Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer
File:                     0D25620AE740DFCD9F67E9941A6F9DF08938B501.cer (raw, json)
Hash identifier:          QQRoBen3sod2cuVuFBTFl62WSXM43IUQZBcxMq5yiT0=
Subject key identifier:   0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A8DFC03A91A5768BDC545B5911EB7547356A5FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 May 2023 05:44:27 +0000
Certificate not after:    Wed 22 May 2024 05:49:27 +0000
Subordinate resources:    AS: 266312
                          IP: 170.238.56.0/22
                          IP: 181.224.52.0/22
                          IP: 2804:35e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8d:fc:03:a9:1a:57:68:bd:c5:45:b5:91:1e:b7:54:73:56:a5:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 24 05:44:27 2023 GMT
            Not After : May 22 05:49:27 2024 GMT
        Subject: CN=0D25620AE740DFCD9F67E9941A6F9DF08938B501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:90:ae:4f:6b:b0:2a:b1:b0:ea:56:18:b4:94:
                    97:1b:96:32:ef:ea:eb:c3:dd:83:65:a9:2b:47:5a:
                    d3:6d:46:d7:4a:52:db:95:2d:e4:81:41:fd:e4:14:
                    fa:50:12:ed:d4:0e:1c:9a:bb:64:fb:c3:b5:7f:65:
                    4d:92:a3:92:8e:aa:32:0b:0a:d3:1a:6f:d3:bf:e5:
                    f6:0a:fe:47:94:35:db:8e:03:27:7c:f5:3f:57:61:
                    51:3a:ec:dd:89:f2:04:6c:81:c5:ff:b3:18:00:75:
                    fa:40:df:88:fa:ba:91:c4:36:34:c1:7c:fa:18:d9:
                    2f:23:72:11:52:d9:0e:71:30:8e:56:c0:93:07:10:
                    94:7d:64:2f:27:5d:36:2f:4e:21:d6:97:08:95:64:
                    b8:dd:27:ec:6b:a9:f5:94:27:a5:e7:39:e5:c7:62:
                    2a:31:02:c3:74:e2:d5:6d:fc:d9:ae:65:c6:9b:88:
                    7e:a6:1a:8c:11:27:7a:a5:f2:da:f5:ac:f6:2b:b1:
                    3c:f4:d4:0e:b1:fd:70:59:71:d7:f9:c2:4a:21:39:
                    df:7e:be:ba:89:11:42:e4:6a:b0:bb:ed:a0:ce:ee:
                    69:08:32:ed:62:ce:14:b9:78:bd:1a:c1:bd:c4:50:
                    99:f8:8e:7c:fb:d1:e1:0a:2a:42:16:03:a8:46:8d:
                    c8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:25:62:0A:E7:40:DF:CD:9F:67:E9:94:1A:6F:9D:F0:89:38:B5:01
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/0/0D25620AE740DFCD9F67E9941A6F9DF08938B501.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.56.0/22
                  181.224.52.0/22
                IPv6:
                  2804:35e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266312

    Signature Algorithm: sha256WithRSAEncryption
         00:a0:0a:69:07:e8:b8:72:e6:1f:db:52:c5:e9:c9:1f:77:01:
         62:90:fb:3b:35:e9:26:e7:a5:c7:d7:e7:5e:6d:5a:fe:db:01:
         a3:c8:8e:a3:b8:7f:bd:17:80:8a:55:7a:bd:0a:0a:a3:be:e0:
         13:20:60:8f:58:8e:31:1e:04:89:fc:29:8d:3a:8a:b7:25:e3:
         81:02:d8:b4:10:9b:c8:02:8d:b2:24:6f:c4:6a:dd:1f:7f:07:
         e7:db:d5:d8:96:68:b5:ff:9c:23:03:0a:58:c6:26:e2:cc:45:
         f0:71:e7:8d:87:2e:38:a4:6b:b6:b9:16:d6:df:be:67:12:04:
         a2:67:d0:4b:d2:63:b8:aa:a0:8c:21:92:64:02:db:d3:b0:ee:
         be:12:08:30:c4:30:15:03:11:b5:79:89:53:1e:2a:8c:4a:71:
         61:9e:5c:21:ff:79:73:e2:d9:f9:d7:ca:bc:cb:26:03:a8:a4:
         1e:5b:d0:c3:1c:71:d9:a5:5b:bc:3b:3e:a8:10:b7:8c:95:03:
         36:9c:3e:a8:81:6b:11:0d:d8:9a:da:5f:03:95:4e:b3:ff:8a:
         83:e2:d2:15:d9:65:ff:26:3f:bf:2c:2f:93:ef:6e:2a:fb:bf:
         dd:ff:1c:63:1e:cb:de:da:29:a1:f2:a5:51:87:be:59:6f:0e:
         36:52:d2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org