9P7dR9FbpD9VE/dcnkZ/DuD+iZaPAQ=
Subject key identifier:   02:A6:52:AC:86:BF:FF:5E:3B:32:1D:94:C1:C1:4F:5A:F8:0C:E1:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       69D65D62CB5BE4CBD944A7F443D69E0E0504E3F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/1/02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Nov 2023 06:55:52 +0000
Certificate not after:    Tue 19 Nov 2024 07:00:52 +0000
Subordinate resources:    AS: 270254
                          IP: 45.191.40.0/22
                          IP: 2804:6930::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d6:5d:62:cb:5b:e4:cb:d9:44:a7:f4:43:d6:9e:0e:05:04:e3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 21 06:55:52 2023 GMT
            Not After : Nov 19 07:00:52 2024 GMT
        Subject: CN=02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d7:e2:5d:78:e3:66:20:68:03:f1:46:b1:0e:
                    8b:be:20:e6:38:ac:67:f0:12:18:fa:f5:46:59:3d:
                    eb:e0:f3:e1:0c:75:17:21:40:36:d0:61:1b:eb:65:
                    da:dc:02:d7:6b:bd:1d:58:71:b5:25:46:f6:56:5d:
                    c9:90:a7:dd:93:32:3e:e8:ac:e4:9b:0f:16:b6:85:
                    67:40:01:5a:51:32:81:05:75:0d:45:fc:be:d3:dd:
                    d7:5f:1f:e3:da:28:a0:bb:8a:4a:fd:46:0f:f2:41:
                    5e:a1:16:6e:47:e2:0b:05:c5:d0:9f:c3:74:7b:87:
                    0e:1e:af:48:a0:75:73:d7:16:5e:9f:88:2a:cc:35:
                    dd:fc:a0:85:51:f8:ce:19:8e:83:7b:1c:44:94:cb:
                    bd:de:87:0e:c6:aa:04:5d:da:fa:7a:03:32:00:7a:
                    d0:3b:95:5b:c5:e9:2d:e0:c9:fd:18:59:59:9d:39:
                    71:ab:87:7e:ed:33:28:ac:78:8b:2c:02:b6:2b:57:
                    8b:05:0a:36:23:60:bf:55:b4:a7:20:fc:88:e1:14:
                    86:da:77:bb:37:95:52:a5:9e:6a:60:4b:60:7f:27:
                    1d:f2:3c:5b:26:92:02:aa:a2:f0:22:6e:2a:3d:fa:
                    1a:ba:8c:cf:55:ff:8c:ad:26:29:c6:30:bd:ed:55:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:A6:52:AC:86:BF:FF:5E:3B:32:1D:94:C1:C1:4F:5A:F8:0C:E1:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/1/02A652AC86BFFF5E3B321D94C1C14F5AF80CE1B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.40.0/22
                IPv6:
                  2804:6930::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270254

    Signature Algorithm: sha256WithRSAEncryption
         02:8f:63:66:9a:b7:46:a3:50:7c:fe:47:5b:9a:fb:40:d6:df:
         d8:d4:52:fb:cf:f8:af:44:e1:c1:2d:e8:4b:a3:fa:30:5b:52:
         1f:ef:09:ff:3e:31:b0:e7:ee:3a:f8:6e:45:55:1d:bb:cc:02:
         b3:f8:0b:1d:74:01:37:66:e7:2c:02:f3:e7:2f:1d:6a:3b:2a:
         80:34:22:8a:a3:2e:08:ac:9b:7b:64:dc:8f:84:f3:e4:0c:99:
         b3:62:bd:7c:6e:1f:f2:d5:52:cc:c1:28:cc:b9:6d:ea:fd:bb:
         81:bc:68:83:e4:17:b5:f2:f3:d6:0f:0d:18:ec:33:1e:95:7d:
         5c:cb:e7:07:a0:40:fa:0e:7d:dc:7a:f0:87:bd:b1:11:9e:43:
         4b:b9:c3:19:6d:0d:a2:3e:59:91:37:ee:0a:88:b0:16:e6:b2:
         51:bb:1e:36:a4:08:99:0f:60:73:03:00:3d:c1:5b:53:6c:67:
         3f:8c:0a:ac:87:24:86:6d:c2:e3:e9:32:92:6d:61:d3:ef:ec:
         16:5b:6e:8f:db:8f:11:90:a7:2b:3f:c3:c0:6c:0c:4b:fa:18:
         44:39:47:1e:d7:5d:ac:58:04:1c:cd:b6:68:96:59:64:1b:b3:
         a9:09:64:39:4a:dc:cf:fc:6f:00:88:b1:6b:99:3a:ea:3f:69:
         10:5f:7e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org