Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/244D0D68F0AC1F8235814F4ACCC65B6A2DD9FC60.cer
File:                     244D0D68F0AC1F8235814F4ACCC65B6A2DD9FC60.cer (raw, json)
Hash identifier:          nmTQoChd3jVF5WSv/EIb42g9uZg9gQ0E8rEZuc1Q7G0=
Subject key identifier:   24:4D:0D:68:F0:AC:1F:82:35:81:4F:4A:CC:C6:5B:6A:2D:D9:FC:60
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DDA9F06A73C095CF87AE6C0B9E36F6B8DDF93F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/244D0D68F0AC1F8235814F4ACCC65B6A2DD9FC60.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Jan 2023 23:16:33 +0000
Certificate not after:    Mon 08 Jan 2024 23:21:33 +0000
Subordinate resources:    AS: 273647
                          IP: 2804:8a18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:da:9f:06:a7:3c:09:5c:f8:7a:e6:c0:b9:e3:6f:6b:8d:df:93:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 23:16:33 2023 GMT
            Not After : Jan  8 23:21:33 2024 GMT
        Subject: CN=244D0D68F0AC1F8235814F4ACCC65B6A2DD9FC60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:6a:b5:23:79:0d:31:b2:e5:5c:82:bc:ad:
                    ef:aa:7a:c8:a4:dc:7e:c2:4d:bb:16:48:09:09:bd:
                    5b:23:fc:79:7d:a5:c1:c0:f0:25:aa:49:1e:3f:19:
                    01:71:72:80:be:6d:88:04:02:7c:47:95:1d:6c:f6:
                    0f:e1:33:52:42:45:28:93:c4:d6:e5:ed:8e:e4:50:
                    ce:0c:7e:77:50:e6:ee:81:2d:d0:d9:6b:91:fb:6b:
                    45:fd:81:ed:2f:59:17:3c:aa:1c:e4:80:5b:93:bc:
                    6a:31:b4:55:85:28:75:d4:8b:44:12:36:3e:1b:86:
                    06:10:a3:41:94:41:41:eb:b5:46:dd:66:70:0e:9f:
                    26:70:22:04:80:8b:f0:64:a4:c0:50:7c:6c:da:90:
                    7f:3b:8d:a4:39:ea:03:a2:43:bb:ee:b1:6c:b3:33:
                    e8:71:49:9f:29:be:92:5b:71:58:66:cd:84:24:b7:
                    69:d5:82:90:98:ee:b2:89:5c:83:eb:3b:ef:ea:a9:
                    d7:7f:47:30:a4:8f:2b:29:1c:1d:52:ab:8a:dc:14:
                    8f:eb:1a:7b:90:4a:95:31:65:41:e2:10:1b:2b:9e:
                    7d:cf:bd:ce:a1:f2:07:c2:7c:05:86:bf:cf:ed:7f:
                    df:d8:11:ba:c0:eb:e0:34:9f:e2:27:f3:0f:30:cc:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:4D:0D:68:F0:AC:1F:82:35:81:4F:4A:CC:C6:5B:6A:2D:D9:FC:60
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EJXbijYD2tnK4sYeCyNj6Rj5jAxoihd3c32q7boVFK5T/0/244D0D68F0AC1F8235814F4ACCC65B6A2DD9FC60.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8a18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273647

    Signature Algorithm: sha256WithRSAEncryption
         6a:8a:82:23:39:18:2f:f3:7c:3a:d0:1d:d0:d7:7a:f6:c0:fe:
         a2:67:56:98:76:e8:b8:37:bf:64:47:a3:97:5b:25:70:30:22:
         c9:61:fe:a2:6b:2f:89:25:c7:de:00:08:59:90:20:9d:65:54:
         02:6f:d1:89:d0:9c:73:5f:bf:f1:01:d2:85:e8:1c:b5:de:45:
         42:a8:d3:e2:a3:7e:ba:66:7d:ce:81:79:53:0d:f4:97:73:a9:
         3f:c9:ea:ec:6e:80:8d:21:21:b9:de:81:33:01:64:04:51:c6:
         4b:3c:3b:46:db:c1:5d:56:54:f4:8c:a2:96:34:d4:bc:e1:d7:
         c2:ed:b7:a3:04:47:25:c9:7b:7f:eb:14:7f:f3:c7:45:db:9c:
         da:8b:84:64:a3:ba:c6:47:66:51:e9:5e:0f:08:46:d3:de:ef:
         c8:60:03:0e:71:18:b8:68:07:9b:b1:9a:ae:22:87:7a:63:a4:
         fa:b2:3f:3e:08:1f:1c:6a:22:fe:cb:2a:a7:15:37:81:71:b2:
         e0:54:b6:c8:89:1d:c7:b1:1d:32:78:72:55:3d:db:48:df:d8:
         ac:79:fa:ab:23:91:09:fc:dc:e0:f8:e1:5c:a8:df:a9:45:c3:
         60:07:2f:e1:13:75:9a:43:6e:0b:85:2d:f7:c1:c5:59:e0:21:
         95:9e:99:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org