Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0B298E028BDDBEDE2A0ED25356B61E0F9368446D.cer
File:                     0B298E028BDDBEDE2A0ED25356B61E0F9368446D.cer (raw, json)
Hash identifier:          iCxKletscPP3TKy5Hw12qaOGvhjfShNMzctZ+Kc3NE4=
Subject key identifier:   0B:29:8E:02:8B:DD:BE:DE:2A:0E:D2:53:56:B6:1E:0F:93:68:44:6D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6BA4FBB33AF3DC5ECDB28B6A1460E6E9B03A074C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/0B298E028BDDBEDE2A0ED25356B61E0F9368446D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Aug 2022 19:02:46 +0000
Certificate not after:    Wed 23 Aug 2023 19:07:46 +0000
Subordinate resources:    AS: 267956
                          IP: 45.166.116.0/22
                          IP: 2804:55c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a4:fb:b3:3a:f3:dc:5e:cd:b2:8b:6a:14:60:e6:e9:b0:3a:07:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 24 19:02:46 2022 GMT
            Not After : Aug 23 19:07:46 2023 GMT
        Subject: CN=0B298E028BDDBEDE2A0ED25356B61E0F9368446D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9b:a4:de:22:cc:48:97:df:04:5a:23:72:39:
                    85:5f:0d:8d:31:14:0e:f0:f0:b6:1f:14:2a:e5:21:
                    98:83:52:d0:e9:6b:d6:e1:24:58:00:69:b9:71:6d:
                    1f:97:7c:b1:e0:6d:61:41:b6:60:86:3a:ad:bd:68:
                    52:c9:2f:4c:35:64:a0:26:15:b9:7b:63:aa:a1:8a:
                    e4:9e:bd:c8:88:e1:d4:73:fc:b5:d8:f8:82:b0:fb:
                    a1:94:d2:8f:e8:ec:30:32:76:85:b3:f3:3b:53:15:
                    35:69:c4:8f:67:86:6e:ce:db:cf:c1:72:3c:02:6b:
                    45:08:a5:24:c0:15:bb:46:03:a0:e3:57:64:99:c2:
                    cf:7b:f7:8f:c8:67:c3:b2:4f:e3:65:81:38:b0:53:
                    23:b8:ec:1d:2f:45:ed:22:9b:38:b0:fa:2c:62:20:
                    27:ce:2b:6c:b8:68:26:de:eb:26:2f:be:6d:cc:52:
                    6f:ce:97:70:ce:a1:90:1b:bf:79:4b:f7:c3:3c:96:
                    34:26:d3:15:bd:7e:90:b0:e3:94:39:3e:df:97:0c:
                    ce:9c:91:0b:6f:c9:ed:86:d5:77:0f:5a:86:fa:11:
                    3a:ed:2f:f9:0c:90:a5:f3:2d:43:93:cb:08:58:b0:
                    fd:dd:44:85:28:c3:6b:ee:b0:1c:74:5d:5a:56:26:
                    00:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:29:8E:02:8B:DD:BE:DE:2A:0E:D2:53:56:B6:1E:0F:93:68:44:6D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7j43ErLcW2zRqG42zwCfM3fEXVv1dc8boSqcjJm8nsUr/0/0B298E028BDDBEDE2A0ED25356B61E0F9368446D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.116.0/22
                IPv6:
                  2804:55c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267956

    Signature Algorithm: sha256WithRSAEncryption
         62:3e:81:f2:be:ae:a1:80:e5:ba:f3:60:e7:a3:e7:70:3b:c1:
         65:27:a9:57:7e:3b:27:c9:cf:71:ec:3f:3c:19:04:c5:a8:86:
         98:08:f1:96:af:24:85:57:c8:0b:35:59:ff:71:32:d7:22:ec:
         d2:0f:c5:b7:43:84:6c:25:6b:f7:68:43:c3:f5:c4:eb:e0:3f:
         5b:de:b5:72:e0:fe:3f:f1:69:8a:db:92:3d:dc:d8:78:35:b6:
         75:74:75:ac:46:84:21:f6:3e:50:00:9d:67:0c:36:32:66:93:
         04:24:c7:81:95:c2:70:bc:1c:e7:29:b4:11:f6:10:a1:08:0e:
         b3:20:0a:1b:b7:60:7e:00:c3:68:27:78:d8:0c:76:41:2c:58:
         e0:9b:3d:46:f6:ad:2f:d0:4d:87:9a:f9:70:4e:b7:e9:f4:41:
         1d:97:ca:31:a8:ac:6d:fc:f4:42:8b:2f:d5:1b:3d:3f:8e:d4:
         f1:4b:8b:86:55:f8:7a:93:74:80:52:0e:ec:78:a0:ee:ee:2f:
         19:8b:ce:90:c3:b4:ca:04:55:47:ad:a5:94:4c:32:9b:a4:25:
         08:76:d4:7e:b7:e0:5f:a1:ef:e4:98:a1:ef:4c:2c:85:06:74:
         6c:dd:02:34:6e:03:6d:8d:6a:78:6d:6e:72:1e:54:a9:ec:d6:
         99:3f:a5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org