Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3025FB5A453EBF23A46CC5AD019DBF91654DB935.cer
File:                     3025FB5A453EBF23A46CC5AD019DBF91654DB935.cer (raw, json)
Hash identifier:          HhNgk6oogzuMb6A0YA8x/DqnxjVZo0ZOkVdwKXK6hxc=
Subject key identifier:   30:25:FB:5A:45:3E:BF:23:A4:6C:C5:AD:01:9D:BF:91:65:4D:B9:35
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       109D422E6118ED9BC8A886275D301AC92259E7E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/3025FB5A453EBF23A46CC5AD019DBF91654DB935.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 17:48:05 +0000
Certificate not after:    Wed 10 Apr 2024 17:53:05 +0000
Subordinate resources:    AS: 267999
                          IP: 45.167.108.0/22
                          IP: 2804:5674::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:9d:42:2e:61:18:ed:9b:c8:a8:86:27:5d:30:1a:c9:22:59:e7:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 17:48:05 2023 GMT
            Not After : Apr 10 17:53:05 2024 GMT
        Subject: CN=3025FB5A453EBF23A46CC5AD019DBF91654DB935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:79:df:90:b6:00:c8:1a:95:81:af:ee:8b:
                    50:4f:36:78:41:b7:ac:d2:d5:a9:f7:ff:c6:67:45:
                    3c:47:90:47:34:17:ec:c2:d8:b5:b7:e1:7e:e0:a4:
                    0f:f5:aa:85:22:4b:63:1f:81:68:fb:e7:94:78:f7:
                    de:16:23:24:a7:cd:a9:ae:b2:50:91:4b:07:b2:18:
                    34:7b:ab:6b:5c:3b:52:05:42:09:bd:03:7c:01:10:
                    61:7f:e4:42:b0:25:99:54:f5:6b:eb:bf:6a:ae:ab:
                    85:31:c3:63:eb:a9:6e:03:f5:e6:f1:b3:e5:00:6b:
                    60:f1:e6:59:b1:6d:89:e6:4f:5b:96:60:da:d8:dc:
                    e1:59:a0:99:a2:a0:89:d2:03:0b:d8:5f:48:e8:7b:
                    14:cf:6d:7c:a9:83:54:a4:06:30:2f:4f:59:b6:74:
                    7e:e8:e4:0c:f3:3e:5b:f0:0a:d9:aa:f6:33:13:59:
                    76:96:4e:e8:22:07:c4:2c:cc:51:92:da:7c:27:a5:
                    42:5d:54:4d:aa:42:1a:ad:04:55:30:8b:79:87:84:
                    be:9d:a0:91:f2:25:b4:b0:12:f1:81:02:d0:34:d1:
                    bb:7d:2d:17:f4:c6:c7:21:60:24:21:1d:54:09:3f:
                    13:94:75:03:c7:47:54:13:d9:ef:a9:c8:9c:0a:b2:
                    f4:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:25:FB:5A:45:3E:BF:23:A4:6C:C5:AD:01:9D:BF:91:65:4D:B9:35
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/3025FB5A453EBF23A46CC5AD019DBF91654DB935.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22
                IPv6:
                  2804:5674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267999

    Signature Algorithm: sha256WithRSAEncryption
         11:fc:2f:ae:2e:23:5b:31:31:08:8c:21:b5:6b:60:50:65:bb:
         df:8a:28:a9:e3:08:25:83:e9:69:30:35:4a:46:05:78:12:67:
         91:c0:7f:e4:b7:3d:99:d4:6e:86:82:39:0d:39:bf:5a:e1:0e:
         87:69:41:92:e8:48:16:b0:3d:7c:01:2e:80:f6:8d:76:89:cd:
         f3:d0:22:03:9d:7b:10:82:31:aa:86:1b:2f:5d:a2:b7:1d:c3:
         73:61:f1:22:32:bf:da:28:26:a3:57:7d:2f:28:27:5c:dc:c2:
         47:bf:e7:a8:5a:03:cd:19:5e:0d:ed:1e:90:8e:ba:01:53:c8:
         41:36:b1:55:c7:10:55:08:3b:0e:af:fe:6f:6f:9c:59:c1:7b:
         a5:25:43:c1:21:fe:fb:f8:eb:9b:04:1a:13:6c:a9:84:46:4e:
         76:75:11:a4:90:51:23:9b:3b:86:ec:56:91:d6:a8:84:7d:cf:
         a3:c0:3e:4e:b8:1c:cb:cf:16:15:3d:e0:f3:4e:70:18:3a:c3:
         4c:c6:76:93:b7:25:5d:34:c2:8c:f8:4d:51:aa:5d:1d:6a:d9:
         66:92:8a:0b:0e:c9:3d:79:82:52:32:a0:42:5d:69:82:6a:50:
         2d:21:67:4c:17:fb:8f:39:b1:c6:c5:ee:cc:67:ca:9b:17:3f:
         49:c1:da:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org