Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.cer
File:                     02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.cer (raw, json)
Hash identifier:          9/Vai/yqjbKen7z87Xd22FmEEy32kIAQ2XiYudtLH4A=
Subject key identifier:   02:C5:82:0C:BF:46:85:81:E6:A9:8E:FA:0E:6A:0B:AE:60:53:6F:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2350D97DA69D3DB66ADB9F05B495BC9D7563C498
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Dec 2023 12:12:09 +0000
Certificate not after:    Tue 24 Dec 2024 12:17:09 +0000
Subordinate resources:    AS: 270254
                          IP: 45.191.40.0/22
                          IP: 2804:6930::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:50:d9:7d:a6:9d:3d:b6:6a:db:9f:05:b4:95:bc:9d:75:63:c4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 26 12:12:09 2023 GMT
            Not After : Dec 24 12:17:09 2024 GMT
        Subject: CN=02C5820CBF468581E6A98EFA0E6A0BAE60536F0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:31:e9:f3:ec:8c:54:0b:0b:50:9a:3f:9e:ea:
                    ff:f4:f9:b0:eb:1b:83:dd:df:f1:ad:8c:f4:75:32:
                    9e:d2:7e:a9:f7:d8:70:50:eb:fb:9e:aa:14:81:8d:
                    89:dd:83:9f:1c:ce:e2:18:47:ec:b3:61:68:76:29:
                    ec:7f:d1:d1:be:e6:e1:30:20:41:53:92:7d:42:c2:
                    eb:a4:39:49:ce:c1:84:c4:64:55:4d:3a:38:d2:4b:
                    bd:69:f7:35:dc:0d:ce:3b:d1:c0:c1:0c:92:af:a3:
                    09:dd:55:f1:2c:24:0e:3e:5f:70:89:02:d4:73:43:
                    86:9d:f9:e5:69:42:6f:cf:49:fa:ca:e2:bd:cb:81:
                    a7:ae:0b:48:14:9c:4e:57:d0:32:5e:b6:10:81:2f:
                    94:48:25:92:33:a6:c6:c5:2d:28:63:bd:55:15:52:
                    7a:e4:31:1e:57:60:5b:5f:b1:98:2a:9f:06:f6:15:
                    d7:f6:92:6e:b7:92:5a:59:90:c3:b1:13:84:22:00:
                    88:66:09:39:6c:f6:7f:0e:94:ae:65:07:7e:1e:97:
                    d5:a3:60:d3:b2:4c:5e:b9:2a:ae:c3:6b:ba:b5:ad:
                    61:ee:e8:6f:05:ed:05:8b:e6:76:ad:00:93:10:73:
                    0e:af:ba:fb:62:33:a6:f9:fe:0d:10:d0:f2:7a:8d:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:C5:82:0C:BF:46:85:81:E6:A9:8E:FA:0E:6A:0B:AE:60:53:6F:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XDvbqT8FghPBx5PLNZEP3d2wk47x7Z6doCgXV8ikfKs/0/02C5820CBF468581E6A98EFA0E6A0BAE60536F0C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.40.0/22
                IPv6:
                  2804:6930::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270254

    Signature Algorithm: sha256WithRSAEncryption
         82:33:4c:0c:0e:c4:77:95:e8:f4:47:34:94:a5:08:7a:38:bd:
         c9:ef:d3:bc:64:ec:ce:b3:5e:19:e6:69:e3:ad:4a:34:aa:de:
         2c:24:3e:83:1a:8d:20:70:26:fc:eb:f6:a8:46:6d:ef:9b:df:
         9e:2b:5d:e0:19:f4:cd:cd:25:1f:e3:70:a0:59:90:16:58:f0:
         93:3f:93:ed:bd:63:15:d1:82:08:f0:7e:0c:7c:4c:6a:c8:f2:
         23:66:48:a0:ec:6e:98:9c:40:82:2f:57:1e:18:d4:49:03:f4:
         35:e6:21:04:e2:90:fd:b7:a6:d3:45:9e:6c:3e:fe:23:32:d7:
         ed:e8:08:70:99:1b:a5:11:9a:a7:01:a0:a1:b4:48:c8:1b:b2:
         eb:28:11:e1:23:2c:16:43:c2:03:fb:09:de:3d:77:fb:81:62:
         f8:9f:3c:92:b5:57:28:c7:b7:ac:71:4a:15:45:6d:0e:08:15:
         4e:e4:0e:bc:43:f4:35:45:f1:65:d3:27:29:7d:2d:4a:4d:6d:
         02:14:66:25:a7:b8:d9:60:e9:cd:ca:5d:4e:a4:ab:95:0f:28:
         32:ff:ed:a7:94:b6:9a:c3:9d:fe:86:75:2d:64:90:da:ca:9e:
         60:e9:a6:64:15:fa:92:9d:30:31:e3:e8:be:fd:2b:81:c4:84:
         54:2d:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org