Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735.cer
File:                     331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735.cer (raw, json)
Hash identifier:          hs/vd1q1XvwI5PZZO9CVuSu886/PcpWJ5S/OL7+OOZI=
Subject key identifier:   33:1B:AC:3D:AA:6C:6F:9B:A6:1F:C5:64:12:4F:9D:DE:11:DE:17:35
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DB8C6EC322743140EBF97BB511797D26A678762
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 May 2023 20:19:08 +0000
Certificate not after:    Mon 27 May 2024 20:24:08 +0000
Subordinate resources:    AS: 269082
                          IP: 45.179.40.0/22
                          IP: 2804:5f30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b8:c6:ec:32:27:43:14:0e:bf:97:bb:51:17:97:d2:6a:67:87:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 20:19:08 2023 GMT
            Not After : May 27 20:24:08 2024 GMT
        Subject: CN=331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1c:fe:ad:43:91:7c:ef:ec:b9:46:03:60:8e:
                    78:1f:dd:5b:0a:b7:22:1a:02:3e:9f:38:fe:5e:d0:
                    f5:e3:e1:53:99:8c:fa:6b:03:23:d1:38:f2:48:c6:
                    60:dc:33:b6:34:2e:81:b8:9c:13:48:61:ad:b0:69:
                    48:40:b2:88:a2:b7:2a:34:e2:b4:c0:17:c1:aa:7f:
                    4c:3d:3b:4a:26:69:d8:9a:65:fd:2d:4d:e5:0f:be:
                    95:28:7b:98:df:8b:ed:0f:85:0e:54:39:6b:97:42:
                    3f:0d:6b:37:07:bf:b7:f3:df:50:b9:8f:db:c8:b1:
                    d4:5a:18:96:a6:2e:7e:4e:9b:11:b1:66:22:a6:a0:
                    fb:8d:d6:89:06:33:0d:f2:f7:7f:39:34:f7:20:3d:
                    74:b1:22:7d:67:1b:84:70:6f:c6:0b:f6:12:1e:ec:
                    44:b8:12:c1:c1:f5:65:c6:b2:ab:97:11:b3:09:79:
                    6d:13:56:8f:be:de:9f:16:15:d5:18:cb:5c:db:4d:
                    49:da:5d:34:ec:e5:18:12:3e:07:60:b6:50:5d:45:
                    a7:ab:f8:57:9b:e3:33:bd:bb:69:9b:52:40:d8:93:
                    e2:d4:cb:92:4f:30:42:26:68:1b:00:41:f6:cb:09:
                    d9:0e:80:ab:d8:c1:da:83:e9:9a:12:26:94:d2:a4:
                    4d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:1B:AC:3D:AA:6C:6F:9B:A6:1F:C5:64:12:4F:9D:DE:11:DE:17:35
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5PMqxGXi1ZE4QJkbJT4t5cW3Zb3SRWsCNsGYyBZdkGXx/0/331BAC3DAA6C6F9BA61FC564124F9DDE11DE1735.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.40.0/22
                IPv6:
                  2804:5f30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269082

    Signature Algorithm: sha256WithRSAEncryption
         44:26:8e:15:a3:3e:ec:ed:94:d1:4a:13:b4:27:6d:0d:94:79:
         7d:6d:de:94:e1:56:59:10:f3:57:0b:0e:22:f6:0c:ec:35:5c:
         02:e9:32:51:ae:d6:00:54:34:e5:4a:aa:88:ab:8a:0c:ec:90:
         39:f8:bc:3e:07:bb:19:84:df:57:61:e9:33:a4:e0:63:d0:5d:
         46:50:e0:9a:f5:53:f2:ec:17:04:ed:9f:a4:b3:3a:ef:de:f9:
         4b:e8:86:4a:ba:12:34:09:a5:76:f4:f3:75:1e:7b:66:b4:0b:
         b7:9d:c9:ae:e2:ab:e6:ac:6b:b5:cc:07:7d:66:17:9f:76:e9:
         35:ac:ff:5f:c8:16:88:15:ac:cc:d8:e8:a2:ff:9c:dc:d2:02:
         f3:81:5e:78:8e:86:78:da:8f:0c:4d:85:19:dd:b7:85:9c:e7:
         45:db:23:d5:6f:a8:ba:32:8c:4d:60:28:09:25:ba:c3:8d:e3:
         57:6d:6e:f6:a3:de:e9:d9:39:aa:6f:7a:82:18:11:f5:25:40:
         39:bc:09:0e:ce:30:60:1e:ea:19:4c:01:65:f2:de:82:47:5f:
         1b:33:71:82:95:e5:95:ab:b9:77:fd:89:06:54:d7:18:96:3c:
         ba:eb:50:b4:ec:fc:68:76:e7:5a:8a:6a:85:24:bf:67:53:bd:
         06:f2:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org