Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/233E118443A043992508F4E6C8544E88CFF5C84A.cer
File:                     233E118443A043992508F4E6C8544E88CFF5C84A.cer (raw, json)
Hash identifier:          OKwbP33q0r4HNvc4JKH1deqyfBRaSsEpvaZRk8JLrAo=
Subject key identifier:   23:3E:11:84:43:A0:43:99:25:08:F4:E6:C8:54:4E:88:CF:F5:C8:4A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4BF52A5621CEE3027BD1468CEC7876307B188A6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/233E118443A043992508F4E6C8544E88CFF5C84A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 00:26:13 +0000
Certificate not after:    Thu 25 Jul 2024 00:31:13 +0000
Subordinate resources:    AS: 266631
                          IP: 128.201.140.0/22
                          IP: 2804:3ef4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:f5:2a:56:21:ce:e3:02:7b:d1:46:8c:ec:78:76:30:7b:18:8a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 00:26:13 2023 GMT
            Not After : Jul 25 00:31:13 2024 GMT
        Subject: CN=233E118443A043992508F4E6C8544E88CFF5C84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:78:ef:b4:b2:6f:4b:62:91:17:0b:6e:0f:4c:
                    ea:3d:24:71:37:a9:58:11:ad:66:a5:47:ef:7e:42:
                    17:e4:ad:fe:70:79:6f:a6:bb:a7:23:39:4b:7d:72:
                    6f:71:9c:45:1e:34:ad:90:99:74:89:50:50:3c:ea:
                    cc:fc:f9:c7:02:c0:5f:80:41:85:30:31:8b:aa:6b:
                    f0:5a:3f:64:d4:5b:8e:48:24:e9:8f:82:39:9e:cd:
                    12:c5:b1:f7:0d:87:59:05:c1:70:50:04:1b:d2:75:
                    d7:7f:dd:2f:cc:1a:83:61:01:d4:42:9c:b2:48:00:
                    8d:f6:db:38:dc:ea:36:a2:65:56:87:79:6f:e6:99:
                    88:e4:f1:ef:2d:c7:9e:be:20:02:79:da:2f:75:13:
                    2d:83:21:5f:ae:d6:f0:cd:fc:58:d9:ec:a2:d5:29:
                    07:25:a7:e8:fe:b0:83:d3:3c:f5:e4:30:02:4b:71:
                    c2:10:33:a5:c4:2d:49:d2:77:a6:40:96:80:64:c4:
                    53:2d:de:1e:93:a7:ac:f0:46:fa:26:a5:63:8e:87:
                    47:69:60:a5:28:b0:41:b4:14:9c:3b:07:e1:60:7e:
                    cb:0d:89:04:ba:a4:34:9e:de:25:f1:9a:ff:b0:d9:
                    43:11:5f:88:46:76:af:22:41:95:64:b6:0e:be:07:
                    8d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:3E:11:84:43:A0:43:99:25:08:F4:E6:C8:54:4E:88:CF:F5:C8:4A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5JSWH6igG3HWycqd6tt6Zk92QgXQFifxKAJC775By8gJ/0/233E118443A043992508F4E6C8544E88CFF5C84A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.140.0/22
                IPv6:
                  2804:3ef4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266631

    Signature Algorithm: sha256WithRSAEncryption
         2e:dd:54:50:2d:c1:87:6b:02:4a:2e:ec:5e:29:e2:48:84:33:
         87:31:78:4b:88:c0:85:d3:bc:63:83:bb:4a:0e:9d:40:0e:50:
         b5:eb:a1:b2:76:ea:7e:a9:f9:a6:b1:d6:c1:65:d5:e6:2b:54:
         6e:1a:8d:9e:9c:56:1f:d4:b8:3c:b9:b7:29:3f:14:6f:cf:8f:
         d8:67:89:0c:fc:74:c1:f1:12:7e:f0:92:66:f2:80:3d:68:96:
         fd:bf:20:34:0e:9c:90:cf:dc:70:98:df:f6:23:0a:46:43:4b:
         15:a2:4c:65:57:66:18:35:29:64:1a:e7:f8:53:31:46:55:e2:
         6c:8e:01:cf:5a:5d:10:a7:f0:8d:03:4f:de:9b:1a:8f:47:96:
         62:77:0b:b8:e7:e2:ce:1a:29:1c:3e:1a:5a:1a:19:b4:2d:8a:
         04:69:44:33:c7:88:2a:83:d5:fd:74:49:f4:30:55:72:17:11:
         31:6a:e3:c8:93:d8:30:3c:e1:c4:38:57:2a:6e:ae:19:5e:32:
         ac:c4:da:b5:31:cd:ad:d9:92:2f:47:2d:5a:63:b7:2a:17:12:
         49:7a:4c:4d:d8:96:6e:21:12:99:f1:61:b3:9d:de:16:8d:cf:
         a0:d2:5b:b9:9a:6a:71:50:c9:78:87:d1:8c:08:de:e2:32:4b:
         e4:90:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org