Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/218965930961CE95EFA3EF552D5E5C845E401D2A.cer
File:                     218965930961CE95EFA3EF552D5E5C845E401D2A.cer (raw, json)
Hash identifier:          +xIowN0Va7xdkuI1Dtdeew1a20tLQ953m3peQcI7C38=
Subject key identifier:   21:89:65:93:09:61:CE:95:EF:A3:EF:55:2D:5E:5C:84:5E:40:1D:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E7B0AF4E421E795BB931D6CE9E1F0775582C5D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/218965930961CE95EFA3EF552D5E5C845E401D2A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Aug 2023 21:03:41 +0000
Certificate not after:    Mon 26 Aug 2024 21:08:41 +0000
Subordinate resources:    AS: 266970
                          IP: 45.226.156.0/22
                          IP: 2804:4620::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7b:0a:f4:e4:21:e7:95:bb:93:1d:6c:e9:e1:f0:77:55:82:c5:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 28 21:03:41 2023 GMT
            Not After : Aug 26 21:08:41 2024 GMT
        Subject: CN=218965930961CE95EFA3EF552D5E5C845E401D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:ba:e3:ab:64:8d:00:c9:f5:74:d4:d4:db:
                    1d:24:05:37:00:94:14:07:7f:a8:99:50:d3:ae:cb:
                    d7:28:b3:d8:b8:24:6f:a2:e1:64:0b:b0:40:8b:b7:
                    bc:ec:c9:ab:4c:a4:f6:02:45:f2:79:fc:e3:41:d9:
                    a9:75:41:2e:7b:88:86:af:c3:b0:41:65:4b:27:27:
                    f5:75:e1:c9:42:71:4c:96:45:be:d8:ea:74:ab:be:
                    c6:62:74:65:e2:dd:ea:20:6c:80:15:d0:fc:30:eb:
                    c1:28:fa:38:53:a2:22:b8:7f:92:49:93:e1:8d:1b:
                    5f:09:be:11:f3:d1:f4:f4:e4:7f:99:dc:28:19:96:
                    50:e2:d7:69:24:e6:99:4c:40:80:47:c6:f1:7d:49:
                    b9:0d:4c:8d:22:8d:eb:be:9d:f1:db:67:2d:80:89:
                    4c:d5:ae:a8:f7:2c:c1:3e:50:90:27:f4:cc:c0:2d:
                    a5:9a:df:b1:4b:b1:16:5b:53:7e:cc:04:58:62:8b:
                    c7:f3:6a:b8:ba:74:2c:23:3a:f4:67:b7:e8:d3:b3:
                    9c:76:c1:df:84:d7:9d:30:87:89:a5:bb:0c:b0:f2:
                    05:c0:62:ef:ca:6d:05:85:07:1c:5f:bd:d7:cd:3c:
                    95:d2:6a:46:85:81:bc:12:ae:73:45:dd:61:57:71:
                    97:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:89:65:93:09:61:CE:95:EF:A3:EF:55:2D:5E:5C:84:5E:40:1D:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/M8aJ5JGWDZSaeZkNtEWTsRDRKgQmz6PVNrNmP5QEvNN/0/218965930961CE95EFA3EF552D5E5C845E401D2A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.156.0/22
                IPv6:
                  2804:4620::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266970

    Signature Algorithm: sha256WithRSAEncryption
         a6:f4:dd:9e:5e:52:51:cd:ad:b9:da:33:db:12:83:c1:1f:e6:
         10:1c:a2:ce:f1:70:06:80:47:ef:82:8d:45:e3:03:a2:8a:f4:
         81:a3:32:ea:de:58:d3:a6:e2:7a:f7:46:86:d0:cd:60:95:d8:
         f7:96:c2:c9:5b:1d:78:5f:14:89:85:3b:95:b1:53:c0:87:a0:
         c0:d6:6c:44:d2:35:74:90:65:a0:e0:a2:f4:40:dc:2b:41:44:
         3c:34:27:74:ce:89:66:0e:ff:ca:2e:07:61:d3:bc:d7:d9:2f:
         93:f9:09:27:81:b7:1d:93:5b:06:46:0a:5a:e9:ea:8d:14:99:
         0f:18:1c:72:d2:63:f6:21:cf:8e:36:be:e5:7b:66:2e:54:24:
         fa:95:fa:2f:30:e7:aa:46:9d:30:4f:2e:ab:03:6e:f8:81:f0:
         af:b2:9e:38:01:c1:87:b0:8e:ed:60:26:12:34:a8:b1:ab:71:
         9c:d8:a9:db:b6:45:61:34:e1:c9:b0:01:5c:a7:a1:b6:cf:74:
         05:56:a5:70:c6:73:b4:93:77:27:c8:34:82:30:bc:df:1b:84:
         50:51:fa:7c:9c:37:53:b8:d2:57:ae:8a:7e:19:f0:97:55:62:
         27:f2:c1:91:e9:a7:7f:af:09:98:e2:3f:94:85:60:26:3d:34:
         79:de:ac:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org