Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/22A35F8203D28C9D76E9A71A1296D297C4F0F7D9.cer
File:                     22A35F8203D28C9D76E9A71A1296D297C4F0F7D9.cer (raw, json)
Hash identifier:          8tC4WhYoVt43fbM3wSVPcMLeHl+f8I+ooZY/k3URCTw=
Subject key identifier:   22:A3:5F:82:03:D2:8C:9D:76:E9:A7:1A:12:96:D2:97:C4:F0:F7:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0EF0FB56A442439BCAA5A39150B140072BAE5691
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/22A35F8203D28C9D76E9A71A1296D297C4F0F7D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 23:06:39 +0000
Certificate not after:    Thu 23 May 2024 23:11:39 +0000
Subordinate resources:    AS: 271691
                          IP: 190.185.98.0/23
                          IP: 2804:7f7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f0:fb:56:a4:42:43:9b:ca:a5:a3:91:50:b1:40:07:2b:ae:56:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 23:06:39 2023 GMT
            Not After : May 23 23:11:39 2024 GMT
        Subject: CN=22A35F8203D28C9D76E9A71A1296D297C4F0F7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:30:1d:ec:aa:da:42:c3:98:ef:61:08:35:cc:
                    33:a3:73:a2:35:9b:3c:0a:eb:9a:92:65:1a:f6:b3:
                    47:92:57:4d:12:3e:d7:c3:0b:72:cf:4f:5f:85:69:
                    04:74:fb:b1:99:47:01:56:5b:9f:09:b8:4f:b7:8f:
                    ac:f7:80:a4:48:02:35:fc:00:cf:5e:0c:18:06:a5:
                    43:16:ac:1a:cb:0f:0d:9f:5e:68:73:9d:a7:e4:64:
                    58:24:93:53:e0:9e:24:83:ca:58:1a:14:a2:95:01:
                    1b:43:9f:f4:ea:6f:70:af:7b:c3:99:d5:c6:cf:e3:
                    1a:5d:c8:7b:38:05:57:01:aa:0f:98:77:df:3b:38:
                    cc:54:a5:51:8c:00:41:75:43:47:8b:76:d2:7e:36:
                    c8:1b:a1:de:9f:f8:23:a3:83:b3:31:ea:f2:5f:11:
                    8f:5f:80:7c:70:d0:bb:a2:8f:04:0f:3c:02:95:d7:
                    56:cf:ab:1d:17:ac:53:0a:38:1a:19:9b:32:11:92:
                    62:a6:61:53:55:ef:48:24:32:ca:91:8d:a9:b3:14:
                    4f:2c:b7:a5:65:a0:52:93:65:ed:a7:60:86:de:04:
                    44:d9:bd:95:0f:ad:4e:20:02:84:25:3e:94:f5:11:
                    83:2c:12:ce:5c:2c:ad:7d:1d:71:cc:d3:fe:fb:a3:
                    49:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:A3:5F:82:03:D2:8C:9D:76:E9:A7:1A:12:96:D2:97:C4:F0:F7:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/E5MXgvbHEJwH6anZmRfhWQVQrxxu38gTBA9c63vcsS7T/0/22A35F8203D28C9D76E9A71A1296D297C4F0F7D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.98.0/23
                IPv6:
                  2804:7f7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271691

    Signature Algorithm: sha256WithRSAEncryption
         b0:f0:ec:dc:5c:03:2c:0b:aa:89:16:e3:97:a3:ff:e6:d9:99:
         33:94:2f:3f:fd:17:28:c1:f9:ed:b5:77:dd:6c:03:0d:3b:d9:
         71:32:a8:25:a1:ca:fd:8f:9e:29:44:3c:1e:b2:85:3c:f0:3d:
         5e:e7:d7:63:8a:63:21:a2:f2:1c:88:d7:5f:99:a2:aa:39:2b:
         1b:d6:bd:ae:45:f1:54:b3:b1:e3:83:69:92:69:df:c5:da:e6:
         05:58:e2:0c:db:bc:0e:56:f4:5e:56:15:1b:f1:83:74:cb:69:
         eb:11:9b:5d:b2:4d:03:a4:9b:9e:9e:f2:09:93:5d:fe:b7:80:
         dd:34:eb:7d:81:fb:4e:b8:44:f9:8f:ff:d4:db:6c:45:a8:9b:
         af:82:9d:5f:56:a1:3a:d3:bd:ed:3f:a4:29:ab:93:60:ee:30:
         e4:bb:24:84:7e:b5:88:86:54:69:8b:85:07:4b:84:26:ea:d7:
         69:9f:76:f7:22:09:2e:38:77:7c:0a:f1:d8:6c:f7:82:98:c7:
         88:e6:9d:fc:11:4c:28:d3:a6:b9:05:48:03:e2:7f:bb:a2:67:
         4a:7c:42:f9:4b:72:e6:77:e7:87:22:a1:ab:93:e7:ff:f0:e5:
         e1:f8:04:9a:4b:3b:10:25:91:0a:84:d2:d4:35:1e:5a:f8:be:
         f7:1b:26:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org