Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/33B24C87EB6FE004094A958C62814DE1AE261CB5.cer
File:                     33B24C87EB6FE004094A958C62814DE1AE261CB5.cer (raw, json)
Hash identifier:          OqdIYW01zZHTJBN1biAVImutahbhn8SmpYGoNJjzJIc=
Subject key identifier:   33:B2:4C:87:EB:6F:E0:04:09:4A:95:8C:62:81:4D:E1:AE:26:1C:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5988500243FBCF2E2EFF56030092B054D01FD844
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/33B24C87EB6FE004094A958C62814DE1AE261CB5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Feb 2023 12:11:45 +0000
Certificate not after:    Wed 31 Jan 2024 12:16:45 +0000
Subordinate resources:    AS: 269184
                          IP: 45.181.132.0/22
                          IP: 2804:60b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:88:50:02:43:fb:cf:2e:2e:ff:56:03:00:92:b0:54:d0:1f:d8:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 12:11:45 2023 GMT
            Not After : Jan 31 12:16:45 2024 GMT
        Subject: CN=33B24C87EB6FE004094A958C62814DE1AE261CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:08:22:ab:79:19:2b:2a:7a:91:7b:0c:26:
                    d3:5e:c4:66:03:ef:19:f8:7a:88:85:19:2d:8f:67:
                    9b:40:10:84:6c:e4:c3:c8:09:0b:e0:ea:fe:df:e4:
                    92:4a:1c:cb:66:7a:1c:e6:21:8d:c6:98:1a:7a:07:
                    b9:0c:62:39:1b:db:d3:08:a3:35:4a:79:45:cb:b3:
                    59:80:0f:ad:01:e3:37:1f:b4:b5:5d:db:7a:bf:49:
                    d0:fb:2c:4b:e5:da:b8:7e:a7:20:0c:86:7f:aa:c4:
                    12:5d:1c:1b:f4:32:70:87:6f:5f:2d:6b:e7:65:eb:
                    ae:72:81:04:25:c8:58:ee:64:05:77:b3:b8:0d:10:
                    86:9e:75:dd:84:f0:a8:eb:0b:5d:7f:ee:a8:c1:e3:
                    40:12:a6:39:6a:4f:c8:3b:91:25:28:20:9b:e7:93:
                    2f:7d:b1:d5:7c:90:92:cd:03:29:03:06:5e:cb:67:
                    d8:8c:ca:14:c9:1e:80:f8:61:45:8a:38:6d:0f:a7:
                    9f:15:39:1d:57:af:9f:39:9d:7f:62:d6:fe:9a:81:
                    2b:5d:87:16:6c:d9:6c:26:46:63:81:8c:fd:89:ca:
                    0e:db:9e:14:05:df:0a:2c:f7:6b:09:1a:de:a5:31:
                    f2:1d:72:87:0d:53:d1:dd:7e:75:66:a2:40:78:3a:
                    fe:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:B2:4C:87:EB:6F:E0:04:09:4A:95:8C:62:81:4D:E1:AE:26:1C:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/0/33B24C87EB6FE004094A958C62814DE1AE261CB5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.132.0/22
                IPv6:
                  2804:60b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269184

    Signature Algorithm: sha256WithRSAEncryption
         62:48:41:e3:56:2d:0b:43:03:63:30:c8:67:fa:16:13:aa:f9:
         69:36:64:97:95:b8:3a:89:47:9a:cc:11:42:a9:f9:b6:e2:47:
         36:1b:6e:08:99:6a:1b:f0:8e:83:05:fd:bf:a9:fa:2a:9c:f4:
         35:cb:00:b9:cb:f5:97:bd:49:bd:b1:5b:ab:0c:20:08:5d:1d:
         f4:42:b3:65:7f:6d:38:f2:a5:61:1e:8a:19:c2:54:23:84:47:
         54:00:00:88:cf:c3:30:a6:37:8d:7f:b5:24:ed:11:eb:e7:9b:
         7c:c4:c5:6c:24:d3:2c:6b:18:e6:d4:54:b7:59:79:15:44:bd:
         c0:d2:7b:47:5e:97:49:58:ef:c3:a3:eb:4a:c7:2b:0e:52:ef:
         59:70:ef:4d:c4:51:c4:22:45:e3:0b:3f:f5:b0:ae:e9:8d:74:
         e0:c3:f3:15:68:08:14:d7:2d:e8:af:24:23:a2:02:71:c9:b7:
         18:56:ec:75:c6:2c:9c:4f:51:2c:a1:83:34:d4:34:05:94:5e:
         3d:cd:79:43:41:90:2d:4a:d2:39:99:75:23:b9:1f:13:f8:cb:
         b7:df:fd:f4:9d:c3:7a:7b:62:92:d2:57:84:4d:20:c9:81:c2:
         a4:26:ea:d9:cd:56:d4:2d:10:c7:87:35:d0:d9:90:e1:b3:8f:
         5f:12:89:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org