Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2970A36B0D430502A569554FE4F85E73508EA7CF.cer
File:                     2970A36B0D430502A569554FE4F85E73508EA7CF.cer (raw, json)
Hash identifier:          cVUYywEa30a0CvYAoiQuL+7De04RptzsNzilYV0T9Po=
Subject key identifier:   29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D45844E537DAC59ED7A135A2DC1461F072AD04B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/2970A36B0D430502A569554FE4F85E73508EA7CF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Aug 2023 13:38:31 +0000
Certificate not after:    Wed 14 Aug 2024 13:43:31 +0000
Subordinate resources:    AS: 266911
                          IP: 45.224.108.0/22
                          IP: 2804:4534::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:45:84:4e:53:7d:ac:59:ed:7a:13:5a:2d:c1:46:1f:07:2a:d0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 16 13:38:31 2023 GMT
            Not After : Aug 14 13:43:31 2024 GMT
        Subject: CN=2970A36B0D430502A569554FE4F85E73508EA7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:49:5b:bf:a5:46:33:b2:55:70:47:a3:8a:ee:
                    ac:75:fa:ca:16:25:3d:f9:e4:92:24:9c:16:50:c0:
                    3b:e7:9b:63:6a:4d:60:d8:bc:21:d4:48:73:8b:52:
                    2f:b3:72:f1:ff:0d:72:89:03:db:47:98:f5:a6:36:
                    16:6b:fa:a5:04:a0:da:9d:df:5d:2f:a3:f9:bb:9e:
                    a0:67:96:e4:69:f9:04:bb:f7:80:db:96:2d:a1:c2:
                    c4:a3:5d:d3:44:07:eb:e9:8d:b3:c3:99:3b:0d:96:
                    78:6e:38:f1:c7:13:3d:ba:52:f5:cd:4a:60:cd:0b:
                    e1:d1:c8:f3:48:53:5e:b8:87:96:69:1e:b3:f7:83:
                    cb:de:d8:11:bc:1f:4a:04:6b:fe:3c:23:ac:3a:76:
                    79:2b:ac:1a:cf:a5:ac:56:8c:8b:f4:30:e0:98:60:
                    4f:7e:1d:73:15:27:fd:ee:d7:3e:90:e1:6a:cf:79:
                    2a:ce:70:b1:5b:3b:4a:26:d7:8f:99:5d:01:fc:2f:
                    3a:91:65:f1:bc:a0:2e:6a:2d:18:ed:c0:f7:3c:26:
                    0e:3e:a4:af:6c:97:bc:db:45:b1:ae:f6:e8:77:eb:
                    81:84:ae:d8:15:3d:a7:bc:22:ed:f2:b7:61:70:7b:
                    02:d8:7e:f4:96:9f:2b:47:5b:2d:29:20:e5:27:8e:
                    65:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                29:70:A3:6B:0D:43:05:02:A5:69:55:4F:E4:F8:5E:73:50:8E:A7:CF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3h976ZbRYcTTieSueVCACFLGDmREDD3CxhjCHQTLeQXw/0/2970A36B0D430502A569554FE4F85E73508EA7CF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.108.0/22
                IPv6:
                  2804:4534::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266911

    Signature Algorithm: sha256WithRSAEncryption
         5e:8d:fa:46:ca:19:75:85:54:b3:95:fc:44:10:fe:aa:91:cd:
         62:e6:69:08:4b:e1:ba:d8:f7:04:af:23:4e:89:14:d5:af:92:
         b7:13:13:0c:fc:96:1f:9f:ce:4f:e0:d2:be:00:f6:99:cf:6f:
         b5:31:4c:07:9f:83:8a:05:67:d9:72:90:7c:43:ba:53:6e:65:
         21:1e:05:95:b5:9f:3c:31:02:e5:dc:da:1e:cf:5c:b4:d0:6a:
         ed:15:1e:46:a2:01:80:ab:94:01:49:2e:40:22:03:68:52:32:
         ab:7e:21:d4:ea:c3:60:e6:80:fd:ad:32:6d:e3:cc:54:e5:1f:
         ba:16:35:41:37:ad:7f:40:cd:23:aa:37:d3:09:9e:1c:f2:eb:
         b4:c5:0e:eb:13:ea:a8:42:de:9d:f9:20:f2:23:ab:d0:5f:c0:
         4a:2c:ff:b3:31:28:f9:e8:42:29:e6:31:b9:e0:32:10:0f:bd:
         62:11:25:a5:a5:7a:4d:f2:39:af:18:94:ee:b4:d9:6a:62:c4:
         89:fb:e9:28:ac:d0:8d:30:ca:84:c1:1a:c5:9f:5f:35:20:46:
         e0:a8:18:bd:e2:0a:26:33:79:61:c1:be:b9:21:6f:de:7c:1e:
         37:57:6d:3f:58:80:b1:f9:cd:19:7d:73:b2:4a:ed:38:48:e2:
         77:35:a5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org