Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/227999345B6825C592F26D792A9A591CD758367B.cer
File:                     227999345B6825C592F26D792A9A591CD758367B.cer (raw, json)
Hash identifier:          AoGSAGKZsJ07cR38lRegC/q+5rQXpeon4v090kz/naA=
Subject key identifier:   22:79:99:34:5B:68:25:C5:92:F2:6D:79:2A:9A:59:1C:D7:58:36:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2546F814CB1AFC54326A83A254610D304A745302
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/227999345B6825C592F26D792A9A591CD758367B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Mar 2024 18:46:20 +0000
Certificate not after:    Thu 27 Mar 2025 18:51:20 +0000
Subordinate resources:    AS: 271017
                          IP: 200.219.0.0/22
                          IP: 2804:7500::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:46:f8:14:cb:1a:fc:54:32:6a:83:a2:54:61:0d:30:4a:74:53:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 18:46:20 2024 GMT
            Not After : Mar 27 18:51:20 2025 GMT
        Subject: CN=227999345B6825C592F26D792A9A591CD758367B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cd:e6:0e:04:ac:61:d8:60:ba:23:29:b2:75:
                    26:fe:6f:54:71:17:7e:2f:88:4f:4e:ca:39:81:20:
                    94:18:41:dc:2d:15:23:da:81:67:0b:c2:e2:85:af:
                    aa:fd:60:15:3e:e4:cb:92:70:43:c9:d1:3c:a5:a8:
                    e2:72:3c:62:9d:fc:99:f6:ca:9d:01:1d:28:57:48:
                    dd:fa:79:e2:fe:ac:2b:27:7c:de:b9:70:3f:ec:fe:
                    41:b3:12:f5:00:3a:3a:50:9e:6b:d9:17:a6:8a:01:
                    86:56:ca:73:53:ac:8a:54:6e:df:99:6e:9a:66:cf:
                    f3:5a:3c:28:c7:3e:e3:9e:0d:22:c5:da:f0:7e:8a:
                    b9:e5:bd:47:0b:7b:9a:2f:60:17:23:db:3c:00:1a:
                    18:e1:9a:02:cb:9d:47:fc:75:a0:8e:a2:f2:9e:05:
                    43:c4:83:eb:e4:fb:01:ed:7c:af:5f:97:45:ab:28:
                    e2:8a:be:f6:4f:69:56:f2:67:7b:f3:19:5e:bd:76:
                    cf:4b:8d:4c:6c:a2:5b:8e:bc:80:d6:a3:b4:95:7d:
                    5f:0f:b8:0e:f4:86:c7:94:40:1a:85:28:05:fd:2c:
                    9c:79:dd:39:b3:19:13:a0:3b:d9:38:12:41:e0:aa:
                    89:a4:76:aa:1f:68:2a:3f:c3:a4:38:0d:9a:2c:14:
                    7f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:79:99:34:5B:68:25:C5:92:F2:6D:79:2A:9A:59:1C:D7:58:36:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6rcUerafhtXYsbWrZDg8BTFg9c4VEf6qoRSk3p7LGtZ8/1/227999345B6825C592F26D792A9A591CD758367B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.0.0/22
                IPv6:
                  2804:7500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271017

    Signature Algorithm: sha256WithRSAEncryption
         2f:48:00:81:ce:7b:34:7f:ef:fc:dd:f8:69:5a:c3:ee:db:1f:
         d3:e9:ee:60:ba:f6:eb:42:df:b8:31:7c:01:c0:1a:29:90:3f:
         7d:1f:e6:1c:51:09:37:f1:02:64:30:f9:92:58:00:16:51:25:
         e2:aa:fe:d0:9b:02:17:95:e6:05:bc:bc:99:8d:65:03:8e:bc:
         b8:42:ed:92:c7:ac:44:54:58:99:d5:04:87:b4:f8:14:21:dd:
         44:0c:e9:e2:21:48:2b:7c:ae:9a:6c:54:70:92:ab:75:d6:c3:
         4e:5b:ca:ff:84:55:20:f0:06:2f:f8:32:16:ce:2d:63:85:ac:
         03:d3:43:a9:1b:77:64:d4:6c:ce:d0:02:8d:77:8b:a9:cf:37:
         db:44:07:8d:50:dc:a2:b0:4c:b0:37:53:c6:8e:b8:30:1e:12:
         d5:21:e8:a3:67:14:3a:f6:cc:17:cb:b0:8e:aa:45:1d:10:2e:
         05:df:ff:21:ba:bf:fb:47:55:af:b2:20:92:8e:8b:78:d5:c6:
         2e:8e:10:fb:4e:b4:40:ac:95:bf:6b:05:c8:e5:af:0e:ea:34:
         61:b0:6c:24:85:21:e7:89:99:d3:27:0b:34:b7:d7:a7:e6:d7:
         06:83:82:0e:5f:ea:09:0d:25:9e:10:c0:bf:8e:01:25:1f:6e:
         3f:fc:4d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org