Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/284BBBBB37224FB295DA80B26E93B007A1E377E7.cer
File:                     284BBBBB37224FB295DA80B26E93B007A1E377E7.cer (raw, json)
Hash identifier:          ZLWnFf4Vb9FgctnnacBeA3vpDQGY/IGs4FUZlGqknuc=
Subject key identifier:   28:4B:BB:BB:37:22:4F:B2:95:DA:80:B2:6E:93:B0:07:A1:E3:77:E7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1086E9832C2EAC1C5070C33F51596500577B6641
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/0/284BBBBB37224FB295DA80B26E93B007A1E377E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Sep 2023 12:46:22 +0000
Certificate not after:    Sat 21 Sep 2024 12:51:22 +0000
Subordinate resources:    AS: 271454
                          IP: 181.233.4.0/22
                          IP: 2804:7bc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:86:e9:83:2c:2e:ac:1c:50:70:c3:3f:51:59:65:00:57:7b:66:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 23 12:46:22 2023 GMT
            Not After : Sep 21 12:51:22 2024 GMT
        Subject: CN=284BBBBB37224FB295DA80B26E93B007A1E377E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:0f:25:d6:fe:cd:c2:1d:0f:e8:ef:3c:48:
                    3c:42:90:0a:11:b3:98:b8:d6:50:9b:1b:b0:52:39:
                    e1:46:e4:cc:42:c8:d3:83:fe:fe:19:69:9c:fd:55:
                    f3:ce:ed:89:2b:7a:67:ac:fd:d6:8e:37:50:14:8f:
                    f2:07:8c:69:84:b1:3a:b3:54:08:aa:5f:a6:4d:e4:
                    1e:59:6e:03:c0:21:7d:44:5d:b2:b1:7d:a9:05:49:
                    e3:d7:16:fa:49:ce:cc:57:8c:b9:3e:f1:0f:61:4d:
                    80:21:d9:57:16:2b:f2:03:57:d6:b3:b4:bf:8b:64:
                    49:b7:60:51:45:eb:cd:ce:06:f1:6a:bc:6e:e7:8e:
                    f7:d4:12:bb:94:71:27:47:1e:97:88:64:5d:97:08:
                    8e:80:7e:4e:4a:c7:bc:90:c6:f0:f7:57:b8:d7:2f:
                    22:74:c3:6a:d7:e5:bc:53:90:1e:52:98:55:a0:1f:
                    53:2a:17:18:98:51:da:f1:f3:e2:fb:79:39:8a:a3:
                    79:b4:8f:68:42:0c:23:2f:6d:ac:b0:57:42:1b:07:
                    18:56:c9:b1:c0:a2:0b:e3:98:55:32:a3:e3:01:1b:
                    c5:23:93:6b:48:49:c9:7d:fb:ec:c8:80:76:48:93:
                    a4:e9:e9:97:cf:ba:6c:1d:02:2d:4e:63:86:28:27:
                    b5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:4B:BB:BB:37:22:4F:B2:95:DA:80:B2:6E:93:B0:07:A1:E3:77:E7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Brv3fshLN9xi4v8TYPcMD1fCh9NMkU8kCk3ZUQqbe2qk/0/284BBBBB37224FB295DA80B26E93B007A1E377E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.4.0/22
                IPv6:
                  2804:7bc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271454

    Signature Algorithm: sha256WithRSAEncryption
         a1:18:4c:87:70:b9:c2:de:8a:71:57:f6:e8:9e:14:ce:d5:d8:
         82:99:54:f5:67:ba:6d:f1:3e:d4:f1:7c:48:c7:f6:e8:08:08:
         47:25:c6:eb:02:89:40:6b:a8:69:67:19:d1:0c:e4:72:83:57:
         48:ed:81:9d:e7:19:65:d9:05:55:9e:ef:bc:e3:d9:f0:e0:01:
         ed:9a:59:d7:2b:40:9a:64:60:08:02:5b:36:9b:da:c2:c9:a0:
         99:ab:b0:0e:ce:8b:d5:2c:ce:83:54:77:de:1b:44:e9:c7:99:
         82:fc:c5:49:06:cb:82:fc:0f:60:46:eb:71:cb:74:12:85:48:
         eb:37:f2:b4:59:74:b3:4a:c1:06:e1:4c:a7:6d:62:66:fe:fc:
         a6:a8:f6:0f:df:54:51:95:b7:96:c7:96:ad:ac:6d:ba:4d:67:
         4a:ad:69:f7:ac:38:ee:db:92:c4:6b:c6:2b:5e:94:fd:61:9c:
         eb:ee:da:4a:c5:59:56:20:c2:af:eb:c3:91:18:7e:51:01:5e:
         5b:5e:92:4e:e1:0e:64:be:1a:55:66:53:af:b6:10:0e:ef:7e:
         4c:0c:da:00:dd:6d:9f:3a:34:76:c3:72:41:ce:fd:b2:37:95:
         f0:da:98:09:20:d9:f0:a8:57:29:4a:34:56:65:58:8a:dd:1c:
         ad:81:ee:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org