Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.cer
File:                     246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.cer (raw, json)
Hash identifier:          5r/F+d6G3JHYzztTHrey+ufRsKzvR1J9kdHkN9Gzs2o=
Subject key identifier:   24:65:99:CD:B5:A9:BC:C9:5E:5D:CF:F5:16:8E:E7:70:BE:6A:CC:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3DD4A598C691F946489E6BF5434E8D91F5BD9FFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Oct 2023 23:05:10 +0000
Certificate not after:    Thu 24 Oct 2024 23:10:10 +0000
Subordinate resources:    AS: 268054
                          IP: 45.167.104.0/22
                          IP: 2804:5740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:d4:a5:98:c6:91:f9:46:48:9e:6b:f5:43:4e:8d:91:f5:bd:9f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 26 23:05:10 2023 GMT
            Not After : Oct 24 23:10:10 2024 GMT
        Subject: CN=246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:85:ae:02:19:c3:03:73:2b:3f:41:34:49:
                    56:a2:b1:4f:ad:56:08:26:6c:ab:14:cc:89:fa:66:
                    e2:d3:a4:16:54:7d:1a:06:a6:16:52:61:10:06:83:
                    b7:0d:54:25:4b:61:65:19:bf:5a:63:0d:a6:78:9f:
                    19:8e:92:83:d6:2d:8f:1b:bd:d5:32:2e:c9:c9:65:
                    84:ea:9a:f9:e4:ff:9b:0f:85:1d:42:06:7d:ec:43:
                    d2:b0:a4:c5:88:b0:a0:ea:36:5a:cb:1c:f7:e5:e8:
                    91:7a:d8:74:92:5e:cb:04:e1:a6:84:95:f7:3d:dd:
                    a0:f3:6d:91:30:5e:98:f4:02:16:83:da:62:92:f3:
                    06:d2:d7:b4:8c:10:8c:c0:bf:1d:ea:3b:ba:b3:82:
                    95:90:62:54:15:e0:86:06:81:bc:4f:fb:9f:b3:a9:
                    19:1f:67:75:0e:5a:dd:08:06:61:ac:ea:e1:ee:c4:
                    17:af:12:49:31:60:4d:5b:83:37:3e:34:f9:9f:36:
                    a6:08:72:20:d9:ab:32:f0:46:ce:46:42:e2:46:3e:
                    35:db:df:58:76:ab:31:33:db:1a:fa:ae:1d:50:12:
                    14:93:77:a6:99:05:c8:8f:66:81:e9:d5:d2:0c:f2:
                    9d:2c:ee:6f:4c:3b:21:34:06:25:18:0d:cb:99:b6:
                    0e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:65:99:CD:B5:A9:BC:C9:5E:5D:CF:F5:16:8E:E7:70:BE:6A:CC:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/0/246599CDB5A9BCC95E5DCFF5168EE770BE6ACCCC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.104.0/22
                IPv6:
                  2804:5740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268054

    Signature Algorithm: sha256WithRSAEncryption
         27:2f:42:67:4d:f7:27:bd:6b:3e:26:0c:ba:f9:05:98:54:30:
         7c:67:ba:e4:96:5c:b0:9b:bb:6a:76:16:dd:29:2d:8e:7b:0b:
         44:e7:d6:b0:d7:40:39:62:a5:f6:f4:2e:d3:8b:0f:63:4d:c3:
         db:2d:5d:fa:c6:ec:00:57:8e:42:86:c2:b6:e0:3c:09:84:79:
         41:57:00:7a:90:6e:a4:e5:a7:93:7e:43:f9:89:7e:bb:6b:b8:
         3a:8a:1a:83:56:26:8f:56:84:0d:b4:da:18:b4:51:b0:29:fa:
         5f:2c:28:80:f4:7c:4a:b1:9a:ec:11:9c:3c:d2:3a:58:85:08:
         af:4c:2d:1f:e3:e9:d2:65:80:0a:d5:c5:03:f3:5e:e5:19:67:
         d9:4f:b3:8e:aa:4f:35:79:15:ff:b6:f0:ee:84:63:d4:95:5a:
         63:af:62:bc:e5:d4:81:ec:3a:55:cf:74:53:65:bb:0e:ad:3f:
         8e:3a:e7:73:1d:f2:4e:81:e3:7d:2f:fb:39:80:d2:ae:50:ef:
         a8:5a:56:8d:38:45:90:77:b2:d1:d7:9f:b7:26:d1:43:0e:1e:
         bc:9b:48:2f:f2:e9:55:6d:07:dd:60:fe:0d:ca:a6:5b:61:36:
         19:6a:34:bf:51:08:37:64:19:ce:dd:86:2f:46:71:5c:c6:64:
         ad:b2:32:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org