Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A6A5C22C5750C7252158E61EDA9B481A6389417.cer
File:                     2A6A5C22C5750C7252158E61EDA9B481A6389417.cer (raw, json)
Hash identifier:          SYIVthaaNqlGAHkp6NC4JnXVjiFuFsxF6olKDpMJkFo=
Subject key identifier:   2A:6A:5C:22:C5:75:0C:72:52:15:8E:61:ED:A9:B4:81:A6:38:94:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0B0B7B4DC355AD903486C51B31C4FC9878064E09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/2A6A5C22C5750C7252158E61EDA9B481A6389417.mft
caRepository:             rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Jan 2023 14:25:19 +0000
Certificate not after:    Tue 23 Jan 2024 14:30:19 +0000
Subordinate resources:    AS: 270794
                          IP: 189.51.164.0/22
                          IP: 2804:7184::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:0b:7b:4d:c3:55:ad:90:34:86:c5:1b:31:c4:fc:98:78:06:4e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 24 14:25:19 2023 GMT
            Not After : Jan 23 14:30:19 2024 GMT
        Subject: CN=2A6A5C22C5750C7252158E61EDA9B481A6389417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e0:0c:e5:a0:83:27:20:d6:37:31:6d:f8:ec:
                    45:b1:88:c4:fd:d1:47:0a:fc:d1:80:4b:9f:06:86:
                    e3:e2:cc:f9:86:10:53:1e:e5:f2:92:10:23:de:00:
                    f9:f4:c6:8d:b0:42:d7:b8:4b:c2:80:09:d4:e5:12:
                    41:d3:db:02:a5:73:be:8e:96:39:0f:8c:f0:4c:b0:
                    50:b7:08:ef:76:fd:8d:48:c7:05:22:6a:1e:3f:7f:
                    77:39:d8:ee:10:75:cb:44:c1:71:66:df:e9:c2:99:
                    51:be:cf:17:16:6d:90:d0:57:df:36:a1:b3:26:d9:
                    85:ab:72:b6:b2:a3:fe:a4:83:42:00:a6:80:36:e7:
                    38:c3:b3:ba:ae:98:20:88:97:af:0e:af:ab:4a:05:
                    e2:20:b5:a7:10:fd:6f:2f:e9:dd:d9:4c:45:d8:71:
                    99:d5:ae:36:c1:0d:41:a6:b5:61:1d:49:27:b1:84:
                    8f:56:c5:3b:43:a9:bf:f7:6d:ff:07:ca:53:6c:24:
                    62:7a:95:7d:1f:44:c6:c1:b4:35:c1:f2:4f:1b:6a:
                    2d:3c:a3:06:fb:9a:84:04:11:4a:53:4e:6e:12:bc:
                    b0:14:3b:5a:8a:1b:8c:96:21:45:43:86:1a:a3:94:
                    c6:1c:0c:13:66:59:4b:0f:35:ae:e1:77:7c:71:37:
                    3f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:6A:5C:22:C5:75:0C:72:52:15:8E:61:ED:A9:B4:81:A6:38:94:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/59vsPkhg8zPtVbZTKY3SirBSwEFgqus9MvaMXZF4Qgio/0/2A6A5C22C5750C7252158E61EDA9B481A6389417.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.164.0/22
                IPv6:
                  2804:7184::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270794

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:54:08:e9:b4:1e:15:12:c9:41:d2:62:2c:0e:ac:b7:bb:
         bb:a9:54:b6:72:ea:d2:21:15:c1:68:b2:51:35:26:22:93:4f:
         a1:75:57:f0:25:02:85:25:e3:d4:a4:b8:3f:2e:f2:67:9c:17:
         f8:53:57:56:af:05:e7:fe:68:77:54:a5:47:65:cb:af:f6:2f:
         e8:22:03:8c:a7:50:77:b6:c9:b3:c0:4c:4e:fe:97:2b:10:e6:
         6f:d0:14:e1:af:33:c0:0a:c3:70:a1:6e:8f:86:79:93:95:58:
         5d:22:1a:49:15:43:5e:57:8b:55:31:83:4b:86:32:fd:9c:71:
         6f:5a:c5:3f:8e:cb:af:18:a7:2d:00:f2:45:6b:bb:36:b7:6c:
         2f:33:a0:a4:67:3f:ea:71:eb:c2:9a:57:6f:eb:9f:fa:b0:75:
         f0:2f:ed:51:3b:34:8a:39:45:7a:43:45:f5:80:9e:06:b3:48:
         56:28:b6:94:95:cb:e7:2a:f9:e1:c3:cb:89:e4:a2:45:97:de:
         a1:c2:88:cd:3d:dd:fc:5c:03:a4:ad:44:4a:a4:c0:f6:d7:fa:
         85:4f:06:aa:4a:ec:fc:44:90:24:8e:ad:75:bb:fc:50:39:24:
         dc:d1:0a:25:91:68:c6:e3:58:a0:8f:9e:79:46:48:07:d7:37:
         1d:df:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org