Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/23DD08B01CB87C4A59C18D3779D05E4941011A7B.cer
File:                     23DD08B01CB87C4A59C18D3779D05E4941011A7B.cer (raw, json)
Hash identifier:          FEdvXWWU8OKUzdkaby1mG1vzRBV3o9p7/cBQ6BTELi4=
Subject key identifier:   23:DD:08:B0:1C:B8:7C:4A:59:C1:8D:37:79:D0:5E:49:41:01:1A:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3FC403CFAFEDB80918343300D75D4F0A094296A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/23DD08B01CB87C4A59C18D3779D05E4941011A7B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Dec 2023 17:28:44 +0000
Certificate not after:    Wed 18 Dec 2024 17:33:44 +0000
Subordinate resources:    AS: 269444
                          IP: 45.186.164.0/22
                          IP: 2804:64b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:c4:03:cf:af:ed:b8:09:18:34:33:00:d7:5d:4f:0a:09:42:96:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 17:28:44 2023 GMT
            Not After : Dec 18 17:33:44 2024 GMT
        Subject: CN=23DD08B01CB87C4A59C18D3779D05E4941011A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:d5:f7:92:28:de:fe:0f:97:c2:13:11:9e:
                    e6:66:4d:00:3b:c3:74:04:b6:0e:59:64:ac:6c:29:
                    6c:6a:72:08:19:8c:c9:57:d3:2c:b6:09:b4:48:7e:
                    38:71:1b:27:4c:52:9c:bd:af:10:c2:a7:70:5b:4c:
                    a1:76:8e:0a:79:27:aa:21:ea:b0:25:be:55:0f:97:
                    0e:d1:6e:81:91:2f:67:63:fe:1e:98:3f:34:df:1b:
                    3a:bf:2c:26:81:ad:f2:35:af:91:cb:e8:ec:45:2e:
                    fe:55:8f:0e:7a:2d:71:cc:00:8a:4e:7e:89:7c:22:
                    64:f7:b8:4b:8b:33:c6:03:42:39:cf:6d:6a:b2:36:
                    59:6f:81:89:69:49:d9:ef:51:98:b0:f9:84:60:b8:
                    31:45:74:ee:0f:40:92:80:d7:2b:db:63:54:da:64:
                    04:5b:15:4f:bb:4a:c7:b5:c3:c4:77:df:e0:eb:46:
                    8d:e1:51:e2:06:e0:7d:48:26:2a:98:ba:53:5c:81:
                    7c:4e:6d:a3:cf:4c:61:48:53:ab:f0:24:2c:fb:fb:
                    e8:27:14:de:57:9a:7b:cc:1a:40:39:66:68:63:85:
                    fe:d7:b3:7e:aa:cd:27:8f:c7:91:bd:f8:d9:d4:14:
                    a1:1b:d4:45:9e:ed:a8:f1:ba:41:e2:40:e3:bc:51:
                    77:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:DD:08:B0:1C:B8:7C:4A:59:C1:8D:37:79:D0:5E:49:41:01:1A:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/0/23DD08B01CB87C4A59C18D3779D05E4941011A7B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.164.0/22
                IPv6:
                  2804:64b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269444

    Signature Algorithm: sha256WithRSAEncryption
         a4:4f:7e:bc:bb:1f:4c:67:d9:14:83:6b:a4:55:05:74:f1:b6:
         96:fe:97:fe:6f:77:eb:7d:a7:b7:f3:23:27:4e:d3:68:88:86:
         da:25:73:77:47:93:cd:9e:ea:12:29:65:c1:d2:5a:90:29:ea:
         06:2c:31:b6:1d:85:9d:b5:53:18:58:34:f0:e1:21:7d:16:df:
         d8:0e:64:c1:ae:28:83:ea:fb:e0:f5:30:c0:1a:b0:32:62:7c:
         06:5e:26:98:32:4b:f0:e7:07:57:81:a0:07:41:3e:6d:f6:01:
         ec:ba:28:a9:9e:6c:c1:fc:0b:94:a7:34:21:fb:1a:c2:a4:b0:
         e6:9c:f8:c8:50:d4:08:9d:b2:7b:f8:9e:ab:2d:12:77:9b:75:
         07:63:3e:1d:50:b8:a8:e3:9e:d2:bb:31:df:fa:e7:b7:a4:2a:
         84:e5:f1:e4:e1:17:70:d0:21:64:b0:64:91:e2:fc:1d:f2:92:
         6c:e2:41:a2:e7:32:87:1f:e8:fa:83:8e:05:fa:41:e5:aa:b6:
         0c:89:09:8a:e7:27:55:4f:b0:13:bc:ec:d7:bb:8c:44:b8:43:
         42:68:60:54:cc:f7:ad:e5:ec:b2:90:2e:ba:2c:0d:ce:d6:ce:
         45:13:12:1c:4b:20:df:82:2c:a0:c5:ac:44:6a:84:6f:7a:96:
         16:ea:b1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org