Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/22BEDC756A7D6B562826ED4C81CA816D1DE56EF9.cer
File:                     22BEDC756A7D6B562826ED4C81CA816D1DE56EF9.cer (raw, json)
Hash identifier:          2xJHnvD9AZqv3W144q9Ar1R1zLZcTo6+YbOopKEWYmE=
Subject key identifier:   22:BE:DC:75:6A:7D:6B:56:28:26:ED:4C:81:CA:81:6D:1D:E5:6E:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0283E4DF123B1B94E8EDA9AB033A0D5BA203BB89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ExSRebMd4bkXxG4LD2xF8ptrtUx8NmLSyriwYRMTp3ax/0/22BEDC756A7D6B562826ED4C81CA816D1DE56EF9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ExSRebMd4bkXxG4LD2xF8ptrtUx8NmLSyriwYRMTp3ax/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Jun 2023 16:53:54 +0000
Certificate not after:    Fri 21 Jun 2024 16:58:54 +0000
Subordinate resources:    AS: 268150
                          IP: 45.169.76.0/22
                          IP: 2804:58cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:83:e4:df:12:3b:1b:94:e8:ed:a9:ab:03:3a:0d:5b:a2:03:bb:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 23 16:53:54 2023 GMT
            Not After : Jun 21 16:58:54 2024 GMT
        Subject: CN=22BEDC756A7D6B562826ED4C81CA816D1DE56EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d8:da:d3:93:43:e3:af:70:8c:fd:5a:bd:73:
                    c0:60:82:5f:11:b3:90:f1:2d:b3:64:7c:a7:61:63:
                    f5:21:f2:7c:50:3a:c3:2d:d3:b5:8a:b0:de:3b:15:
                    16:c9:5b:60:b9:f8:33:cf:0d:f8:bb:06:f5:93:0c:
                    96:f8:d5:a7:b5:22:7c:a1:83:45:7c:16:fa:02:51:
                    97:76:70:14:a5:6e:9c:f2:eb:e3:ca:2f:70:13:e6:
                    10:2e:c4:ce:cc:06:ec:1a:0e:9c:05:d7:be:53:e4:
                    2f:27:59:48:db:a1:56:17:ec:99:28:65:be:d5:d7:
                    14:71:1e:6d:ee:a0:67:9e:a0:40:06:82:71:37:bd:
                    49:90:05:b7:c7:ba:f6:f3:c3:fd:ca:99:f6:f5:6a:
                    34:b0:20:cb:e0:ad:2d:a9:72:39:bc:53:62:19:9b:
                    a3:81:93:ae:11:37:cd:02:56:ef:f5:3f:c3:4d:18:
                    e1:c8:b6:19:73:f0:42:92:24:ee:89:a4:59:6e:26:
                    4d:07:1c:9d:ce:96:c5:dd:85:92:6e:9a:55:fd:96:
                    1a:45:8b:f2:f8:21:a0:c5:9c:bf:32:b0:86:b5:f0:
                    86:78:24:55:c6:eb:1c:37:ca:14:42:df:8a:fb:71:
                    96:d8:ca:f6:59:1f:32:1d:2c:c5:0a:87:97:e0:91:
                    4c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                22:BE:DC:75:6A:7D:6B:56:28:26:ED:4C:81:CA:81:6D:1D:E5:6E:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ExSRebMd4bkXxG4LD2xF8ptrtUx8NmLSyriwYRMTp3ax/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ExSRebMd4bkXxG4LD2xF8ptrtUx8NmLSyriwYRMTp3ax/0/22BEDC756A7D6B562826ED4C81CA816D1DE56EF9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.76.0/22
                IPv6:
                  2804:58cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268150

    Signature Algorithm: sha256WithRSAEncryption
         b7:09:a2:f6:81:e4:de:58:6b:b1:af:23:ef:45:72:92:de:5f:
         25:87:0b:e6:b5:de:15:39:b8:58:ce:96:f2:08:bf:b4:bc:76:
         d0:d8:98:dc:ea:00:f3:96:fc:47:e4:8c:95:be:54:ad:d2:85:
         d5:6d:30:d7:71:29:5b:8d:d2:68:16:95:47:f3:59:f1:ee:85:
         66:aa:75:14:2c:88:0c:83:07:04:72:73:39:18:1e:36:7d:cb:
         99:61:7d:9a:77:fe:de:f5:5f:13:3b:c2:d9:a3:9f:2d:37:cd:
         a3:89:23:97:8d:3f:b6:2d:38:d0:75:c1:8f:d0:74:82:f0:52:
         63:ca:d7:be:e9:ae:d8:9e:bf:a2:fd:8e:0a:51:e7:3c:58:6e:
         d7:85:1e:04:b2:03:40:7e:59:08:07:5c:1d:3e:89:49:e9:93:
         3e:f4:a7:a9:5a:aa:4d:9f:c3:8f:d8:ce:88:c0:b6:9b:18:46:
         db:f5:64:47:98:ba:37:41:8b:49:48:13:e7:d1:0b:68:4f:ae:
         87:c2:88:32:c9:0a:bf:02:72:39:67:be:21:37:80:d5:58:1e:
         0a:65:c2:16:b1:80:2f:44:d8:e6:13:60:c4:cd:b1:92:ca:a8:
         2b:3b:91:0f:c4:ca:05:1d:28:19:2f:fe:fa:a1:2b:3e:90:49:
         1e:67:9f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org