Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/02D248AA52D660570300A2C537102DC174ED8461.cer
File:                     02D248AA52D660570300A2C537102DC174ED8461.cer (raw, json)
Hash identifier:          Ff6/5bOpjEebrfcafvqv7e3l1LYfh2cMExxP+4wW56g=
Subject key identifier:   02:D2:48:AA:52:D6:60:57:03:00:A2:C5:37:10:2D:C1:74:ED:84:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       69BFD575B28A595C359849279A85D3DFDC9745C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/02D248AA52D660570300A2C537102DC174ED8461.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 18:05:11 +0000
Certificate not after:    Thu 07 Nov 2024 18:10:11 +0000
Subordinate resources:    AS: 267072
                          IP: 45.225.200.0/22
                          IP: 2804:47b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:bf:d5:75:b2:8a:59:5c:35:98:49:27:9a:85:d3:df:dc:97:45:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 18:05:11 2023 GMT
            Not After : Nov  7 18:10:11 2024 GMT
        Subject: CN=02D248AA52D660570300A2C537102DC174ED8461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:3e:4b:85:34:4f:85:d5:45:8d:e1:e4:b3:
                    3c:39:d5:47:09:1e:ea:80:32:73:0a:91:93:67:43:
                    87:9f:bd:48:68:7d:81:b0:e2:3f:ed:af:d3:28:ad:
                    28:03:03:62:1a:a2:df:3f:cf:1b:7c:0a:63:75:88:
                    13:ad:33:bf:0a:83:2d:d6:99:07:64:34:57:4b:6b:
                    37:8b:0a:18:b2:d5:bb:0f:83:2e:4c:c6:83:68:58:
                    ba:c6:13:6c:81:a7:c2:fc:37:56:9e:14:d8:9c:a5:
                    d0:8c:f9:8b:4e:57:91:cc:64:a7:5d:6d:96:ce:0c:
                    b6:78:32:31:2f:91:47:58:38:be:d7:25:1d:52:4b:
                    7b:87:35:cf:b2:44:64:9d:b3:b4:1b:79:d3:b6:00:
                    11:4b:e4:26:f7:23:c5:cc:8b:2c:84:f9:b5:d6:47:
                    eb:4f:d4:f3:2c:c0:a3:22:a2:d5:9d:7c:7d:ad:7a:
                    88:26:2e:d1:5e:da:10:18:61:36:b6:34:92:40:35:
                    6c:28:16:1b:39:cb:e0:d3:8d:48:98:88:80:73:7c:
                    9a:fe:b2:6a:0a:a8:f5:a1:f8:a4:f2:27:fa:5b:86:
                    91:c6:1e:db:43:3a:16:a6:06:6d:8c:01:87:f5:de:
                    11:42:c0:92:d6:22:9d:29:6e:c7:5f:6a:b4:30:4f:
                    46:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:D2:48:AA:52:D6:60:57:03:00:A2:C5:37:10:2D:C1:74:ED:84:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CqyCGoP3LdndBZzrYVFh2D1Pq1JzxWPGNsmbT8dT9Cpe/0/02D248AA52D660570300A2C537102DC174ED8461.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.200.0/22
                IPv6:
                  2804:47b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267072

    Signature Algorithm: sha256WithRSAEncryption
         6f:e3:8c:fc:53:c5:87:b8:58:13:ac:d9:5b:0d:d9:70:b8:ca:
         d1:aa:aa:ab:1e:26:1e:e1:5b:10:78:ea:70:90:93:e7:3d:39:
         40:82:fa:f3:84:2b:64:ba:64:1b:f3:e6:33:f2:90:85:aa:50:
         29:cd:6c:7e:5f:91:19:d0:ac:b5:e8:af:c6:e5:ba:67:f3:2b:
         9e:00:36:3f:15:9c:d8:a4:09:e9:20:36:1a:d3:f9:ad:cc:f7:
         da:b7:bf:c4:14:e2:bb:2e:18:3b:12:42:93:d5:dc:ed:78:8f:
         78:9f:cf:04:31:2d:83:b4:9c:48:0f:ff:34:e4:a4:06:34:7a:
         62:a8:d5:d6:46:6b:df:8c:96:60:68:65:e6:c8:60:96:10:5f:
         23:82:0e:86:b7:1a:db:7e:44:56:0e:0a:2e:e3:06:4d:ee:f5:
         59:27:5c:91:b5:63:af:e3:12:59:99:69:e3:d7:c6:32:aa:ba:
         3d:cc:ff:59:d6:ab:54:fa:51:41:47:2b:4e:66:ad:13:bb:09:
         b5:d6:1d:6c:47:6f:84:6a:a3:52:0d:48:d2:98:cf:73:6c:92:
         22:dd:51:f8:fe:95:6a:e0:bc:2b:f2:0c:74:69:63:49:e9:cf:
         14:85:ea:b7:b7:31:2e:a0:28:dc:7c:6c:92:88:ff:f9:8a:4a:
         e0:68:d5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org