Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE.cer
File:                     15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE.cer (raw, json)
Hash identifier:          xnW0xfTpT6RMnKubI195iDAf4uQnwW8iQy0xJOGKSXI=
Subject key identifier:   15:EE:5B:E9:48:C4:D2:5B:AD:71:E1:BC:93:EA:05:D9:04:40:EF:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5AEAAB62AFBD4002987839F43376EC9854697D83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Jan 2022 12:02:41 +0000
Certificate not after:    Thu 05 Jan 2023 12:07:41 +0000
Subordinate resources:    AS: 266603
                          IP: 128.201.8.0/22
                          IP: 2804:3e88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:ea:ab:62:af:bd:40:02:98:78:39:f4:33:76:ec:98:54:69:7d:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  6 12:02:41 2022 GMT
            Not After : Jan  5 12:07:41 2023 GMT
        Subject: CN=15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:d9:a3:c6:cf:03:ae:b0:af:7c:17:6a:d9:
                    89:1d:ca:4b:b7:1a:66:00:fb:ff:5b:24:37:83:65:
                    15:7c:d4:9a:f4:5a:9c:95:39:10:93:b9:d3:fe:ea:
                    3a:d9:8a:2d:35:3e:13:85:4f:b4:19:18:dc:57:5b:
                    27:ed:6b:18:9b:a1:ad:84:ba:bf:02:e2:da:2b:87:
                    c0:74:19:65:35:f8:93:ed:a2:4c:54:a1:ec:53:2a:
                    92:43:d7:51:8e:9a:b9:2f:36:a5:cf:73:88:11:3e:
                    ca:b4:0e:6d:b7:a6:cf:4d:c6:00:33:cd:70:d9:13:
                    ca:1e:9d:3c:80:3a:15:c1:92:62:1b:bd:0c:58:0f:
                    c7:bc:72:dd:b9:3e:e8:89:10:6b:96:9e:a0:f1:bb:
                    e9:59:cc:c4:1f:7b:74:cd:e9:17:a0:56:ca:f5:c9:
                    90:6e:3f:5a:5e:6a:3e:48:b9:20:3d:79:49:f3:39:
                    fa:d4:8f:52:e6:58:dc:39:77:41:0d:11:a3:f9:30:
                    0b:e4:a0:fc:8b:f0:10:78:ef:37:00:6b:86:45:04:
                    c8:b8:3a:22:ff:67:6c:f4:0d:20:69:14:5f:f8:a3:
                    cf:81:eb:2a:51:64:5d:77:0a:93:d9:73:0d:80:57:
                    8e:8a:2d:9f:fd:bb:8e:7c:33:95:ad:d0:81:78:65:
                    a1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:EE:5B:E9:48:C4:D2:5B:AD:71:E1:BC:93:EA:05:D9:04:40:EF:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5pouSoBXNud618h96unimYg6VGcqpbYpvUsY5ED91a7D/0/15EE5BE948C4D25BAD71E1BC93EA05D90440EFFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.8.0/22
                IPv6:
                  2804:3e88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266603

    Signature Algorithm: sha256WithRSAEncryption
         22:9c:48:94:d6:49:b1:9a:5a:78:28:c5:d9:ab:72:32:3c:9f:
         b0:b5:a3:7f:cf:13:92:62:a8:ad:63:eb:f2:c5:1e:fb:ad:f5:
         e6:59:0b:42:7b:f9:e4:2d:ca:a5:2c:24:c8:2a:5d:0e:2f:00:
         a7:4b:81:e4:a9:8c:bb:80:21:3b:d0:1d:55:51:fb:3d:c5:60:
         15:a9:0c:d6:b9:ea:b6:88:98:33:ba:a2:a3:71:0c:d0:c0:d8:
         62:c6:57:b1:38:b8:5e:17:d0:75:29:e2:70:5c:5b:8a:4e:08:
         24:8c:48:b0:87:e9:b0:8f:90:bc:f2:8f:fc:21:3c:dd:1a:a4:
         97:9c:3e:d0:59:a7:d0:c0:08:11:5d:f8:d8:1f:23:04:97:d9:
         5f:e6:2e:16:ae:98:7f:01:16:f4:e6:00:bf:d4:36:0e:04:3b:
         f9:90:52:04:42:4a:13:be:40:3b:9f:6b:9b:1c:63:e5:dd:d3:
         3e:3b:73:93:62:23:6d:15:33:0c:07:6b:29:70:10:44:77:b6:
         16:ac:1f:55:6b:20:db:aa:95:60:da:ca:d4:12:54:09:3f:f4:
         02:19:eb:e1:e7:d7:5b:8c:05:f9:fc:44:31:62:ee:bb:8a:c7:
         67:ec:78:fc:ea:e0:9c:fa:17:ee:21:65:52:20:78:b0:d6:8f:
         84:c6:b9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org