Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.cer
File:                     108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.cer (raw, json)
Hash identifier:          h/779t/YB5FN898kztuwr42z8SOnpDh8WeX05Lb2SQ0=
Subject key identifier:   10:87:69:B7:BB:8A:B7:22:D7:BB:B5:F2:4D:0A:1E:36:4C:1D:7E:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A1AA2EAEA26CEB999A4CBCBC830D8E89EE4BC25
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Sep 2023 17:42:37 +0000
Certificate not after:    Fri 20 Sep 2024 17:47:37 +0000
Subordinate resources:    AS: 264598
                          IP: 138.36.228.0/22
                          IP: 2804:2238::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1a:a2:ea:ea:26:ce:b9:99:a4:cb:cb:c8:30:d8:e8:9e:e4:bc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 17:42:37 2023 GMT
            Not After : Sep 20 17:47:37 2024 GMT
        Subject: CN=108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e4:8e:f1:f9:9d:fa:3a:50:27:85:54:c1:e0:
                    cd:40:f0:b1:55:63:1e:86:0b:63:a4:a4:e4:d6:99:
                    dd:b8:e1:5d:53:4f:45:d1:82:f9:08:07:85:b1:9c:
                    6e:a7:a8:14:87:e0:e2:df:2d:b6:e9:3f:cd:19:36:
                    e4:2a:b6:4f:61:61:f9:e9:3c:72:fb:54:b6:83:5d:
                    80:4c:26:13:f4:95:b3:13:ea:64:56:c4:af:1b:df:
                    b3:25:9d:0c:fc:df:52:e0:a1:70:eb:b4:19:87:46:
                    76:7d:ae:70:9e:99:26:0b:0f:7f:d4:38:47:18:30:
                    86:f3:c3:fc:37:98:e4:9d:c1:33:05:6e:03:be:d4:
                    dc:6d:a0:e9:44:1e:0d:88:86:cd:f2:8b:60:b6:82:
                    f4:05:31:0d:72:6c:8a:a9:87:2a:7b:91:e0:2f:a0:
                    4b:53:28:d9:38:4c:06:24:98:1d:2c:30:28:f1:0c:
                    f2:61:46:09:b0:1a:08:18:ce:03:7c:c9:75:8a:42:
                    d8:df:14:70:35:52:0d:17:bc:d5:3f:2a:00:43:eb:
                    29:da:af:25:29:ab:e6:f8:93:1e:1a:8d:d2:34:c1:
                    f9:71:37:18:9c:c9:f1:b4:2c:a5:94:2a:d1:ba:27:
                    98:94:fa:31:f4:75:35:5a:b2:03:57:f3:b5:f7:d2:
                    05:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:87:69:B7:BB:8A:B7:22:D7:BB:B5:F2:4D:0A:1E:36:4C:1D:7E:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8h334Zm2BCT5NrdMWsu4uDXCErAdMZ6oWkhhiCE9Anfz/0/108769B7BB8AB722D7BBB5F24D0A1E364C1D7EA7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.228.0/22
                IPv6:
                  2804:2238::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264598

    Signature Algorithm: sha256WithRSAEncryption
         56:38:93:cd:cc:c8:d7:03:10:5a:72:4f:52:9f:6e:04:2b:e2:
         12:82:60:56:80:e8:a8:a5:c2:25:b7:3e:e1:de:83:bc:c5:43:
         72:72:c5:e7:fa:da:b7:94:de:e7:8f:0c:1e:05:e0:07:72:da:
         4d:69:9b:6f:81:5a:4f:03:6a:03:32:b0:0f:6c:61:21:78:93:
         94:83:61:2d:d2:19:1f:2d:77:95:38:73:97:4e:a6:64:6e:f3:
         73:d3:e8:ee:4b:a4:ac:2b:e8:7a:c3:e5:95:16:74:29:0c:86:
         9f:14:d5:67:fe:4b:e2:c8:bd:ca:ad:59:3c:91:ac:af:90:a5:
         24:d1:b0:b5:1e:cc:03:3d:ed:21:ef:18:f7:61:47:ab:ad:c0:
         ff:7e:00:15:0e:e8:e1:4e:52:0b:51:bb:30:3c:fe:df:a8:af:
         a4:21:85:21:37:3d:d1:d5:b1:fb:08:69:17:a4:cf:61:f0:d7:
         ce:c5:c7:de:14:87:db:92:e2:03:9e:02:a1:07:7d:1a:ee:59:
         78:bb:08:03:eb:60:a3:c6:f6:29:bb:cc:6d:19:21:67:38:f3:
         3d:cd:81:58:a0:c5:0c:ab:7a:fb:30:fd:14:63:dd:1a:34:33:
         58:93:5e:97:5b:f4:3f:61:70:74:2b:d0:ef:ef:8e:19:f4:eb:
         02:89:5c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org