Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/02BE9D3BE35C73ACE0476D55CBE98B424A4D1547.cer
File:                     02BE9D3BE35C73ACE0476D55CBE98B424A4D1547.cer (raw, json)
Hash identifier:          MonnHwqxh7fuq2WF8p0e6GZI353VhZlNbgJJlrETK6U=
Subject key identifier:   02:BE:9D:3B:E3:5C:73:AC:E0:47:6D:55:CB:E9:8B:42:4A:4D:15:47
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       52B66553E7EE96473C215EFD3C3DC1573AC52325
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/02BE9D3BE35C73ACE0476D55CBE98B424A4D1547.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 May 2023 19:16:50 +0000
Certificate not after:    Tue 07 May 2024 19:21:50 +0000
Subordinate resources:    AS: 267668
                          IP: 45.224.72.0/22
                          IP: 2804:4508::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b6:65:53:e7:ee:96:47:3c:21:5e:fd:3c:3d:c1:57:3a:c5:23:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  9 19:16:50 2023 GMT
            Not After : May  7 19:21:50 2024 GMT
        Subject: CN=02BE9D3BE35C73ACE0476D55CBE98B424A4D1547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d7:33:de:6c:4b:49:a2:02:04:16:e9:48:20:
                    19:9b:c6:4f:a9:6f:24:e0:31:53:3b:c0:4a:74:a5:
                    39:52:93:3f:02:d5:1e:de:9d:71:bc:54:09:6f:3a:
                    b7:c9:6a:11:d8:da:71:90:da:2a:9a:a6:45:89:d3:
                    5b:92:a5:b8:a6:c8:97:b6:19:19:e5:e5:ad:56:f6:
                    5a:ff:9f:01:46:bd:44:68:f1:45:15:4b:4e:49:66:
                    0a:4b:b2:a3:ca:77:32:d0:b6:4b:3c:4a:0b:ba:2d:
                    01:9d:22:43:5a:34:5a:21:76:20:a3:20:e4:2b:08:
                    b4:98:f2:a7:cd:54:d9:0c:0a:9f:b6:3d:65:f0:b5:
                    52:6b:87:1b:f2:4c:6e:53:03:be:d1:a2:77:b1:29:
                    14:d4:8c:3d:3c:44:a4:87:a7:23:5e:ed:38:d7:09:
                    3e:a6:26:a0:5c:ac:4f:c6:d3:13:52:1a:4c:57:9b:
                    e8:97:bb:4e:a4:2e:cf:9e:bb:b0:a9:28:3b:b3:08:
                    b3:3a:d4:6a:c0:83:d1:60:95:7e:15:dc:d5:88:8a:
                    f2:7b:40:2e:8f:e6:af:16:50:e5:7a:6c:ab:a5:3a:
                    f0:dd:70:a5:6a:a5:8c:03:37:5a:6c:36:c7:b8:0e:
                    4e:58:64:ea:a7:63:65:84:62:84:3f:a5:e0:e9:62:
                    6e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:BE:9D:3B:E3:5C:73:AC:E0:47:6D:55:CB:E9:8B:42:4A:4D:15:47
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EUbpFYKTQsmVpn9owjqCvNyqCsB3Xd72NW5gZGyikyLa/0/02BE9D3BE35C73ACE0476D55CBE98B424A4D1547.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.72.0/22
                IPv6:
                  2804:4508::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267668

    Signature Algorithm: sha256WithRSAEncryption
         02:41:45:b2:ed:aa:b8:c8:29:a3:14:c9:a7:5b:15:d7:8b:7e:
         d8:a6:81:38:ba:13:bc:d9:3a:20:32:5f:9c:e2:30:83:5a:98:
         f3:04:d9:3a:12:91:c1:58:5f:8d:8b:86:ef:12:2e:b3:f8:b2:
         4e:e8:49:ec:f9:3e:40:af:3b:d9:25:76:3b:96:94:4f:05:bc:
         59:30:1d:ea:67:10:45:c4:42:e9:52:b6:6c:a6:c2:e6:3d:28:
         53:f2:a0:42:79:0e:ac:4a:4e:94:45:d2:c7:94:03:de:78:68:
         ff:5c:ff:c8:ed:53:cd:ab:71:18:75:68:75:bd:0f:2c:e8:d8:
         63:bf:82:82:35:0d:09:19:c4:ca:aa:1b:1e:2e:d2:1e:64:77:
         9b:4f:b4:45:ea:e3:5f:e3:1d:0f:cf:82:d2:f2:00:57:bc:e7:
         23:53:fa:77:d0:a7:55:14:9f:8e:b1:c4:dc:28:d0:96:13:cc:
         64:b2:40:d7:08:df:7f:d6:14:17:07:e8:ff:f9:f3:b8:e8:e3:
         9f:2b:e1:f9:24:09:e0:1d:83:89:87:dc:87:a9:06:02:bc:69:
         6a:6a:fc:f4:e8:1c:f4:66:0b:ad:07:d7:63:5c:74:d9:4a:1a:
         47:18:88:42:79:c1:df:f3:7b:f1:d5:5b:eb:a0:0b:89:78:d3:
         6f:8b:fb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org