Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1654602F744B5A09AB43A0DC57F75D95B59E2ED6.cer
File:                     1654602F744B5A09AB43A0DC57F75D95B59E2ED6.cer (raw, json)
Hash identifier:          CM+7njnkb0p+5Wa37u+kAqwFtU8M59MT9k0hX0t+uvI=
Subject key identifier:   16:54:60:2F:74:4B:5A:09:AB:43:A0:DC:57:F7:5D:95:B5:9E:2E:D6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D43757EC5AB98A6647D4C112100AD1A69E43651
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/1654602F744B5A09AB43A0DC57F75D95B59E2ED6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 20:25:05 +0000
Certificate not after:    Mon 27 Jan 2025 20:30:05 +0000
Subordinate resources:    AS: 268221
                          IP: 45.236.52.0/22
                          IP: 2804:4dd0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:43:75:7e:c5:ab:98:a6:64:7d:4c:11:21:00:ad:1a:69:e4:36:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 29 20:25:05 2024 GMT
            Not After : Jan 27 20:30:05 2025 GMT
        Subject: CN=1654602F744B5A09AB43A0DC57F75D95B59E2ED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:92:e2:9c:c4:6e:f7:93:24:a4:2e:85:c3:53:
                    ec:58:31:57:fe:a6:fc:7b:63:5e:1a:77:8a:c8:97:
                    b1:84:40:0e:c1:9b:c7:e6:88:e3:94:19:27:75:b4:
                    26:6d:f9:9d:93:d1:b6:8b:1f:03:44:dd:52:c6:3b:
                    ae:b9:10:ae:03:05:9d:75:c0:b9:12:e9:78:0e:8d:
                    76:55:bb:88:9f:30:df:69:aa:3d:b6:44:55:2c:75:
                    33:d6:41:21:95:e3:dd:1b:21:fb:3f:75:3f:db:c9:
                    23:81:11:76:ca:9d:53:3c:79:f3:1b:df:3c:ad:ef:
                    9b:01:cd:6b:60:cd:7d:cc:79:09:c5:fa:48:94:ad:
                    c0:fd:19:7e:10:dd:53:51:df:6b:1e:f6:f5:3c:2a:
                    eb:c2:61:b5:e1:67:a2:02:b0:5c:ff:88:02:a4:a9:
                    8d:91:9e:67:ec:9d:fc:ce:45:3d:9d:7e:a4:1f:c4:
                    b0:5c:44:74:e9:4e:05:52:ef:80:a3:45:d3:17:2a:
                    ae:ec:e3:84:ea:0a:7b:04:16:d5:d5:c8:6e:c5:55:
                    a0:87:86:84:83:34:9f:f0:eb:34:95:31:14:96:a5:
                    76:a0:86:75:20:7d:98:8e:a6:07:9f:f3:6d:ee:4a:
                    58:d5:00:78:03:69:fd:f7:e6:ea:b8:2e:2c:8f:6e:
                    42:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:54:60:2F:74:4B:5A:09:AB:43:A0:DC:57:F7:5D:95:B5:9E:2E:D6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/1654602F744B5A09AB43A0DC57F75D95B59E2ED6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.52.0/22
                IPv6:
                  2804:4dd0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268221

    Signature Algorithm: sha256WithRSAEncryption
         18:ec:81:d9:91:b5:71:e4:11:1e:d6:70:2f:79:f9:41:4f:8d:
         68:bf:35:fd:49:a6:3f:a2:b9:fe:47:ed:03:cd:5b:a5:30:56:
         30:49:ba:d5:15:03:62:fe:86:f1:4e:47:3a:9c:97:6f:e8:4b:
         31:a6:71:3c:05:73:03:eb:70:24:37:81:35:cf:6c:cf:49:d6:
         19:73:de:0d:aa:d1:33:1f:a1:ce:6d:ed:b6:74:70:97:58:49:
         f6:3a:41:28:88:05:2a:88:a9:91:9b:26:2c:cd:d4:01:45:1e:
         11:e2:9f:8f:b8:0a:5d:f8:bf:0e:a0:d2:a2:36:00:df:18:22:
         7d:d7:1c:0e:bc:9a:db:61:ae:70:99:15:4b:36:b0:2c:14:8a:
         0e:f1:d1:5a:14:0c:71:74:c0:70:6b:b0:82:39:e8:9f:d4:05:
         17:80:54:ea:77:ed:bb:2b:a8:98:65:94:f0:fb:fb:c5:77:aa:
         8a:36:4f:a7:98:f4:5d:65:5b:2f:2f:2c:54:e1:6a:23:01:a2:
         c1:6f:79:64:b8:72:cd:4c:df:9b:6e:10:c0:c9:0e:d8:32:46:
         f9:47:ec:06:9d:2e:16:67:25:4b:6d:e4:91:01:6c:91:59:d1:
         b3:a9:ba:aa:08:26:cf:58:ef:96:1d:0d:e3:c2:69:3f:7c:6e:
         83:1b:4e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org