Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0985D996290EF750BE43BA8A4981707CBFCF468D.cer
File:                     0985D996290EF750BE43BA8A4981707CBFCF468D.cer (raw, json)
Hash identifier:          iXT6TVGy1h+WoQEbT0WaHISdfGzWt7KcgrOJ16g1Vc4=
Subject key identifier:   09:85:D9:96:29:0E:F7:50:BE:43:BA:8A:49:81:70:7C:BF:CF:46:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B8A3ACDCEB803C11A2B23AADE0D96D69A593B96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/0985D996290EF750BE43BA8A4981707CBFCF468D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 21:18:44 +0000
Certificate not after:    Tue 17 Dec 2024 21:23:44 +0000
Subordinate resources:    AS: 269724
                          IP: 45.189.160.0/22
                          IP: 2804:68e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8a:3a:cd:ce:b8:03:c1:1a:2b:23:aa:de:0d:96:d6:9a:59:3b:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 21:18:44 2023 GMT
            Not After : Dec 17 21:23:44 2024 GMT
        Subject: CN=0985D996290EF750BE43BA8A4981707CBFCF468D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:39:c0:da:12:4f:f6:2f:5f:8c:2e:e6:6f:
                    66:1b:70:a3:45:5e:e6:0c:dc:18:9d:cf:1f:b2:36:
                    7c:4a:51:e0:3e:03:0f:1a:a9:a4:b5:04:7f:b7:19:
                    b3:e8:26:e0:50:f3:f0:d3:4f:12:07:86:e9:60:91:
                    4a:fc:09:5d:e9:92:3c:f2:9f:ec:27:ca:d8:79:86:
                    3f:b5:33:a5:3c:b4:3d:48:3e:8d:ed:49:9b:88:69:
                    4e:4f:72:39:fa:09:5d:c2:37:e5:2e:85:3e:78:31:
                    7d:0c:39:6f:e8:cf:94:88:ce:b5:06:8b:db:be:e0:
                    76:f5:5d:0f:9c:e1:26:b0:b1:98:cd:8b:de:76:c4:
                    e2:4e:44:07:dd:16:06:4f:3b:e4:7b:a6:ef:74:b5:
                    84:e2:16:c5:ec:fa:95:4f:42:79:9e:03:e8:a3:b5:
                    bf:c1:c9:5b:58:db:8d:ef:da:46:c7:75:5b:3c:d8:
                    c8:77:4e:23:e0:3f:2a:36:b4:a0:fb:00:7b:1a:32:
                    ef:2e:41:6b:3a:07:83:eb:cc:76:da:d6:78:58:18:
                    75:19:a8:09:ba:d5:f5:65:0e:4f:38:9e:5b:d8:ab:
                    7a:08:87:99:96:3d:f5:1a:f3:97:e3:63:f4:21:5c:
                    e8:26:3c:6e:d4:31:93:82:9b:17:56:05:1e:ac:48:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:85:D9:96:29:0E:F7:50:BE:43:BA:8A:49:81:70:7C:BF:CF:46:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/0985D996290EF750BE43BA8A4981707CBFCF468D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.160.0/22
                IPv6:
                  2804:68e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269724

    Signature Algorithm: sha256WithRSAEncryption
         1c:8e:fe:7f:0c:cb:40:93:7d:26:7c:4a:3a:62:c4:54:65:87:
         ef:db:db:3a:25:ab:b2:22:91:96:19:b3:16:c3:c9:f6:26:40:
         27:3b:5a:ec:e3:14:e8:30:c0:6d:f2:2c:bc:00:bd:84:17:45:
         71:ef:29:5c:b9:88:bf:54:64:7d:7e:83:4a:83:da:a5:72:d4:
         0e:fa:18:76:90:ca:19:32:d5:57:7a:79:f1:4d:76:3d:3b:f8:
         1d:fc:7a:e1:72:7a:61:45:33:d8:4b:a2:60:df:91:c7:62:06:
         2c:1e:1b:64:d5:82:47:c2:97:19:82:b9:19:3b:14:4f:50:bc:
         7b:c0:d1:e8:34:5d:e5:19:d2:84:a4:cf:58:7d:51:66:e6:b8:
         05:47:dc:70:43:79:f2:eb:8a:ba:7e:4e:40:46:5c:23:71:42:
         94:13:f8:64:fd:e2:bd:c0:44:f6:96:9b:c3:90:65:f6:cf:ed:
         d8:51:58:70:03:73:e3:5d:f6:a3:14:0a:6f:fb:ed:b8:c7:21:
         c1:61:93:8d:72:d5:89:0b:d4:28:93:de:8f:aa:ff:2f:ce:6d:
         20:1d:7b:85:1a:a4:c1:b4:23:e7:e6:75:ac:99:7e:63:ef:ae:
         7f:7d:ce:22:fe:12:52:b6:44:0d:54:1f:d9:a6:a1:bb:17:ab:
         12:0d:c5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org