Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.cer
File:                     2D43CD815DA58D80D8A4C88020556C474C1520F1.cer (raw, json)
Hash identifier:          QEAQyuV9TE/c0VL9WNSwn/h+gJi6NLIlTxjfdLb6EN0=
Subject key identifier:   2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5A8063C5C7934E0C9D6F24F493EA6BEC6E4979DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Dec 2023 00:34:48 +0000
Certificate not after:    Fri 06 Dec 2024 00:39:48 +0000
Subordinate resources:    AS: 268296
                          IP: 45.237.244.0/22
                          IP: 2804:4efc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:80:63:c5:c7:93:4e:0c:9d:6f:24:f4:93:ea:6b:ec:6e:49:79:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  8 00:34:48 2023 GMT
            Not After : Dec  6 00:39:48 2024 GMT
        Subject: CN=2D43CD815DA58D80D8A4C88020556C474C1520F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:91:69:2d:06:04:87:e0:e9:80:fb:c2:cb:37:
                    c6:e1:ac:d8:34:01:92:40:c0:b6:9f:d8:cc:41:26:
                    ee:cc:d1:12:09:6a:b8:c0:c8:29:dc:24:89:76:63:
                    ec:95:2b:6b:da:3f:3c:36:45:a0:66:f4:b1:7d:92:
                    9e:88:c3:02:b4:e2:67:09:8d:ed:5d:56:87:66:7e:
                    6c:60:a2:ea:6c:f5:a5:ee:19:a3:54:31:7b:61:54:
                    fe:26:a8:71:1c:6d:81:94:f7:4f:af:d9:58:ec:a1:
                    85:17:cd:65:31:f0:d3:34:bf:5c:58:66:af:12:55:
                    42:01:ba:d6:f3:0e:5a:10:49:f3:15:28:49:fa:85:
                    b8:17:2d:7b:c3:7b:52:f0:37:12:8d:cb:ce:74:a2:
                    22:fc:e8:f6:ee:d0:dc:93:40:cf:e8:15:80:c7:be:
                    45:14:a9:fd:fd:36:ab:8b:39:b2:16:75:81:7b:be:
                    e7:5a:87:38:26:70:c2:cb:fe:15:d0:79:65:bb:7a:
                    e2:d2:70:8e:4a:2f:19:84:e5:6f:f9:66:ea:5a:ef:
                    64:d1:56:30:98:f2:d3:67:c2:f2:e7:7f:6e:a7:d9:
                    37:93:da:33:c1:30:e0:35:e8:63:0a:ca:cc:37:dd:
                    9f:25:5b:7a:6e:74:bd:09:81:e5:e9:f2:c7:64:0c:
                    c1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2D:43:CD:81:5D:A5:8D:80:D8:A4:C8:80:20:55:6C:47:4C:15:20:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/0/2D43CD815DA58D80D8A4C88020556C474C1520F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.244.0/22
                IPv6:
                  2804:4efc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268296

    Signature Algorithm: sha256WithRSAEncryption
         b7:7a:8b:5b:cb:52:a3:8b:2a:5e:35:91:7d:b4:c7:e6:8b:a9:
         02:24:36:74:02:63:0e:e9:a5:94:d8:fe:80:cb:39:29:70:e4:
         35:b7:b4:24:d7:05:e3:d1:73:ca:32:3e:67:ab:95:72:11:95:
         31:e6:c1:3a:56:b3:68:90:c8:11:48:4a:ac:ea:14:9e:e2:a9:
         24:b9:82:73:fc:3f:57:65:c4:e8:15:88:61:4f:6f:01:fd:18:
         7b:2c:56:38:71:5c:82:34:51:ad:05:4e:4b:6f:cc:bd:bd:4a:
         94:94:e7:57:e1:ce:68:84:11:ae:55:69:64:fe:0b:26:ff:a8:
         6d:a2:49:ae:5f:d7:82:7a:03:b5:cb:ad:22:95:b4:43:15:b1:
         48:76:9a:c0:6a:ea:0e:6e:d7:b0:3b:50:c6:70:39:0d:ee:18:
         22:e6:e0:40:1f:b4:48:15:5f:ca:59:3f:4c:ac:77:0f:0b:24:
         4c:48:58:b4:6c:67:36:7a:34:1a:42:1b:45:0a:e7:b4:75:0e:
         b0:29:e0:58:7e:d5:ae:e9:cb:d7:94:78:7d:eb:79:a5:eb:ad:
         e2:58:e0:c7:87:0c:e9:5a:1c:15:a7:91:b3:60:e5:3a:2c:35:
         f4:c8:3b:47:b9:66:8b:7e:e2:3e:c1:ee:22:7a:1c:79:f0:62:
         c5:06:0a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org