Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/220249BB069A7AB17EC9F608DE544573D0214F45.cer
File:                     220249BB069A7AB17EC9F608DE544573D0214F45.cer (raw, json)
Hash identifier:          ygu+OwIGmmWKzqixps4dyYGfpmMjLBPu55RH+JLf5+c=
Subject key identifier:   22:02:49:BB:06:9A:7A:B1:7E:C9:F6:08:DE:54:45:73:D0:21:4F:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E68977898959BEA5F1C2EA1A35FBD02118B58C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/220249BB069A7AB17EC9F608DE544573D0214F45.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Apr 2023 20:07:02 +0000
Certificate not after:    Mon 22 Apr 2024 20:12:02 +0000
Subordinate resources:    AS: 268577
                          IP: 45.163.116.0/22
                          IP: 2804:5354::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:68:97:78:98:95:9b:ea:5f:1c:2e:a1:a3:5f:bd:02:11:8b:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 24 20:07:02 2023 GMT
            Not After : Apr 22 20:12:02 2024 GMT
        Subject: CN=220249BB069A7AB17EC9F608DE544573D0214F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:fd:d3:13:53:90:97:35:46:49:b9:49:3e:
                    4e:53:ae:59:91:53:54:6d:80:a7:24:73:59:64:8b:
                    16:49:df:54:79:3a:e0:a6:33:c1:5d:ad:1b:c9:dc:
                    aa:33:98:0b:6f:b7:7d:1f:c2:30:b2:0f:f8:1c:94:
                    35:4b:9f:fc:3a:4e:54:d0:c2:57:48:d2:d3:e5:56:
                    9e:3c:bc:4c:4c:1f:be:b0:55:18:60:f1:59:d8:80:
                    f6:44:50:0a:60:c3:1a:89:f6:b6:de:5b:4c:6e:5f:
                    0b:b4:10:53:8a:36:49:0e:0f:80:a8:82:47:8d:f0:
                    dc:b5:1a:37:0f:53:cd:95:16:0e:ff:a7:d1:7d:31:
                    e0:e0:c9:94:fc:8f:5a:a6:c0:50:46:22:ab:f0:7f:
                    c9:fe:69:91:18:7b:5c:71:bb:72:ae:b2:9f:1d:3b:
                    86:8c:b9:45:cd:f1:a9:d2:04:96:80:d4:b3:9a:cc:
                    13:e4:c2:de:21:73:4c:47:b1:ac:70:63:90:cd:01:
                    fc:a8:a1:ae:c0:a3:a7:e5:c0:e1:56:e3:d3:1f:f7:
                    06:36:4d:b0:67:30:0d:93:6f:62:8b:d0:05:88:b3:
                    3e:ed:9e:d0:a3:1f:de:74:b8:05:f7:be:c7:e3:29:
                    12:5e:8e:ef:be:26:c3:75:e5:38:49:af:32:24:9f:
                    cd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:02:49:BB:06:9A:7A:B1:7E:C9:F6:08:DE:54:45:73:D0:21:4F:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/220249BB069A7AB17EC9F608DE544573D0214F45.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.116.0/22
                IPv6:
                  2804:5354::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268577

    Signature Algorithm: sha256WithRSAEncryption
         17:89:bb:2a:e1:b7:37:ad:a8:e1:30:97:38:31:d4:15:1b:88:
         00:9d:5d:13:44:55:25:38:fd:03:44:01:e2:46:f0:db:fe:5c:
         7f:f2:29:b4:89:e1:dc:c3:3c:53:d2:0b:9f:8c:5f:58:15:bb:
         51:b1:3d:9f:a3:a6:88:c0:6b:e3:1e:9c:fc:38:a9:90:23:38:
         44:2b:08:1b:f8:3e:9b:21:59:2f:bb:64:c6:0b:57:b4:de:be:
         7b:1d:81:88:fe:25:0a:f7:f6:21:14:ed:74:fe:ac:4a:6f:9b:
         4e:2c:dd:43:9a:79:47:35:f7:f6:e4:0e:be:30:ff:57:ba:7b:
         8e:d5:5d:9f:3b:7f:dd:57:bb:10:60:4d:af:fc:93:b5:1e:4d:
         b1:48:12:71:25:e1:a3:32:7d:34:b3:a6:c9:c0:26:85:9e:48:
         c9:ad:09:16:b3:65:05:54:99:c4:f6:11:e8:f6:4d:e2:34:b8:
         30:c3:b4:45:80:2d:56:4e:e6:73:32:bf:0b:10:43:5c:49:55:
         b0:04:07:9e:36:44:4b:b4:74:6c:f8:4a:74:9a:1a:5f:2b:01:
         36:a5:c7:80:94:ef:26:63:22:1a:49:c9:bf:7e:01:1d:f6:18:
         99:14:54:d0:71:b7:f9:0d:87:fe:2f:e9:60:ae:1e:12:2e:56:
         c2:d7:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org