Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/255391F2D481A010D34E04F0C63EC1E283BD7B55.cer
File:                     255391F2D481A010D34E04F0C63EC1E283BD7B55.cer (raw, json)
Hash identifier:          wfMz9dNy4Lxk0/MuNvHM3NKryYvPAtKr/+WV8Tl6scU=
Subject key identifier:   25:53:91:F2:D4:81:A0:10:D3:4E:04:F0:C6:3E:C1:E2:83:BD:7B:55
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CECB3C878762C6780A955F4875E136AE5C09AA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/0/255391F2D481A010D34E04F0C63EC1E283BD7B55.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Dec 2023 11:05:09 +0000
Certificate not after:    Fri 20 Dec 2024 11:10:09 +0000
Subordinate resources:    AS: 268952
                          IP: 45.176.204.0/22
                          IP: 200.196.36.0/22
                          IP: 2804:5d20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ec:b3:c8:78:76:2c:67:80:a9:55:f4:87:5e:13:6a:e5:c0:9a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 22 11:05:09 2023 GMT
            Not After : Dec 20 11:10:09 2024 GMT
        Subject: CN=255391F2D481A010D34E04F0C63EC1E283BD7B55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e7:da:fd:a9:2a:ef:9e:b1:f5:f8:fb:7c:49:
                    1e:60:01:84:9c:09:29:b8:fd:51:c4:70:17:6f:fa:
                    70:c8:19:1e:16:83:4d:9d:d1:95:f6:fa:a6:81:a8:
                    e7:95:cc:9e:ee:98:eb:9c:27:95:7f:69:af:96:4f:
                    7c:da:1e:3f:80:d8:69:52:47:ea:88:21:51:a7:bc:
                    34:f7:b0:41:e1:77:18:20:c6:57:46:d6:a8:cd:f8:
                    bd:2e:cf:d3:14:aa:9b:65:57:ff:17:9f:72:31:bc:
                    2a:8d:52:08:44:be:8a:b4:cf:d7:c0:09:d7:15:e5:
                    82:8a:35:7a:3e:e1:a0:d8:1c:76:fe:04:1f:0a:fd:
                    20:4a:a6:2c:7b:3f:27:7c:61:65:c2:96:d9:ce:57:
                    b2:ec:1c:51:63:43:f7:35:34:08:53:39:db:c7:f0:
                    83:63:53:41:fd:23:ca:be:9c:9d:8b:fe:28:04:3a:
                    45:22:94:41:c3:98:22:37:85:3b:25:dd:6b:48:cf:
                    ca:41:d0:a3:a3:da:61:49:2f:fb:1e:29:5b:92:60:
                    76:62:c3:fa:b8:41:c1:e7:07:7f:4d:1f:8b:09:bc:
                    30:2a:51:fa:ac:6e:9e:4d:0f:f2:03:c7:a5:f2:bb:
                    8c:a4:dd:5c:05:7f:fb:84:6d:d1:09:20:b5:f9:98:
                    65:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:53:91:F2:D4:81:A0:10:D3:4E:04:F0:C6:3E:C1:E2:83:BD:7B:55
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G4UU4xTfxfsq4xfs9dCN8o2kSQwY6RZGhd65bTmc8rgm/0/255391F2D481A010D34E04F0C63EC1E283BD7B55.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.204.0/22
                  200.196.36.0/22
                IPv6:
                  2804:5d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268952

    Signature Algorithm: sha256WithRSAEncryption
         61:70:73:3a:76:58:93:92:e5:98:db:ec:d1:dc:87:3f:1d:63:
         12:b4:ae:59:8d:3c:bf:ac:2f:ce:5a:10:3b:0a:6b:66:33:ef:
         26:61:c1:48:dc:6e:22:0f:51:56:54:9c:52:60:05:f9:35:b7:
         0b:f8:49:8e:f4:fa:22:33:84:d9:3a:4c:17:4c:37:be:bc:cc:
         85:2a:f4:bc:c2:f4:9f:56:ff:bd:1c:d8:19:5f:22:88:e8:45:
         9e:b5:96:c9:20:5a:e6:8b:f0:52:3c:28:6f:1e:62:d4:57:8d:
         04:e9:00:6d:3a:12:37:86:55:06:02:85:be:ec:48:8a:36:9c:
         aa:06:3a:8b:68:e7:ff:16:57:f9:84:e7:d5:6c:7f:44:71:76:
         e0:5e:fd:4d:d5:2e:ae:99:44:30:76:79:d4:52:f6:c2:44:0e:
         6b:11:b5:1b:bf:1e:85:32:62:a1:8f:c5:f8:31:13:fe:4b:91:
         31:73:94:6c:7c:ac:58:55:fb:f2:82:78:67:88:f2:e7:67:f0:
         41:c0:ab:da:c0:8f:6f:d6:60:c2:d6:61:2b:1e:cb:69:e9:8a:
         c9:a5:88:41:7c:0d:84:47:82:17:d9:6b:82:d5:8f:c0:a9:02:
         83:e0:db:41:08:73:ef:5e:db:c5:7e:ed:c7:3b:ca:02:aa:50:
         3f:9e:3f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org