Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/150045DD90D9E835BE8CA0C16CAA4058E52E8309.cer
File:                     150045DD90D9E835BE8CA0C16CAA4058E52E8309.cer (raw, json)
Hash identifier:          JyIusr3Jjrgqus+MW/9OSVuhGKqnXC2qGLMajC3WJIY=
Subject key identifier:   15:00:45:DD:90:D9:E8:35:BE:8C:A0:C1:6C:AA:40:58:E5:2E:83:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DE5748324F77284CC06A19AEFFD664007C1E273
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/150045DD90D9E835BE8CA0C16CAA4058E52E8309.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Dec 2022 12:53:46 +0000
Certificate not after:    Mon 11 Dec 2023 12:58:46 +0000
Subordinate resources:    AS: 264397
                          IP: 131.161.92.0/22
                          IP: 164.163.36.0/22
                          IP: 170.239.96.0/22
                          IP: 2804:1dd4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:e5:74:83:24:f7:72:84:cc:06:a1:9a:ef:fd:66:40:07:c1:e2:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 12 12:53:46 2022 GMT
            Not After : Dec 11 12:58:46 2023 GMT
        Subject: CN=150045DD90D9E835BE8CA0C16CAA4058E52E8309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e3:00:61:77:cb:ea:8a:c1:fd:53:c1:2d:88:
                    6b:3f:2d:30:b5:b3:ad:10:36:b2:2f:60:d5:2f:32:
                    91:33:00:b9:75:d8:82:37:66:7d:f3:e8:e3:01:db:
                    ae:7d:d0:31:49:0e:aa:34:e5:e9:b2:70:36:c6:98:
                    c6:d2:af:2f:36:fe:f9:c3:a0:3b:31:4c:34:93:5f:
                    c7:8f:cf:a3:4c:1d:ab:09:9a:ec:fc:31:01:85:ef:
                    c3:c6:48:1d:42:45:24:ac:b3:7b:88:0d:df:a2:6e:
                    e9:01:77:b3:93:de:71:ff:c8:b1:d4:f7:7f:6e:20:
                    81:a7:01:55:40:fb:0f:23:1e:57:0f:c9:19:29:5f:
                    13:dc:56:da:42:c3:9f:ee:42:48:fa:17:9e:3a:af:
                    97:8a:d7:af:45:e8:03:a8:6e:76:84:a5:d0:3b:68:
                    1c:66:21:d6:bd:7a:5d:60:c7:24:d4:b6:25:d5:37:
                    1d:94:47:09:f8:6f:35:7c:47:1e:0d:ff:ca:83:95:
                    d7:90:98:c6:77:c6:66:e6:82:e2:45:26:34:d6:4d:
                    f0:9c:cd:ca:9e:b2:85:3a:b7:dd:0c:03:02:4b:a8:
                    cd:32:c7:ef:1b:ae:33:4c:df:60:41:75:2b:e9:ac:
                    ac:18:f6:0b:59:fd:30:e8:4c:69:a7:2a:e8:1c:40:
                    a8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:00:45:DD:90:D9:E8:35:BE:8C:A0:C1:6C:AA:40:58:E5:2E:83:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/150045DD90D9E835BE8CA0C16CAA4058E52E8309.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.92.0/22
                  164.163.36.0/22
                  170.239.96.0/22
                IPv6:
                  2804:1dd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264397

    Signature Algorithm: sha256WithRSAEncryption
         2e:60:91:7c:e6:77:72:12:a5:e3:54:7b:27:11:d5:65:21:3a:
         30:9a:c1:5e:e7:9c:ab:29:cf:e4:3f:c7:69:bf:6d:5d:a0:64:
         32:49:62:3d:05:84:00:78:ec:f8:b3:3d:85:e2:e4:62:ff:74:
         7b:50:24:3f:6b:1a:33:2b:ab:43:f4:fc:b2:bb:38:e4:06:0f:
         09:98:0f:90:3c:42:2a:10:93:b7:fe:b9:86:a6:b5:7d:12:e5:
         a1:fe:7b:f4:9a:9c:02:11:50:a0:a9:4e:cc:1a:42:65:09:19:
         b4:84:86:ee:bb:3a:82:7b:4e:d0:7f:36:da:be:28:aa:70:6e:
         a3:ee:a0:2c:47:03:9e:a6:19:d5:09:bb:e0:e2:b1:96:f7:9d:
         56:0a:04:29:c4:b5:6b:db:15:a6:11:52:61:13:80:e1:aa:3a:
         76:f7:91:8b:c6:35:4b:1a:31:18:ad:40:21:ee:3c:22:89:6a:
         5e:c8:76:fa:fc:d4:ec:d4:af:96:39:07:ef:e6:f5:33:84:71:
         4a:59:b9:b9:2a:c7:5f:f4:2e:d3:b5:6c:f0:9b:c1:8d:9c:1d:
         86:10:0d:a7:71:16:47:22:f5:72:fa:4a:06:e3:44:f9:1e:0f:
         15:3b:bd:e7:ea:ee:b6:6c:01:ac:8c:68:b8:69:55:28:1f:fa:
         37:ea:61:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org