Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.cer
File:                     1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.cer (raw, json)
Hash identifier:          S4iewt/LAwRg7evRbZTuHQoPvgaq1UDxurvKPsjQKQo=
Subject key identifier:   15:50:DF:0A:F2:4D:ED:E2:FB:9F:66:A1:C8:05:60:A1:FB:45:6C:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F357F700F7A01137822B6505926A1C565B14571
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 19:15:15 +0000
Certificate not after:    Fri 14 Feb 2025 19:20:15 +0000
Subordinate resources:    AS: 268446
                          IP: 45.161.16.0/22
                          IP: 2804:5158::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:35:7f:70:0f:7a:01:13:78:22:b6:50:59:26:a1:c5:65:b1:45:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 19:15:15 2024 GMT
            Not After : Feb 14 19:20:15 2025 GMT
        Subject: CN=1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:11:60:7b:68:51:c2:4e:6f:e7:1c:be:95:ea:
                    4d:04:cb:79:c3:e8:e8:6c:63:79:9c:c2:8a:95:e3:
                    41:1b:43:f0:3c:1d:d0:b3:dd:e4:71:68:b6:53:2f:
                    2e:a1:86:c0:59:c4:71:ee:c1:09:ad:27:e4:aa:b3:
                    87:16:6b:72:6f:c0:22:82:dc:34:9c:45:1c:02:d1:
                    51:50:5b:44:50:e6:5d:d5:a7:5b:15:39:d8:44:b8:
                    68:2f:1c:94:d3:98:8e:37:95:fb:fc:00:22:54:50:
                    b0:58:82:c3:e2:14:b4:bf:d6:c1:b2:49:e4:ac:7c:
                    d9:3d:06:e6:ad:09:52:69:b1:67:d4:7b:2d:44:53:
                    50:d8:a2:93:ec:d1:3f:f6:0e:88:4b:5e:99:a3:41:
                    20:40:24:8f:0e:eb:46:53:31:5c:43:9b:ca:18:55:
                    7a:82:be:a9:f8:e1:b0:7b:0b:dc:35:8f:fc:85:82:
                    bf:9c:ef:cf:e8:1d:74:e9:ba:7f:58:b9:4b:07:15:
                    6a:e3:26:df:b2:2e:33:b3:f9:22:ac:ec:35:71:c0:
                    d4:59:d1:45:4f:66:c0:7b:b1:cc:05:80:81:a9:95:
                    02:92:02:15:83:44:9f:57:e6:92:6f:76:aa:18:97:
                    78:b4:0e:df:f4:c6:2f:4b:2e:8c:1e:a6:15:3c:03:
                    37:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:50:DF:0A:F2:4D:ED:E2:FB:9F:66:A1:C8:05:60:A1:FB:45:6C:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/0/1550DF0AF24DEDE2FB9F66A1C80560A1FB456CDB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.16.0/22
                IPv6:
                  2804:5158::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268446

    Signature Algorithm: sha256WithRSAEncryption
         95:7b:e2:61:17:8a:5c:91:15:9a:1c:25:98:b5:89:b2:cc:83:
         d8:5b:15:76:21:c8:62:f0:20:6c:0d:73:3c:10:81:8d:f1:68:
         6c:cd:53:34:77:cf:f7:27:82:a5:d7:19:77:a2:11:a5:3d:c0:
         6b:ea:76:18:2f:dc:60:4d:aa:0e:35:4b:08:8c:ea:16:e3:26:
         1e:e8:54:24:e2:be:7d:8f:7a:29:61:04:e2:02:14:55:64:54:
         21:93:12:81:35:c9:2b:3f:7e:2c:16:14:f7:2e:16:83:d7:5b:
         aa:8f:bf:1e:c4:92:f4:de:3b:e7:9d:6e:a3:1c:c3:51:30:9a:
         d9:8f:9c:c6:7c:a5:53:6a:6a:d2:85:39:cd:7d:12:0e:5b:28:
         8b:6e:af:d9:1d:05:e7:d5:75:4e:18:34:64:9d:23:de:50:4c:
         4e:9a:0a:f1:7b:de:a1:f2:fe:80:f6:df:60:f1:a0:fc:03:70:
         2d:0e:93:be:db:52:5b:5f:9b:84:e0:31:8f:23:1a:00:6a:6f:
         88:07:c0:c2:b5:72:0d:96:fa:2d:1e:e4:07:2a:56:c6:39:89:
         ab:b8:a6:cd:25:0e:04:5d:7a:af:dc:8d:d4:f5:0b:27:26:1d:
         9c:41:c9:66:ed:33:4e:71:b2:80:f3:fe:cb:8b:0a:b0:29:41:
         6a:25:ce:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org