Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2952A5F0A572AEA6A7D0D61E1CF45D2BA28D09A7.cer
File:                     2952A5F0A572AEA6A7D0D61E1CF45D2BA28D09A7.cer (raw, json)
Hash identifier:          1ZcMjn9kIRdoCDcAHy9On4igEnTlhgoBZhl8Ul8LI1o=
Subject key identifier:   29:52:A5:F0:A5:72:AE:A6:A7:D0:D6:1E:1C:F4:5D:2B:A2:8D:09:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4CBB8044DE620BE417D7E4C5E270F1799DB5CD84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/0/2952A5F0A572AEA6A7D0D61E1CF45D2BA28D09A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Oct 2023 19:47:41 +0000
Certificate not after:    Mon 28 Oct 2024 19:52:41 +0000
Subordinate resources:    AS: 269438
                          IP: 45.184.4.0/22
                          IP: 2804:64a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:bb:80:44:de:62:0b:e4:17:d7:e4:c5:e2:70:f1:79:9d:b5:cd:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 30 19:47:41 2023 GMT
            Not After : Oct 28 19:52:41 2024 GMT
        Subject: CN=2952A5F0A572AEA6A7D0D61E1CF45D2BA28D09A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:36:cb:7d:87:8c:4d:f3:67:d9:b6:ea:83:b0:
                    e6:0f:44:17:6d:e8:47:6e:1e:92:09:a4:33:56:86:
                    8c:39:36:1d:9c:3b:8b:a7:ee:0b:81:25:50:fc:17:
                    ec:c9:96:aa:c1:a1:da:29:59:b8:80:a8:91:1a:70:
                    0d:b3:ea:58:a5:3d:b8:3f:89:aa:27:27:45:41:74:
                    19:9f:66:e2:e5:b2:f3:44:51:22:32:bc:bf:d1:9e:
                    cd:ed:e2:98:36:cd:e1:e3:be:ee:e3:15:0b:84:6d:
                    6e:6a:6f:9e:02:c9:d7:03:9a:ca:d2:82:0f:05:80:
                    f1:47:35:86:a4:d4:e0:b0:b3:16:74:7b:98:84:aa:
                    97:48:4b:64:14:11:1a:f1:79:72:cc:79:26:c5:f5:
                    49:a9:20:82:8d:f7:14:5e:ec:26:22:6f:5e:ac:14:
                    63:df:ee:f8:22:38:ba:60:bc:30:d8:58:dc:5e:ae:
                    3d:6a:51:4c:23:a5:1b:02:81:d9:fd:3a:74:8c:70:
                    22:5a:21:3c:00:4d:e1:8e:64:a4:d8:05:88:1d:15:
                    d6:38:05:09:38:be:e6:ff:46:c6:32:9b:cc:fb:8e:
                    8d:68:b9:6f:e9:a6:d9:ee:b1:70:1c:d1:63:07:dd:
                    71:f4:57:23:25:4c:56:8d:3c:44:78:ff:3a:f7:d9:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:52:A5:F0:A5:72:AE:A6:A7:D0:D6:1E:1C:F4:5D:2B:A2:8D:09:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/0/2952A5F0A572AEA6A7D0D61E1CF45D2BA28D09A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.4.0/22
                IPv6:
                  2804:64a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269438

    Signature Algorithm: sha256WithRSAEncryption
         1e:08:7f:ff:1b:21:55:7b:d8:13:64:bb:09:c8:bd:a8:b7:b6:
         6a:88:64:d9:02:30:c6:c9:d6:3f:8f:59:be:4f:c6:5f:92:96:
         e7:ff:0c:45:e7:02:fb:18:3e:d5:f1:02:68:87:8d:31:16:4b:
         a9:ba:63:f1:af:68:97:64:1b:40:e3:ff:d7:49:f5:5a:f1:27:
         83:ca:c2:b5:32:d8:08:03:7e:ac:9a:44:0b:c1:a3:04:f0:78:
         43:4b:dc:72:56:3a:bb:31:1f:d2:8a:a3:7e:0a:f7:8f:ec:53:
         2f:84:c6:a1:87:eb:78:7a:ec:89:cb:73:6a:2c:25:67:67:bd:
         1f:73:b1:c0:4a:b7:a3:07:a7:64:09:d1:41:a1:a8:d1:14:87:
         55:f3:21:e2:db:2e:39:26:11:0e:06:7b:49:a1:43:f5:cd:db:
         b1:34:b8:0c:d2:9f:e8:dc:ec:24:15:ce:8e:dc:7d:6e:6e:5e:
         df:b1:e0:69:1b:66:67:3a:1c:5c:03:a0:d3:03:34:b1:03:88:
         aa:54:e3:0f:14:f2:06:29:19:63:d9:79:83:1a:f7:de:fe:97:
         90:82:6f:5c:87:bc:7f:7e:11:43:df:72:27:95:08:d2:4a:88:
         d1:89:30:30:84:25:95:a0:2a:f3:3d:fc:5d:e4:a1:41:e9:34:
         45:ae:73:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org