Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/086D6FB7E92D14B2B8C6788623BC3076C8B7BCC8.cer
File:                     086D6FB7E92D14B2B8C6788623BC3076C8B7BCC8.cer (raw, json)
Hash identifier:          RvWL9YwBiX32VhKUesx5WHj34Gf1vPjJpLMvIFPshRE=
Subject key identifier:   08:6D:6F:B7:E9:2D:14:B2:B8:C6:78:86:23:BC:30:76:C8:B7:BC:C8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20CCA7911940D61EF2D7DFB5B4DB061D04DEBDE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5vMp3YmRuqKzHgXgTGzPYCG7ajLi51sutTdfXbMDs75s/0/086D6FB7E92D14B2B8C6788623BC3076C8B7BCC8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5vMp3YmRuqKzHgXgTGzPYCG7ajLi51sutTdfXbMDs75s/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 05 Aug 2023 04:20:21 +0000
Certificate not after:    Sat 03 Aug 2024 04:25:21 +0000
Subordinate resources:    AS: 268304
                          IP: 45.237.232.0/22
                          IP: 2804:4f1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cc:a7:91:19:40:d6:1e:f2:d7:df:b5:b4:db:06:1d:04:de:bd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  5 04:20:21 2023 GMT
            Not After : Aug  3 04:25:21 2024 GMT
        Subject: CN=086D6FB7E92D14B2B8C6788623BC3076C8B7BCC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:91:cd:83:de:3b:50:ec:19:e9:7f:07:1b:
                    42:30:a4:c0:7c:32:e2:0b:53:a5:7b:35:fb:fb:28:
                    c1:b2:bd:c9:08:da:68:c3:70:63:2d:33:93:8f:29:
                    c5:f4:d5:27:da:3e:7d:0c:cc:f5:5d:b0:93:0e:fb:
                    36:91:b4:50:87:24:74:6e:99:8e:71:ef:83:40:38:
                    ac:9a:cd:c0:4d:8f:3c:36:03:b6:49:71:43:81:17:
                    a4:10:26:b1:1e:31:dd:af:c1:2e:08:ad:33:1c:2c:
                    41:bd:ec:6b:c8:1d:fe:25:ae:4c:1d:e3:23:4e:3d:
                    f6:13:fe:6b:b4:7a:d9:f5:f6:b9:a8:89:e9:f0:1e:
                    4f:94:71:6c:e2:dd:d5:21:99:42:2d:1f:cc:92:9e:
                    87:cd:c7:23:99:02:5c:5d:44:99:08:b1:d4:0d:00:
                    43:96:5d:52:fa:b7:71:31:62:39:51:f8:5b:8e:52:
                    b1:00:90:84:18:0c:25:d9:90:af:0a:18:fd:28:44:
                    5b:a5:d9:f2:a0:5a:29:30:04:4b:da:fb:e5:9b:15:
                    ec:71:7a:35:28:7a:cc:ad:24:35:23:3f:dc:03:22:
                    9d:b5:95:56:e8:da:17:48:46:27:93:41:e8:47:09:
                    42:5d:ec:1e:c1:a4:16:44:be:87:ad:c9:7a:01:f8:
                    51:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                08:6D:6F:B7:E9:2D:14:B2:B8:C6:78:86:23:BC:30:76:C8:B7:BC:C8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5vMp3YmRuqKzHgXgTGzPYCG7ajLi51sutTdfXbMDs75s/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5vMp3YmRuqKzHgXgTGzPYCG7ajLi51sutTdfXbMDs75s/0/086D6FB7E92D14B2B8C6788623BC3076C8B7BCC8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.232.0/22
                IPv6:
                  2804:4f1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268304

    Signature Algorithm: sha256WithRSAEncryption
         64:cd:25:71:3f:3f:47:99:2f:99:24:90:5d:0a:4d:72:33:85:
         c8:d6:79:9d:88:ca:b3:46:f1:d5:c7:db:7b:05:47:1d:d8:11:
         db:95:23:aa:a2:ea:6c:e8:04:6e:18:3e:a9:6f:2d:ca:61:94:
         81:de:ec:76:af:c1:88:75:d1:a7:04:0e:e6:77:bf:ed:29:49:
         c2:3f:35:2d:8e:77:85:30:c3:5d:18:9e:a9:ec:36:0f:97:96:
         86:f7:37:7f:ab:66:90:de:05:1b:7d:d4:7d:7f:5e:5b:e0:7b:
         41:d9:45:b1:a2:fd:06:39:21:eb:be:81:c4:86:71:51:1d:c9:
         bd:7f:7c:04:22:a2:ca:4b:23:f2:98:d3:c4:92:87:cb:57:f1:
         78:44:80:3e:4d:f4:1f:48:e4:36:85:fb:cd:c1:bf:1a:41:6c:
         48:bd:86:cc:95:a3:d0:06:86:db:da:b4:ba:44:56:7e:62:4d:
         5b:7c:c6:b9:a4:c1:8b:63:08:32:46:96:9c:75:23:9d:4b:86:
         69:be:7e:19:28:b5:d1:2a:93:5a:36:a1:b4:0b:a7:4d:45:65:
         10:2f:8c:ae:3f:9d:74:47:cb:07:99:c5:1f:7d:e7:3b:1a:47:
         d4:b4:cf:a4:c5:2d:98:22:5c:ad:c7:0f:9f:6c:92:68:c6:0e:
         c0:bb:a6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org