Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/227ED32852EB7E9DD926D3293AA745A6F24E118D.cer
File:                     227ED32852EB7E9DD926D3293AA745A6F24E118D.cer (raw, json)
Hash identifier:          0riQngGzHLzrTHWlTccmRDJApOxni9lPY3rzZwiKtfk=
Subject key identifier:   22:7E:D3:28:52:EB:7E:9D:D9:26:D3:29:3A:A7:45:A6:F2:4E:11:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2852DAD3281DEEE4A6C2142BC6AFA8E9AEB99734
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/0/227ED32852EB7E9DD926D3293AA745A6F24E118D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Mar 2024 08:39:23 +0000
Certificate not after:    Mon 24 Mar 2025 08:44:23 +0000
Subordinate resources:    AS: 268219
                          IP: 45.236.12.0/22
                          IP: 2804:4dc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:52:da:d3:28:1d:ee:e4:a6:c2:14:2b:c6:af:a8:e9:ae:b9:97:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 08:39:23 2024 GMT
            Not After : Mar 24 08:44:23 2025 GMT
        Subject: CN=227ED32852EB7E9DD926D3293AA745A6F24E118D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f1:88:46:d2:7d:70:60:14:10:cb:38:50:e9:
                    cf:fe:37:f3:3a:b0:d0:b0:69:66:bc:ae:7c:46:56:
                    b1:5c:85:43:02:21:74:25:de:2b:c8:f0:e7:ce:21:
                    da:88:43:b2:b7:53:df:94:b4:23:02:e4:b9:dd:41:
                    03:a8:66:b3:ba:67:4d:06:45:66:52:73:8a:31:8e:
                    5e:83:7b:80:d4:95:ce:84:60:d0:76:b4:50:a6:bc:
                    9d:14:9f:30:67:2d:e0:e3:64:9b:eb:9d:74:94:1e:
                    14:c5:73:57:80:61:c3:70:a5:7a:78:09:a3:df:4d:
                    45:ca:72:e7:a3:8b:38:7f:68:ee:ea:43:68:ac:db:
                    dd:e2:a6:5e:c5:9b:9a:7a:38:14:eb:fb:e6:27:b3:
                    da:f0:96:2f:48:f2:2e:8d:01:8a:12:ac:b2:0d:62:
                    35:eb:e9:79:9a:dd:e8:15:50:08:bd:4c:3c:7d:9c:
                    53:40:2f:b5:c1:5a:03:45:d4:30:57:27:38:25:3b:
                    c0:25:bb:5e:e2:e6:c8:19:48:6c:cb:f2:a8:ad:8e:
                    23:c4:d8:df:98:45:c9:66:f5:03:99:ed:ca:1e:89:
                    82:fd:e9:07:9b:81:c4:14:7d:be:e5:64:67:ef:f9:
                    30:c9:c3:d5:b3:cd:da:84:0f:5a:ef:c3:8a:95:e0:
                    0b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:7E:D3:28:52:EB:7E:9D:D9:26:D3:29:3A:A7:45:A6:F2:4E:11:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FqYrcWJv1W6ob3UY3JtoYUzSLHi9kNmB4rSKv7WgqZVG/0/227ED32852EB7E9DD926D3293AA745A6F24E118D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.12.0/22
                IPv6:
                  2804:4dc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268219

    Signature Algorithm: sha256WithRSAEncryption
         a9:01:63:85:82:70:d4:32:3b:38:8d:90:76:6b:39:c7:5e:54:
         7d:b1:99:fe:2f:3e:a7:02:cc:e3:8c:04:e5:d4:9a:67:b0:16:
         58:82:b3:fc:c7:21:26:a3:8b:39:75:98:12:90:07:66:d1:5c:
         ad:b4:fe:1d:ec:bc:7f:66:94:7e:82:f6:e8:b9:5f:92:17:af:
         3c:23:45:c4:b5:16:66:40:69:64:d2:89:69:0a:7b:09:d1:b5:
         64:57:f3:9c:22:25:80:36:35:5f:a2:ce:57:f7:78:51:17:2c:
         81:b1:08:46:42:1e:91:66:df:5a:e5:f3:2a:c7:95:87:ca:15:
         4e:dc:c6:15:28:7a:c0:63:ab:4c:7b:9c:f2:0e:f5:31:56:18:
         fb:74:7f:bf:f9:54:be:d8:39:7a:23:39:4e:98:fc:ac:23:52:
         d8:7e:b0:91:40:76:b2:4f:f0:4e:0c:86:cb:dc:f4:17:11:4b:
         b5:b5:11:5a:f4:36:91:fd:f6:5e:6d:d1:87:60:47:9a:bd:02:
         43:d1:bc:50:6f:ea:a1:fc:7e:51:fb:0e:09:73:5d:4c:4e:80:
         31:c7:00:78:8c:b8:db:86:61:65:b2:1f:58:92:7b:cf:3e:06:
         ce:80:72:55:e1:16:5c:1c:ed:88:a7:fb:36:0f:ac:85:32:64:
         f0:f1:9e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org