Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/331BD13CFC847545EBF4ABCF9AF10D3C7AA4F0CA.cer
File:                     331BD13CFC847545EBF4ABCF9AF10D3C7AA4F0CA.cer (raw, json)
Hash identifier:          J/7l9gSloJco0BxgIYAxvCXRT02PUqOUauU72xFQFOI=
Subject key identifier:   33:1B:D1:3C:FC:84:75:45:EB:F4:AB:CF:9A:F1:0D:3C:7A:A4:F0:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1711CB1359A290AA0B314476F9BE3CC36759CE0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/331BD13CFC847545EBF4ABCF9AF10D3C7AA4F0CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 18:15:33 +0000
Certificate not after:    Mon 24 Jun 2024 18:20:33 +0000
Subordinate resources:    AS: 268353
                          IP: 45.239.52.0/22
                          IP: 2804:4fd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:11:cb:13:59:a2:90:aa:0b:31:44:76:f9:be:3c:c3:67:59:ce:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 26 18:15:33 2023 GMT
            Not After : Jun 24 18:20:33 2024 GMT
        Subject: CN=331BD13CFC847545EBF4ABCF9AF10D3C7AA4F0CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:d7:cf:7c:c4:6e:d9:d3:7f:b1:99:c7:3e:
                    73:9a:70:45:73:89:83:9e:68:be:9f:36:42:2c:49:
                    6c:b0:fb:df:41:41:aa:70:6c:f0:f4:26:a6:77:e9:
                    65:65:53:e9:34:c2:33:0a:7d:7e:5e:25:5c:a9:9a:
                    02:97:40:83:ff:d6:68:93:86:3b:02:63:d6:04:12:
                    d7:d7:dd:5a:5c:ed:bf:df:f9:98:db:d4:0d:7c:40:
                    1f:8f:08:9e:eb:c6:29:0a:52:0f:99:a3:03:9b:05:
                    e9:25:a5:9b:70:6c:05:c6:39:14:cc:dd:6b:37:ed:
                    90:62:c0:40:87:c2:dc:fb:ab:34:5c:1b:3f:55:7a:
                    bd:45:96:e6:d6:71:8f:e0:41:de:c3:2e:ec:94:80:
                    84:29:2e:50:b8:b6:5d:16:bc:67:0c:ea:3a:01:75:
                    67:97:df:b8:19:c4:41:d0:54:5c:3c:69:a2:51:33:
                    1b:a7:b0:c8:39:54:1c:dd:9a:cf:c3:36:ea:21:6a:
                    d9:75:77:d5:fa:5f:e8:54:60:8d:9e:70:e1:22:43:
                    b7:b4:1b:0a:12:6f:51:0b:4b:a6:c8:17:c7:48:6b:
                    73:68:dd:f0:74:9f:ec:f2:5c:4c:7c:8a:51:42:af:
                    2e:29:50:e9:ea:6b:65:97:76:5c:3a:b0:67:78:39:
                    be:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:1B:D1:3C:FC:84:75:45:EB:F4:AB:CF:9A:F1:0D:3C:7A:A4:F0:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/331BD13CFC847545EBF4ABCF9AF10D3C7AA4F0CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.52.0/22
                IPv6:
                  2804:4fd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268353

    Signature Algorithm: sha256WithRSAEncryption
         21:5b:97:19:b0:fa:42:18:c9:e5:7d:fa:60:77:7b:63:49:de:
         66:75:da:3f:eb:c3:83:c8:80:4c:3f:07:ab:d8:c6:0d:eb:a3:
         92:60:79:05:09:63:88:11:85:fa:59:74:e1:30:4b:18:cc:c3:
         e5:98:fb:a0:ac:5f:b6:a9:29:43:6f:d1:37:c3:2c:20:7b:55:
         dd:cc:4f:bb:fb:96:6e:32:1a:6e:b2:7c:39:34:20:ea:d7:38:
         b6:56:33:bf:98:1e:c4:b5:f7:60:10:ad:ab:81:28:0e:66:d3:
         51:2c:b6:29:78:67:27:c7:d7:e3:17:38:9f:3f:08:69:db:cb:
         b4:1c:09:e8:00:dc:47:25:5a:4e:84:a1:e2:f1:9d:3f:f0:fa:
         aa:12:0a:a7:58:33:ca:77:6f:18:80:b2:cd:de:51:b6:31:d2:
         f3:a1:51:d7:87:7a:c7:e7:10:b6:25:78:56:94:35:73:9c:ab:
         03:8a:c1:22:92:56:0a:79:b5:29:71:e9:1e:67:aa:68:73:ed:
         c5:d4:a5:0b:ae:de:03:9e:84:62:96:ca:1f:21:3e:6c:ab:df:
         6f:3f:c0:02:a7:c7:fe:4f:71:a9:78:2f:89:f3:ca:a4:5b:9b:
         94:6b:48:3d:f0:86:87:8d:b6:bf:f4:eb:4d:cd:5e:fa:e4:02:
         33:8d:20:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org