Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/35095E12F171817DDE4EC0B91231CC009AC6496C.cer
File:                     35095E12F171817DDE4EC0B91231CC009AC6496C.cer (raw, json)
Hash identifier:          tQWj9ReRxVPmaKFDengAi5TsH18YSrzE0w0kie9qJCM=
Subject key identifier:   35:09:5E:12:F1:71:81:7D:DE:4E:C0:B9:12:31:CC:00:9A:C6:49:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       132CDAA67255AF561F8B0F65FCDD480787F16995
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/35095E12F171817DDE4EC0B91231CC009AC6496C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 13:44:38 +0000
Certificate not after:    Mon 07 Oct 2024 13:49:38 +0000
Subordinate resources:    AS: 267079
                          IP: 45.227.44.0/22
                          IP: 2804:47d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2c:da:a6:72:55:af:56:1f:8b:0f:65:fc:dd:48:07:87:f1:69:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  9 13:44:38 2023 GMT
            Not After : Oct  7 13:49:38 2024 GMT
        Subject: CN=35095E12F171817DDE4EC0B91231CC009AC6496C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:44:23:4d:45:64:0f:46:df:4c:cb:db:14:fd:
                    da:ec:43:f3:79:b1:05:55:0b:6e:36:de:81:23:36:
                    84:76:a4:e9:3a:2c:bb:a5:a3:45:17:72:78:34:5d:
                    f3:04:9a:be:8f:a4:7e:b9:40:42:c4:a8:c2:60:c7:
                    75:11:c1:ee:91:76:0b:6e:9b:98:8c:59:fa:fe:1c:
                    5d:d2:fd:b3:6b:ac:d1:ce:6d:0c:e5:99:0e:6d:93:
                    69:85:fc:f1:1b:c5:2c:be:26:64:ec:e2:8c:e3:69:
                    70:78:ce:0a:55:a3:9d:a6:c2:ce:b6:e3:63:d1:15:
                    c1:8d:28:22:43:43:05:c1:ea:4b:9c:5c:72:e4:91:
                    34:07:87:37:be:d5:40:cc:b5:c0:d3:b9:27:35:3b:
                    e1:0f:4e:92:ea:e9:e6:03:01:d8:20:3e:be:85:e9:
                    b0:a9:2a:ae:4f:59:dd:15:df:5e:34:d1:f0:27:c3:
                    6d:b4:77:51:8b:31:86:6a:ba:ce:10:32:41:55:94:
                    73:72:47:e6:df:fb:b4:09:ec:02:3c:d9:db:72:41:
                    a3:29:97:e7:57:fd:4e:2d:91:df:44:01:83:40:14:
                    26:28:b3:16:71:32:86:54:85:8a:84:75:5d:53:f1:
                    41:a5:ae:54:22:77:c9:9f:0d:1a:8d:19:62:db:b5:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:09:5E:12:F1:71:81:7D:DE:4E:C0:B9:12:31:CC:00:9A:C6:49:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6wcUZ6ycGMZ4XCo9f3QydtJiUGFjpsroxciufWZfdrAu/0/35095E12F171817DDE4EC0B91231CC009AC6496C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.44.0/22
                IPv6:
                  2804:47d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267079

    Signature Algorithm: sha256WithRSAEncryption
         1b:2e:61:2d:ce:f0:b4:34:c2:5c:4f:0b:2b:70:0c:5d:7e:3a:
         c1:96:28:b3:05:81:f6:99:57:61:76:78:47:02:fa:81:cd:7c:
         25:91:c2:b2:7c:80:ca:6a:9f:22:7b:1e:7e:f2:7a:eb:cd:6e:
         27:0b:80:8c:50:8e:bb:89:4a:64:50:73:28:ec:a0:8c:94:e1:
         65:f9:f3:0a:23:bb:20:31:2c:c3:70:29:b7:b5:c3:11:8a:88:
         94:8b:4c:7b:db:ac:60:62:15:7c:15:c7:ea:10:0c:b9:08:a3:
         bc:8b:30:8b:ca:e6:19:7f:63:10:fe:28:57:77:4f:10:33:32:
         f3:25:d6:20:d8:74:38:55:ee:c1:29:18:5d:df:a0:56:e4:67:
         64:e1:89:2a:bb:5e:2c:3a:3c:2a:f0:4d:52:39:40:68:1f:c9:
         97:17:9e:d3:3b:b8:cb:65:2b:16:31:52:37:0e:d2:a5:7f:82:
         17:65:89:1f:d5:09:be:82:02:fc:e1:e6:eb:61:1c:f7:12:5f:
         0a:69:78:ab:7f:7c:63:17:e8:53:b8:52:95:b6:c6:22:6e:fe:
         e9:ad:04:5b:16:e1:85:27:53:52:9b:7e:b2:79:df:6e:60:31:
         1d:2c:d6:00:db:dd:37:81:43:bd:7f:8d:1c:70:9a:f9:46:39:
         2e:06:56:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org