Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.cer
File:                     3031188AB6BEC48612DEFA14DBF67C31676B0E40.cer (raw, json)
Hash identifier:          aWhoUjiE8aOQdcbdxVGwiOdntNgaEs7eO4b0EI0slfE=
Subject key identifier:   30:31:18:8A:B6:BE:C4:86:12:DE:FA:14:DB:F6:7C:31:67:6B:0E:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CAD563541E11E903DF9B4ED2DE2E6FF874ECF63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 03:53:44 +0000
Certificate not after:    Tue 05 Nov 2024 03:58:44 +0000
Subordinate resources:    AS: 268464
                          IP: 45.161.120.0/22
                          IP: 2804:5198::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ad:56:35:41:e1:1e:90:3d:f9:b4:ed:2d:e2:e6:ff:87:4e:cf:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 03:53:44 2023 GMT
            Not After : Nov  5 03:58:44 2024 GMT
        Subject: CN=3031188AB6BEC48612DEFA14DBF67C31676B0E40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:ae:61:b8:98:45:f4:63:04:e9:e5:a2:12:
                    d5:b4:8d:f2:f7:df:74:b3:1b:14:c3:99:0c:a7:73:
                    de:e6:80:4f:ad:00:3c:16:3d:86:04:96:1a:a8:b0:
                    d9:18:26:2f:a2:5f:8b:10:68:3a:53:45:a7:f1:b5:
                    af:79:d5:94:d4:d3:1c:5b:92:cc:7d:ad:b6:1c:21:
                    20:dd:69:7c:7b:31:23:b6:24:31:44:7e:e2:43:78:
                    a0:23:50:89:61:03:86:b9:f4:25:2b:c7:b1:e2:9b:
                    51:21:ae:12:90:d7:8d:6c:21:51:62:13:b6:d4:5e:
                    55:0a:07:63:2d:fa:7e:41:c5:6c:8e:57:5a:72:04:
                    93:c5:67:b7:be:c8:70:32:36:7d:1e:7a:fb:bd:26:
                    ed:36:5a:48:db:bc:52:5e:7d:2f:96:da:4b:64:8d:
                    b3:5b:18:ad:4d:ea:9d:e1:75:9a:9b:12:1e:04:26:
                    75:7d:ed:7e:e1:2f:89:9c:dd:87:15:f8:82:47:70:
                    b0:11:38:f4:12:f5:ae:fd:f3:73:ff:87:4b:bb:75:
                    63:70:3b:49:a5:31:2d:9d:f3:a3:cd:39:30:5a:6f:
                    88:61:85:ae:4e:f0:da:bc:c2:c2:47:57:fc:23:93:
                    c8:59:ee:65:8c:1e:6a:b1:e6:3f:fc:0b:33:f6:5c:
                    d2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:31:18:8A:B6:BE:C4:86:12:DE:FA:14:DB:F6:7C:31:67:6B:0E:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DfgfFQPFhdM4pAD5w3fPbYYp6CMfXy7sJ8GevM9ggfLw/0/3031188AB6BEC48612DEFA14DBF67C31676B0E40.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.120.0/22
                IPv6:
                  2804:5198::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268464

    Signature Algorithm: sha256WithRSAEncryption
         21:21:99:1d:22:78:71:60:1d:53:4e:d2:97:89:ad:50:3a:99:
         a2:5f:c1:61:a3:2f:b1:48:5e:86:8c:df:ef:72:c3:34:b3:b8:
         a2:1b:85:5a:b8:e1:e8:05:ed:6e:8d:73:7c:03:19:34:6d:83:
         2e:2f:49:4f:11:d4:5d:27:2f:4a:ce:2d:64:f9:a9:e7:62:27:
         66:6c:58:ee:f5:b4:bd:70:99:2c:75:c7:a3:5e:6b:08:bb:13:
         1b:1d:18:2a:3b:71:a4:cf:59:eb:ec:e0:6f:21:fc:23:74:10:
         33:09:05:26:fc:da:61:29:d9:b2:16:e8:76:8a:f7:3d:64:65:
         29:93:15:c4:2e:30:de:43:a7:9d:51:b7:a8:24:e5:64:3f:dd:
         ce:fc:bd:9d:80:92:3b:2a:4e:9c:4f:47:e3:66:59:da:8d:9d:
         d0:bb:6f:67:82:b0:ab:a0:7b:6b:62:46:cd:90:b9:85:19:f5:
         73:d4:e1:cc:f8:95:78:bd:8d:6f:83:4b:f4:40:49:b0:19:dc:
         f6:de:27:95:b0:9c:4a:94:7a:6a:05:16:33:9b:52:f4:7b:78:
         c5:cf:38:14:20:ee:14:44:f5:a5:2a:a9:88:51:b8:92:c3:e9:
         e4:63:a8:75:14:20:fd:ee:0a:21:62:76:e7:7c:a9:52:75:56:
         20:da:fe:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org