Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.cer
File:                     14945FB8256310020FB33CBB0208C3D3EE0DC64A.cer (raw, json)
Hash identifier:          a5dQYC5LXL75MfRqB1aktvIoRud5Wh7EHJHhxbcTGGU=
Subject key identifier:   14:94:5F:B8:25:63:10:02:0F:B3:3C:BB:02:08:C3:D3:EE:0D:C6:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       257B9F59C047A7C7699873B4AE4629EE42BDD34E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Nov 2023 17:50:53 +0000
Certificate not after:    Mon 18 Nov 2024 17:55:53 +0000
Subordinate resources:    AS: 272707
                          IP: 2804:8768::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7b:9f:59:c0:47:a7:c7:69:98:73:b4:ae:46:29:ee:42:bd:d3:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 20 17:50:53 2023 GMT
            Not After : Nov 18 17:55:53 2024 GMT
        Subject: CN=14945FB8256310020FB33CBB0208C3D3EE0DC64A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:13:a9:51:30:9d:a0:5e:e6:20:2c:72:a0:96:
                    cf:22:0c:32:0e:ad:c2:5f:11:43:a2:80:ed:f3:61:
                    80:d2:16:7a:0e:6e:db:5f:9c:1d:85:e5:6d:60:dd:
                    ba:31:3c:89:60:7d:a3:fa:47:25:ed:a4:a1:37:17:
                    7a:6f:10:4d:66:06:5d:f4:15:b9:8e:6e:c3:12:b5:
                    50:d7:67:71:12:97:55:e7:96:37:b3:33:e0:dc:01:
                    e5:71:fc:5a:59:5c:f2:04:9a:a6:89:af:20:f5:dc:
                    e4:88:87:80:71:a3:40:16:ee:bc:f0:ae:0f:8c:00:
                    bf:0d:d2:e9:f5:10:f1:2c:d3:6b:57:3d:9c:ee:d6:
                    99:fb:e7:e2:4d:07:96:48:f6:59:01:e9:66:e8:39:
                    56:54:88:64:ec:76:e0:8f:0d:48:f3:d9:69:e7:13:
                    b3:d5:4b:b1:f4:47:b8:7e:91:de:b5:df:63:34:47:
                    35:4c:d4:17:7c:4d:71:e8:59:49:fe:d3:4d:ec:1c:
                    03:d9:f7:56:46:2f:b9:4c:a1:c0:ec:25:14:1f:5d:
                    4a:e9:a7:96:0c:4f:8c:e2:3e:57:c0:94:cb:11:c3:
                    a8:8a:95:ab:b2:7a:42:8b:a6:1c:67:41:cf:31:16:
                    b9:92:72:fb:82:34:e6:bc:13:0b:09:a9:fe:b0:5c:
                    e3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:94:5F:B8:25:63:10:02:0F:B3:3C:BB:02:08:C3:D3:EE:0D:C6:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/368P6o9EboxAj4QGzCifXYS1z6tqdaT1fPWvJCetJbRd/0/14945FB8256310020FB33CBB0208C3D3EE0DC64A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8768::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272707

    Signature Algorithm: sha256WithRSAEncryption
         2e:45:a3:3d:c6:ad:d9:16:31:6b:4e:f6:87:12:43:7b:38:3f:
         fd:67:4c:ec:61:99:da:5d:ae:44:83:7a:3b:65:7d:66:e9:12:
         fb:76:9b:30:64:47:86:0f:37:26:db:ea:88:1f:0a:9d:31:43:
         75:5d:eb:c1:f0:98:41:d3:3b:bd:62:8b:d0:1d:5f:53:c2:f5:
         28:2e:5a:24:68:87:e1:48:b5:15:4a:fc:c0:a7:a0:56:5c:07:
         d6:c6:ce:08:08:d6:46:b4:a0:cd:f0:27:b6:3d:b5:d5:d7:ac:
         3b:71:08:5a:7e:27:cc:6b:c7:b6:e5:8c:5a:66:e0:6e:32:02:
         6a:64:b8:1f:82:71:06:1b:2c:51:30:1e:c1:8c:ac:fc:e4:0c:
         cd:93:21:27:ef:04:b8:c1:fc:95:2f:ae:36:f4:73:22:ef:ae:
         56:bc:77:ec:c8:d6:dd:fc:a8:80:fb:d6:84:25:19:78:47:09:
         44:67:39:1b:2d:d9:4a:bd:80:f4:b1:4e:fe:ce:ea:9c:65:b7:
         9d:1b:71:d5:32:99:f6:25:ed:05:05:60:d5:5d:9a:cd:08:d8:
         36:b2:1d:40:81:eb:7f:87:1a:68:01:7b:cc:2d:4b:1d:06:6e:
         8f:ed:13:7b:a4:c8:71:9b:42:0b:c1:a7:03:38:6f:b2:4f:53:
         13:70:7d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org