Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.cer
File:                     057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.cer (raw, json)
Hash identifier:          QCRw5t/xGeY8NbpBTyDdkiW246Ylp7YPcowh+uCs0QE=
Subject key identifier:   05:7E:8B:4D:96:A4:CE:7F:95:D7:F4:C2:70:B9:97:A5:E0:01:28:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       33F1721CBD0876A225E1146123FE885923BC27EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Sep 2022 20:01:53 +0000
Certificate not after:    Tue 19 Sep 2023 20:06:53 +0000
Subordinate resources:    AS: 267135
                          IP: 45.229.228.0/22
                          IP: 2804:48a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f1:72:1c:bd:08:76:a2:25:e1:14:61:23:fe:88:59:23:bc:27:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 20:01:53 2022 GMT
            Not After : Sep 19 20:06:53 2023 GMT
        Subject: CN=057E8B4D96A4CE7F95D7F4C270B997A5E00128D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:7f:bf:2e:04:98:90:fd:ce:27:3e:5a:58:
                    9b:ae:f8:54:e5:91:92:40:7a:f5:d5:44:99:ff:7a:
                    4e:ac:ee:45:04:96:b1:9e:7a:fe:4b:76:dd:96:f4:
                    62:41:d0:98:6b:a6:b8:3b:61:6e:11:9a:e6:36:d3:
                    6b:92:67:6d:fb:bd:4e:cd:02:ce:31:19:1d:4c:7d:
                    25:63:df:4d:8c:f5:eb:1b:ab:76:35:7f:d7:8e:e3:
                    12:bd:83:c0:4b:69:08:91:36:a3:20:90:fd:40:ee:
                    6f:9c:f3:44:97:9d:74:b6:da:1c:53:c9:38:0f:69:
                    e7:61:04:20:7c:76:1b:6e:01:d9:3a:e6:97:16:e7:
                    63:62:6d:ea:54:86:6a:1d:34:d5:15:a3:90:e1:de:
                    a5:6d:4c:1d:49:dd:32:3f:13:fd:aa:06:d6:a1:93:
                    11:4e:ad:08:cd:fb:fb:f6:60:f9:79:66:c1:55:49:
                    22:90:59:38:19:a7:a9:9a:7d:81:42:b2:af:cc:1c:
                    b0:4b:30:5c:14:06:fd:1c:59:f6:e1:7d:61:cf:bd:
                    65:92:57:e9:00:e1:ee:ae:19:d4:a4:47:15:09:0b:
                    06:d5:dc:1e:bf:29:b8:46:85:0a:4c:96:4f:f9:83:
                    da:d3:69:7a:fc:f9:a9:73:bf:18:b3:a7:b7:12:69:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:7E:8B:4D:96:A4:CE:7F:95:D7:F4:C2:70:B9:97:A5:E0:01:28:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/057E8B4D96A4CE7F95D7F4C270B997A5E00128D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.228.0/22
                IPv6:
                  2804:48a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267135

    Signature Algorithm: sha256WithRSAEncryption
         9e:0a:e1:6b:ad:62:cd:08:d5:80:09:2e:47:38:dd:e8:3b:33:
         68:5d:ac:23:22:1a:68:78:d9:7e:af:87:ee:9f:60:9f:b0:32:
         39:bc:a6:fa:98:22:d1:51:20:12:03:ac:86:d5:32:c7:c5:11:
         74:64:1b:dc:d5:3a:d5:02:37:d6:7f:a0:2a:31:da:0a:ca:1f:
         0d:68:82:2d:5c:85:75:6b:c2:e2:b1:44:2b:94:1e:96:53:14:
         ad:97:94:d5:44:08:f4:a2:b0:f6:e8:06:8b:56:bf:d5:02:e2:
         23:4a:25:e7:82:66:0f:dc:6e:b9:86:e3:42:cd:9b:0a:97:d5:
         0c:6d:3c:2f:c6:67:62:a4:46:ec:31:2b:94:a5:f9:43:f5:97:
         01:ca:07:0f:02:03:7a:38:3b:84:63:03:db:18:3b:ab:48:e5:
         65:d0:4b:12:4a:dd:de:9a:a5:32:2b:c5:fd:61:8d:5a:00:53:
         00:6b:70:7b:e1:0e:05:e8:cd:8b:19:86:af:83:74:78:18:9c:
         62:e8:27:86:ac:29:e6:ab:00:d5:1c:14:ba:a6:28:23:58:8a:
         8e:66:ad:ab:95:7a:71:e5:cf:38:52:a8:1e:2f:03:49:96:56:
         57:9d:33:7b:f3:bf:71:ff:cd:61:49:e6:0f:f6:a1:3c:09:91:
         e1:76:3c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org