Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/235E2B01C2459F074CFD13885D3E3EBA15EB781D.cer
File:                     235E2B01C2459F074CFD13885D3E3EBA15EB781D.cer (raw, json)
Hash identifier:          qBKmi3aAt2Bw/5RICwPc1fNTxekz46txLsIrAbk/Tqw=
Subject key identifier:   23:5E:2B:01:C2:45:9F:07:4C:FD:13:88:5D:3E:3E:BA:15:EB:78:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       65ECB306DBB63497869B43176FCF73AFA7659E4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9tywXHTgtiZ315xXu27XjYBhEZJK7QPkshjCkeVCMKUZ/0/235E2B01C2459F074CFD13885D3E3EBA15EB781D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9tywXHTgtiZ315xXu27XjYBhEZJK7QPkshjCkeVCMKUZ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Jul 2022 04:45:56 +0000
Certificate not after:    Fri 30 Jun 2023 04:50:56 +0000
Subordinate resources:    AS: 268579
                          IP: 45.163.180.0/22
                          IP: 2804:535c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ec:b3:06:db:b6:34:97:86:9b:43:17:6f:cf:73:af:a7:65:9e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  1 04:45:56 2022 GMT
            Not After : Jun 30 04:50:56 2023 GMT
        Subject: CN=235E2B01C2459F074CFD13885D3E3EBA15EB781D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:79:21:70:13:d7:c2:f7:75:72:9c:6e:0c:82:
                    fc:c5:c9:55:be:e4:ef:82:5e:ca:ae:f5:e2:2f:89:
                    95:09:7f:9a:cb:ac:16:73:69:e9:78:e7:5f:cb:ba:
                    34:7f:38:1d:54:63:f3:4b:5e:33:86:25:42:6e:3e:
                    37:64:d6:e5:78:1c:af:6d:81:9b:1c:29:47:b2:8c:
                    14:1e:76:ec:38:b0:5d:4c:51:6d:fd:a3:ae:46:f3:
                    6b:39:4b:c5:db:f2:84:3c:0e:8c:b7:d7:45:21:d4:
                    cd:c5:3d:f9:cd:9b:05:12:d8:ed:5b:78:a9:f0:85:
                    c2:2c:eb:d6:13:db:80:bb:11:56:de:eb:f0:d8:66:
                    c1:34:e0:9d:26:ce:23:19:22:c8:6c:70:8d:43:9a:
                    fe:0d:a4:c5:53:ed:e5:fa:9a:3f:7b:25:02:9a:e5:
                    ab:0e:2b:df:7b:1a:d7:1f:88:1c:16:67:93:28:72:
                    88:ec:77:70:cc:62:dc:f4:eb:1b:76:90:a1:74:d0:
                    1b:47:03:6f:e9:39:24:0a:a7:2f:a3:19:6d:28:1c:
                    36:61:a6:26:6b:10:cc:0a:4a:60:c6:ad:47:a3:26:
                    64:14:bb:dc:ed:4d:98:18:26:1f:84:80:27:ed:1c:
                    63:12:1e:6d:e4:ba:14:09:78:16:b1:fe:6b:f8:74:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:5E:2B:01:C2:45:9F:07:4C:FD:13:88:5D:3E:3E:BA:15:EB:78:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9tywXHTgtiZ315xXu27XjYBhEZJK7QPkshjCkeVCMKUZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9tywXHTgtiZ315xXu27XjYBhEZJK7QPkshjCkeVCMKUZ/0/235E2B01C2459F074CFD13885D3E3EBA15EB781D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.180.0/22
                IPv6:
                  2804:535c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268579

    Signature Algorithm: sha256WithRSAEncryption
         ae:42:9d:b6:92:63:77:43:b4:e2:9d:4d:3c:74:85:dc:88:31:
         ef:c4:19:1c:50:3d:3f:8e:74:e1:f1:55:82:bd:27:b7:e2:73:
         92:60:ac:95:14:8b:67:98:16:85:0f:db:79:38:82:e7:b3:04:
         73:14:1c:79:9f:18:c8:48:21:03:6d:33:9e:27:e6:d3:1a:cd:
         d2:25:3c:27:63:f2:6f:28:28:41:f0:d4:2d:50:83:fc:02:6a:
         6f:6e:6f:aa:19:53:23:6b:5b:46:f3:ae:d8:17:c7:92:3c:62:
         eb:db:6a:ae:a6:a1:1a:b7:d6:fe:c2:f3:95:65:f0:76:08:5b:
         83:62:77:0c:41:23:28:46:9a:93:ec:79:77:88:a8:23:b7:6f:
         a3:5a:46:9f:0d:19:90:56:96:81:a0:77:94:66:86:b3:ab:f6:
         45:85:26:52:eb:2a:72:0f:74:f1:c3:62:df:3d:ab:ad:1e:d5:
         5a:78:04:03:a5:9e:a4:a3:b3:48:84:bc:00:ce:51:81:32:27:
         82:82:02:a9:8b:95:55:1f:18:9a:59:5d:9e:fb:16:e5:86:86:
         87:4a:6e:9c:b1:f9:11:f5:38:6e:33:22:b2:67:b9:56:59:ec:
         b8:c8:58:74:8d:c7:87:f4:93:f6:f6:92:71:fc:a8:85:e9:fe:
         db:40:9a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org