Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/17488C30686FF2AA2FDB7A7179A279F35B610E3A.cer
File:                     17488C30686FF2AA2FDB7A7179A279F35B610E3A.cer (raw, json)
Hash identifier:          YEvhgPT6CJREtlGnlDVLrkthTeo3hG9SuKXNTYYVc0U=
Subject key identifier:   17:48:8C:30:68:6F:F2:AA:2F:DB:7A:71:79:A2:79:F3:5B:61:0E:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58CBA83B26D3DC913EDD8B93D6C5E3DC34163D6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/17488C30686FF2AA2FDB7A7179A279F35B610E3A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 22:46:37 +0000
Certificate not after:    Mon 08 Apr 2024 22:51:37 +0000
Subordinate resources:    AS: 267935
                          IP: 45.166.44.0/22
                          IP: 2804:5570::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cb:a8:3b:26:d3:dc:91:3e:dd:8b:93:d6:c5:e3:dc:34:16:3d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 10 22:46:37 2023 GMT
            Not After : Apr  8 22:51:37 2024 GMT
        Subject: CN=17488C30686FF2AA2FDB7A7179A279F35B610E3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:82:fa:3f:b9:07:96:24:30:8b:7a:6a:eb:af:
                    e5:75:27:96:c1:b8:14:19:d5:ed:e5:f9:e8:3e:d3:
                    58:bd:71:da:a9:c6:48:ac:58:ca:e2:73:5c:b8:f2:
                    cf:4a:ec:b0:81:27:7a:90:b0:c7:8f:11:31:a8:91:
                    da:43:c4:e6:10:8b:49:16:90:3c:15:15:d6:a8:f9:
                    ff:01:19:a6:12:65:5e:33:22:d7:d8:e1:64:aa:1f:
                    1f:1a:6e:3d:04:7e:16:82:a6:bc:39:e9:50:92:39:
                    81:4f:8a:8a:0a:ca:a5:0b:88:8a:ce:04:f1:16:e3:
                    d9:d3:e4:2f:4f:5f:b7:79:b1:08:23:b3:b0:2a:32:
                    79:54:87:28:81:da:9d:1a:e1:24:99:32:41:7a:be:
                    f0:1f:09:19:65:79:75:e6:05:a4:af:25:10:f8:49:
                    41:67:a2:02:77:f7:fa:c0:20:9e:b1:62:2b:f5:7b:
                    89:fe:fc:f7:b3:6f:e7:86:0a:50:ba:f6:6e:82:80:
                    67:22:49:17:f0:0b:c8:bb:98:2e:77:b3:8d:a9:92:
                    17:51:57:ee:0e:b9:41:10:e7:0b:34:9b:de:25:fc:
                    d8:04:91:6f:10:86:5d:b4:11:00:40:3a:0c:c0:bb:
                    42:17:eb:30:17:ab:7a:2e:d7:63:37:a2:37:6a:6b:
                    e2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:48:8C:30:68:6F:F2:AA:2F:DB:7A:71:79:A2:79:F3:5B:61:0E:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8eBWReb8KTRTRXKZmeQR4cwuwgYz84PMsegpeSRb8qHv/0/17488C30686FF2AA2FDB7A7179A279F35B610E3A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.44.0/22
                IPv6:
                  2804:5570::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267935

    Signature Algorithm: sha256WithRSAEncryption
         89:ca:0b:1e:99:9e:cd:4d:a6:bf:a9:bd:1b:a8:fc:23:72:cb:
         ad:29:ca:5f:b9:9d:3d:d9:01:9a:65:6b:14:3b:78:d2:39:53:
         19:26:d8:53:10:8b:65:38:c9:ce:65:f8:a7:82:83:e8:d6:3d:
         9f:14:fd:60:ad:64:9a:33:18:00:fd:8b:7f:c3:09:1e:47:3a:
         20:6e:df:95:ac:31:25:7e:02:13:d9:29:e5:25:79:37:b2:a3:
         45:dc:e9:b8:52:1a:a6:d7:c2:a2:c4:61:47:c5:af:51:71:39:
         da:ea:12:e8:0e:98:b7:01:9f:b5:40:13:b1:bc:a0:ff:02:4b:
         fa:2e:02:94:ad:34:09:f7:4b:a9:c6:12:35:5b:be:a9:a4:13:
         bc:ee:98:4b:d5:96:96:a4:00:d3:97:33:29:4d:dc:6b:9a:df:
         68:00:22:2c:97:70:ce:1c:94:d5:48:b8:e9:b3:fd:8a:5e:23:
         56:f8:e3:fb:74:7a:b4:be:59:70:97:e2:a6:7f:cc:a9:0d:e7:
         42:14:6e:75:cf:12:94:a4:f8:f2:9b:fb:7d:4a:fd:ea:10:10:
         c1:67:76:03:54:f2:4a:11:70:8e:9e:68:f0:9b:e4:3a:01:95:
         f9:d3:ef:b6:1b:2b:39:65:8c:0b:e9:73:82:1e:b8:73:29:cc:
         16:96:e8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org