Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/350E4CDA2B8D5D997FCCF0532CC68ED1C1A7A020.cer
File:                     350E4CDA2B8D5D997FCCF0532CC68ED1C1A7A020.cer (raw, json)
Hash identifier:          oR4f+3weCwMw0GWFefAP5gPDv3sYHff0c66K46X8Vx4=
Subject key identifier:   35:0E:4C:DA:2B:8D:5D:99:7F:CC:F0:53:2C:C6:8E:D1:C1:A7:A0:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4682E72297BEDB056951F57DCDD368B0BCD517BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6fzZJAzxhGTMuRfmDmvidUjdeYkk4prk3LNjNzEzxbs7/1/350E4CDA2B8D5D997FCCF0532CC68ED1C1A7A020.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6fzZJAzxhGTMuRfmDmvidUjdeYkk4prk3LNjNzEzxbs7/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Sep 2022 07:35:14 +0000
Certificate not after:    Thu 07 Sep 2023 07:40:14 +0000
Subordinate resources:    AS: 268309
                          IP: 45.238.48.0/22
                          IP: 2804:4f2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:82:e7:22:97:be:db:05:69:51:f5:7d:cd:d3:68:b0:bc:d5:17:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  8 07:35:14 2022 GMT
            Not After : Sep  7 07:40:14 2023 GMT
        Subject: CN=350E4CDA2B8D5D997FCCF0532CC68ED1C1A7A020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2d:2f:e5:05:0f:19:7c:2c:e9:51:41:ca:40:
                    8b:b4:44:5f:e2:0f:1d:fb:d0:41:c3:94:c9:d6:30:
                    cb:94:ad:0a:07:ac:5f:86:99:a7:24:ec:3b:f2:32:
                    b9:d6:a1:07:a5:7b:c4:f1:1a:31:eb:1c:08:81:e9:
                    d0:b4:9f:01:d0:8b:5a:ff:b0:38:3b:e0:fb:84:d4:
                    c5:3e:7c:e5:21:ed:20:9d:34:8e:bb:ea:1b:51:e9:
                    22:ff:01:6b:c5:28:87:2c:5c:8f:e2:bd:69:05:38:
                    4b:6b:88:96:92:62:1e:96:ed:2e:c4:56:84:95:cb:
                    10:80:90:88:c7:37:80:2e:98:63:5a:b7:8e:03:47:
                    34:4d:0d:38:c4:0a:b1:4a:62:71:17:4e:c8:8c:44:
                    cf:ef:b9:92:39:be:c9:5d:66:8d:b7:13:00:56:eb:
                    99:c9:8b:78:73:19:84:e9:ad:ff:7b:d9:38:df:63:
                    90:e4:47:87:c8:b8:49:bc:09:91:d3:6f:65:44:80:
                    b6:39:0a:b7:c6:9d:4e:99:a7:fd:e8:0e:94:ff:10:
                    46:52:72:77:d9:bc:93:dd:5a:57:8b:07:51:f8:b2:
                    5d:59:12:34:aa:4a:f6:e2:1c:cc:69:b6:2f:20:0d:
                    21:27:0e:8c:3f:01:4f:06:cf:39:8f:6c:f2:e0:2f:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:0E:4C:DA:2B:8D:5D:99:7F:CC:F0:53:2C:C6:8E:D1:C1:A7:A0:20
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6fzZJAzxhGTMuRfmDmvidUjdeYkk4prk3LNjNzEzxbs7/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6fzZJAzxhGTMuRfmDmvidUjdeYkk4prk3LNjNzEzxbs7/1/350E4CDA2B8D5D997FCCF0532CC68ED1C1A7A020.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.48.0/22
                IPv6:
                  2804:4f2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268309

    Signature Algorithm: sha256WithRSAEncryption
         4c:67:01:a9:9b:e2:c4:07:07:ba:22:9f:4b:0b:65:32:52:c1:
         13:0c:87:65:3a:be:59:81:58:c6:d6:2c:45:38:02:fd:85:73:
         68:f4:cf:fd:a0:24:e5:72:56:de:80:0b:64:e2:b1:9c:fe:60:
         48:04:a9:e4:62:60:48:ee:e7:40:f1:2b:e2:eb:26:90:35:d2:
         98:bf:50:c1:6f:b1:79:80:47:72:a2:33:55:86:c1:3e:d8:fc:
         65:f5:f9:6a:ff:26:0d:08:d5:8d:43:c2:85:2d:eb:65:6f:a0:
         61:d1:8b:f0:f5:19:bc:ba:84:ab:8d:20:f0:03:c7:3a:4f:19:
         d4:e5:2f:b3:30:c1:9e:b6:4e:71:00:57:d6:7b:ba:3b:40:f5:
         a4:17:b1:d1:c9:45:f5:c6:ab:0d:67:45:4c:0a:34:ac:1b:31:
         68:c0:75:2b:c3:ff:36:b6:bd:78:f1:27:f3:62:a9:88:5c:8b:
         a8:9f:a3:c4:e3:c8:61:35:53:b7:b6:55:e1:ec:01:2b:58:fe:
         39:0b:17:1e:6c:4d:62:7f:16:a9:ce:f5:d3:5a:be:bd:fe:c6:
         91:e3:4d:a7:0a:19:e3:89:6e:be:bf:61:76:2c:b2:05:f5:ad:
         68:e0:39:bd:68:7c:8f:08:36:31:c9:82:b3:3c:39:7e:69:2b:
         83:36:9c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org