Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/26734E052303F932E311FB193F1624A7DC9609D7.cer
File:                     26734E052303F932E311FB193F1624A7DC9609D7.cer (raw, json)
Hash identifier:          mhx+ntl405YdZoWZCJPL95YxZC2n9qhwSux3Q3so7c8=
Subject key identifier:   26:73:4E:05:23:03:F9:32:E3:11:FB:19:3F:16:24:A7:DC:96:09:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       12B6CCE60BF7C495F59A9B2D4BAD9C1FA852CAD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/26734E052303F932E311FB193F1624A7DC9609D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 14:59:09 +0000
Certificate not after:    Thu 25 Jul 2024 15:04:09 +0000
Subordinate resources:    AS: 269608
                          IP: 45.190.20.0/22
                          IP: 2804:6728::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b6:cc:e6:0b:f7:c4:95:f5:9a:9b:2d:4b:ad:9c:1f:a8:52:ca:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 14:59:09 2023 GMT
            Not After : Jul 25 15:04:09 2024 GMT
        Subject: CN=26734E052303F932E311FB193F1624A7DC9609D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fc:89:12:02:92:33:07:9d:54:13:72:7b:2e:
                    6f:c4:37:a4:74:c5:36:65:e6:6c:70:57:87:b7:45:
                    ef:54:1f:6c:d2:8c:f9:43:bd:15:b2:22:79:ae:4b:
                    d1:dd:11:12:7a:27:ff:82:8c:0a:65:74:02:c3:d2:
                    7e:9d:6e:40:7d:65:a0:f6:55:33:1a:f8:e9:27:5e:
                    3a:ee:5b:a5:b9:c5:a7:9c:73:e6:60:15:4e:50:6e:
                    7d:82:f3:9c:79:31:ef:23:07:d6:a2:22:11:1f:e9:
                    8b:a2:a3:8f:48:26:47:6c:f4:3e:1c:d0:64:df:20:
                    9b:d2:0b:61:9b:cd:4e:1b:8e:d0:94:c8:96:4e:87:
                    04:d9:62:ab:a4:59:87:4e:c0:88:79:29:cc:03:39:
                    22:6e:0d:2f:7d:d4:f4:b3:cb:30:5a:c4:86:a0:87:
                    39:0d:72:e8:88:e2:9b:ef:0f:06:03:f4:aa:d1:fc:
                    a9:d5:cc:d0:e3:e3:68:0e:16:48:05:bc:0f:dc:70:
                    e3:aa:50:fb:7e:46:94:d0:7e:4c:25:f4:6e:b7:4f:
                    9b:07:44:03:e2:19:dc:2b:80:53:10:5e:f6:32:1e:
                    f4:23:85:56:bc:0f:4f:46:2b:8a:fb:c9:0a:5e:90:
                    42:30:50:ef:10:2c:a5:37:90:66:01:70:cc:7f:e5:
                    9a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:73:4E:05:23:03:F9:32:E3:11:FB:19:3F:16:24:A7:DC:96:09:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/79M9gQDvis9yJvkbAvYJ6YDnqYJd58m15WAWKt4oeZAW/0/26734E052303F932E311FB193F1624A7DC9609D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.20.0/22
                IPv6:
                  2804:6728::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269608

    Signature Algorithm: sha256WithRSAEncryption
         0d:22:72:19:fd:e8:79:e2:d1:6d:9b:17:13:83:17:0e:b7:d2:
         96:b1:c0:3a:b6:78:01:3e:48:ab:30:4a:ca:79:31:fc:1a:1d:
         3a:f7:b5:bd:ba:dd:d6:63:ad:b2:dd:cb:38:2f:69:08:5b:47:
         72:47:cc:da:04:90:03:2a:6b:3c:5c:80:3f:f6:9f:98:cc:7a:
         95:94:f3:35:d8:33:be:ee:37:df:8e:0a:7a:63:e8:16:4b:97:
         ba:cf:6a:6b:35:29:4e:3d:4f:a8:14:6b:de:c3:fa:3e:ef:56:
         44:f7:cc:13:9f:19:50:a9:62:ec:b6:67:01:60:b4:c5:7a:67:
         b6:cb:8a:40:80:a3:3c:05:ff:86:ac:18:0a:3c:c2:ce:57:63:
         de:7f:bb:63:14:59:af:57:1c:47:2c:16:36:ae:d7:f3:f6:73:
         d3:70:5e:5c:88:e2:82:b8:e1:00:02:f5:d8:de:6b:40:6e:e9:
         99:48:0f:88:fd:04:9e:4c:9e:ed:eb:13:e8:83:73:71:2c:b5:
         00:b8:70:6c:87:4e:d8:e0:e7:54:af:19:e8:bb:95:97:7b:28:
         2f:1f:76:ec:24:87:de:2e:4b:64:c4:55:7e:43:cc:8a:b1:62:
         d2:e8:5c:2a:00:7d:fc:56:7f:27:7d:11:10:0f:b0:58:7b:7c:
         65:00:0a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org