Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53.cer
File:                     0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53.cer (raw, json)
Hash identifier:          /Qm8ZUmbcfeIZBOHkuUVwW+zsS6ru3UoKgEEe14tKhs=
Subject key identifier:   0C:FE:98:4A:A3:F3:82:60:AA:BF:9F:BF:0F:E2:B2:DF:8D:CF:EE:53
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F68D424F39808D39010CEADFE86051465666472
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3eGL8R97oP46AmsQPMpoUCDT6yt8qEWmiTSYsinEvLx4/0/0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3eGL8R97oP46AmsQPMpoUCDT6yt8qEWmiTSYsinEvLx4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 23:00:58 +0000
Certificate not after:    Thu 23 May 2024 23:05:58 +0000
Subordinate resources:    AS: 266050
                          IP: 45.4.20.0/22
                          IP: 45.182.184.0/23
                          IP: 2804:39c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:68:d4:24:f3:98:08:d3:90:10:ce:ad:fe:86:05:14:65:66:64:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 23:00:58 2023 GMT
            Not After : May 23 23:05:58 2024 GMT
        Subject: CN=0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:99:6e:c5:84:37:c1:07:31:71:f8:34:8c:
                    60:57:4e:28:49:ba:f1:ed:cc:29:e3:00:85:1f:92:
                    9c:d5:21:fd:eb:cf:c6:f2:05:62:00:0f:da:69:11:
                    0d:5a:ba:3e:a1:38:76:8f:c7:e7:2f:03:af:ae:f7:
                    3e:b9:3e:71:ef:db:07:0c:3d:75:fb:19:19:36:46:
                    d0:bc:ad:38:80:47:d1:70:0d:4b:a6:3b:ef:66:44:
                    88:7d:7f:c2:ae:e9:6e:90:21:7f:f3:a6:8b:2a:0d:
                    0e:50:15:06:41:2f:6d:73:4b:b8:a8:58:e0:36:e6:
                    36:7c:b0:ce:86:14:5e:64:57:b7:3b:f5:7d:d8:17:
                    c7:d4:06:07:a9:be:50:0c:32:e4:28:9a:0c:63:a6:
                    8f:84:1f:77:a7:85:b2:47:93:7c:2b:00:8e:f1:1b:
                    65:18:4c:2c:6a:af:d2:6e:58:80:a9:a2:b8:f9:ca:
                    cc:e9:54:db:03:ce:dc:33:f5:b2:f6:a6:9c:e8:8f:
                    f0:71:dc:cc:84:a4:0c:67:ff:76:82:ca:a4:fa:82:
                    68:0c:6a:14:f3:87:2e:bf:4b:ad:14:68:fd:eb:ee:
                    c8:2a:42:39:e7:d1:4d:bc:12:5b:4f:2e:7c:66:f2:
                    4b:86:4f:83:33:02:bd:f9:ee:24:7d:b7:70:88:d2:
                    2d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:FE:98:4A:A3:F3:82:60:AA:BF:9F:BF:0F:E2:B2:DF:8D:CF:EE:53
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3eGL8R97oP46AmsQPMpoUCDT6yt8qEWmiTSYsinEvLx4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3eGL8R97oP46AmsQPMpoUCDT6yt8qEWmiTSYsinEvLx4/0/0CFE984AA3F38260AABF9FBF0FE2B2DF8DCFEE53.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.20.0/22
                  45.182.184.0/23
                IPv6:
                  2804:39c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266050

    Signature Algorithm: sha256WithRSAEncryption
         13:8c:69:c8:01:78:1c:9d:b1:1f:db:44:5f:7f:e0:ba:1c:50:
         97:8f:7a:ef:6f:14:7f:40:b0:22:72:2c:52:93:fc:9f:7f:7d:
         60:c3:b4:af:f7:25:db:b0:b5:9d:ac:04:8b:c0:32:ca:39:7b:
         d1:ad:da:97:53:6d:41:e7:ed:7c:66:11:06:64:2b:f6:9a:4d:
         e0:4a:f7:68:b4:e7:b1:13:ed:1f:7a:77:30:85:d5:9b:5c:df:
         35:12:fd:72:91:b7:0b:d6:e3:f5:b3:a8:99:ea:1e:e2:02:5c:
         54:8f:04:4d:e9:0f:b4:2f:56:3a:ad:0a:0c:a0:d0:63:6a:92:
         4f:b1:96:02:cf:cd:b1:20:60:72:54:47:b0:c3:1b:85:4f:e1:
         6b:00:f3:e8:fd:a2:fc:d8:95:66:a7:49:43:c0:58:eb:b3:a5:
         c3:2a:d3:20:5e:a2:18:f6:eb:86:ba:0a:86:d7:eb:a9:02:a8:
         54:09:bb:67:6c:d0:cc:c4:95:49:96:a4:f7:fc:be:31:6f:3f:
         95:80:60:43:64:5c:62:7b:55:3e:a3:f1:a9:01:2a:7b:ef:cd:
         2b:b5:b9:41:4a:98:b9:db:37:d1:df:d9:46:5f:4a:26:ed:9a:
         91:24:f3:ec:f3:60:b5:52:ec:55:62:04:e7:c5:ee:8d:52:35:
         03:1b:ba:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org