Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.cer
File:                     02CE5A602E5A896CBDC5293E334F2E37079D18D4.cer (raw, json)
Hash identifier:          pQylhjtRW+YUAPDnhDySiSxr6BT2YVkrHWKXTqJg4hU=
Subject key identifier:   02:CE:5A:60:2E:5A:89:6C:BD:C5:29:3E:33:4F:2E:37:07:9D:18:D4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       F1565857ABA463DBFFF0A76C2BD3589376B614
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Jan 2023 04:42:58 +0000
Certificate not after:    Tue 02 Jan 2024 04:47:58 +0000
Subordinate resources:    AS: 268187
                          IP: 45.171.60.0/22
                          IP: 2804:5964::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f1:56:58:57:ab:a4:63:db:ff:f0:a7:6c:2b:d3:58:93:76:b6:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  3 04:42:58 2023 GMT
            Not After : Jan  2 04:47:58 2024 GMT
        Subject: CN=02CE5A602E5A896CBDC5293E334F2E37079D18D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4d:54:37:df:76:15:eb:d4:ea:5c:ff:92:66:
                    69:c4:f3:b9:37:4e:54:71:e9:05:40:9c:f6:9d:ff:
                    8b:51:d8:90:b0:48:c0:5a:36:3f:14:9d:af:1a:16:
                    66:d6:74:cb:a0:89:66:d0:ad:0f:7a:58:95:c4:4e:
                    a7:cc:2f:ba:19:b6:ed:30:c4:75:49:d0:27:ca:2f:
                    41:67:e9:4d:1f:c3:c1:95:27:48:f4:fc:38:cf:f0:
                    ef:55:1f:0c:d9:3c:11:51:b8:0a:39:ce:8f:22:e4:
                    5c:49:73:f6:8d:23:57:25:ad:4e:92:33:c7:81:c7:
                    8d:43:08:03:38:4d:ee:10:88:e0:f9:22:bf:05:fa:
                    b7:eb:fb:67:f1:02:1b:6e:47:d1:40:7b:59:21:4b:
                    9b:34:41:61:10:a0:4a:ec:ed:44:63:07:09:43:8e:
                    b1:07:a8:ac:ac:c9:8b:ed:2f:a0:cf:2c:ab:38:9d:
                    c9:c8:24:a7:4b:e0:86:de:16:6d:51:ca:e7:5b:99:
                    87:06:93:1b:30:43:dc:2f:9d:4e:28:04:4d:48:57:
                    5c:d6:86:d8:8d:19:4c:ec:cc:8f:b5:1d:2a:7c:87:
                    51:de:38:f5:a8:96:98:10:84:1a:10:9f:fc:37:34:
                    a4:f4:28:a9:ca:f5:0b:d8:2c:ae:42:60:5b:87:78:
                    72:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:CE:5A:60:2E:5A:89:6C:BD:C5:29:3E:33:4F:2E:37:07:9D:18:D4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E2g3YD8f1ySfjq5vrNGYPVJZbxn9rNUTVG5VHN7ULRF8/0/02CE5A602E5A896CBDC5293E334F2E37079D18D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.60.0/22
                IPv6:
                  2804:5964::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268187

    Signature Algorithm: sha256WithRSAEncryption
         38:14:18:9a:99:93:c9:dc:a6:bd:27:63:75:48:2f:54:74:bf:
         fc:ca:4c:32:4a:f5:d9:ac:92:f7:d5:38:dc:66:5d:9d:16:3b:
         32:1f:4e:d7:be:73:46:77:2f:17:03:0f:1c:7f:90:29:05:9c:
         89:8a:4f:8b:fd:b6:ef:ed:a5:b8:95:97:b1:c9:d4:ca:69:cc:
         15:be:15:dc:ac:33:45:1c:59:7e:8a:4a:fe:a2:23:db:2a:f4:
         7e:09:90:72:2f:36:ab:c1:6c:b4:07:f9:ad:05:92:48:ac:26:
         9b:e4:2c:85:ca:56:f6:d0:68:c3:0c:f8:b9:6c:73:8d:4a:cc:
         f4:cc:53:e5:fe:82:ca:bf:6f:62:5c:2e:d2:0f:93:a2:5c:e8:
         96:13:dc:84:7c:7a:8c:cc:89:59:57:69:ce:75:28:fb:ac:3b:
         06:7a:12:a7:50:3e:d9:3e:e5:0b:12:c8:29:05:c8:ec:f1:66:
         f3:59:58:98:c8:21:8c:f9:ca:fc:be:49:5e:4d:32:21:f1:43:
         bf:c4:a7:03:6b:fb:ef:96:0a:11:fb:34:20:8d:f6:97:62:33:
         e5:69:0b:80:ee:76:a4:47:ba:ef:13:16:e1:d1:ae:ac:43:69:
         01:2a:e6:9a:09:65:83:de:3a:f8:48:7f:14:60:23:51:d6:2d:
         6c:06:67:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org