Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0A57E22B5DA2126C6212C06A47BFC5022500D7AA.cer
File:                     0A57E22B5DA2126C6212C06A47BFC5022500D7AA.cer (raw, json)
Hash identifier:          Bqcl0UuZRhOKzjhvvLzSh9M/P+ja+FrANL827kWq5MY=
Subject key identifier:   0A:57:E2:2B:5D:A2:12:6C:62:12:C0:6A:47:BF:C5:02:25:00:D7:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30D40E4C349CDE6308F6DD0A3A7ADB653FEA556E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/0A57E22B5DA2126C6212C06A47BFC5022500D7AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Jan 2023 18:52:26 +0000
Certificate not after:    Wed 17 Jan 2024 18:57:26 +0000
Subordinate resources:    AS: 269444
                          IP: 45.186.164.0/22
                          IP: 2804:64b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:d4:0e:4c:34:9c:de:63:08:f6:dd:0a:3a:7a:db:65:3f:ea:55:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 18:52:26 2023 GMT
            Not After : Jan 17 18:57:26 2024 GMT
        Subject: CN=0A57E22B5DA2126C6212C06A47BFC5022500D7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7b:37:da:98:a4:27:c3:6a:89:01:b6:56:1b:
                    bc:83:34:2e:5d:76:96:42:55:68:83:a8:12:6c:34:
                    b6:a4:8b:7a:7a:df:cd:2a:38:d4:fb:f7:af:66:c6:
                    0b:e9:9a:ab:04:d0:39:45:35:56:5c:e8:65:1c:a7:
                    bb:17:96:be:41:69:7b:2a:25:4c:7b:8d:e4:cc:b6:
                    6a:95:47:48:b5:5d:7d:10:f8:31:16:cd:8f:12:05:
                    4c:0c:65:7a:d4:2a:9a:d8:ae:0d:55:93:b3:b8:59:
                    7b:06:ad:cd:67:4c:b0:17:54:24:50:e7:2c:90:6b:
                    6a:e1:74:bf:b0:79:da:56:4e:27:1a:0a:9a:f8:60:
                    ed:42:b6:c1:3e:49:ac:f5:24:67:80:5f:b3:8f:b4:
                    bb:5e:d7:63:0c:aa:6a:53:ca:82:53:cb:ed:de:bc:
                    a2:f1:9f:07:1d:27:3c:5f:b1:85:1a:37:e9:1f:ae:
                    79:12:9e:d2:fc:e6:31:0f:8f:59:3e:ea:03:40:1b:
                    7c:00:96:42:13:80:cc:7e:f0:f0:f5:6d:71:43:43:
                    1b:0f:62:b0:98:99:bf:75:e0:6f:a5:c5:40:53:72:
                    95:34:75:72:33:9a:43:c2:77:95:df:24:23:94:f2:
                    55:a6:bd:9e:74:a4:78:1e:e3:5e:7f:bc:13:ad:92:
                    d2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:57:E2:2B:5D:A2:12:6C:62:12:C0:6A:47:BF:C5:02:25:00:D7:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/0A57E22B5DA2126C6212C06A47BFC5022500D7AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.164.0/22
                IPv6:
                  2804:64b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269444

    Signature Algorithm: sha256WithRSAEncryption
         a4:f9:b8:29:73:fe:67:c3:c7:57:72:44:d1:66:f9:6a:26:ce:
         44:83:b4:04:67:42:90:6c:ad:3e:ae:f4:7c:e7:e2:73:3b:d8:
         ae:24:f2:13:62:5a:86:63:9b:a6:ab:52:b6:d8:6a:ed:ef:40:
         19:95:a2:44:93:df:31:34:a4:2b:37:ef:71:3a:40:36:96:e0:
         6c:c5:6a:2a:1b:37:b6:a5:0f:ea:91:f5:74:e1:29:5d:e6:9b:
         5e:77:70:de:e1:6f:fd:62:4b:9d:e0:f2:4a:73:68:57:a9:c0:
         58:df:91:2d:68:b7:66:ea:bd:3c:0d:04:43:1a:f1:ba:ea:51:
         70:76:7a:ec:74:dc:4e:2f:6d:a4:a8:c9:c9:d7:9a:76:b5:91:
         64:94:a7:47:20:a6:50:eb:60:42:a5:37:20:36:e7:8a:8f:50:
         89:e2:f5:ca:29:4d:b9:68:19:e7:54:61:b9:2d:7b:67:0f:4c:
         e5:c6:10:a8:59:93:7e:03:6c:95:f5:58:52:22:bc:19:10:b8:
         07:09:ed:4a:78:55:81:81:5d:16:ce:75:87:e8:6d:c0:fb:44:
         4a:49:b7:57:49:fd:0a:f7:4f:02:c3:68:2b:1b:dd:2d:ea:46:
         aa:60:4e:72:48:33:b8:6e:bd:4f:8e:24:b7:43:79:16:44:83:
         ec:da:ac:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org