Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/382DF13B0C7EDD404840F25896963169119BE7E9.cer
File:                     382DF13B0C7EDD404840F25896963169119BE7E9.cer (raw, json)
Hash identifier:          Rpibr1TEoeH6NWg18JhIPD8yN4d7alk7C54xr9qezM4=
Subject key identifier:   38:2D:F1:3B:0C:7E:DD:40:48:40:F2:58:96:96:31:69:11:9B:E7:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       69D4CD1096FB7383E234B3B865E8C2D9A20A8856
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/382DF13B0C7EDD404840F25896963169119BE7E9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 13:25:26 +0000
Certificate not after:    Tue 11 Mar 2025 13:30:26 +0000
Subordinate resources:    AS: 269490
                          IP: 45.187.240.0/22
                          IP: 2804:6570::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:d4:cd:10:96:fb:73:83:e2:34:b3:b8:65:e8:c2:d9:a2:0a:88:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 13:25:26 2024 GMT
            Not After : Mar 11 13:30:26 2025 GMT
        Subject: CN=382DF13B0C7EDD404840F25896963169119BE7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:81:4c:83:78:26:f3:69:85:95:7c:97:a8:
                    98:20:04:12:a6:18:90:fd:b6:ce:25:87:a8:7d:9e:
                    52:b2:fc:1b:3a:5f:15:3b:68:e1:f0:ea:65:02:8b:
                    61:0b:9e:86:c8:b5:f7:47:7f:a3:db:c3:ea:f3:f0:
                    c0:9a:6b:96:f4:20:9d:c2:48:48:36:92:b3:f0:77:
                    23:fb:01:b5:07:4f:2c:aa:3e:6b:e0:85:74:d4:03:
                    7a:d0:c8:6e:12:f1:24:4c:08:8f:37:4e:3c:88:1a:
                    76:66:08:2c:b1:d9:a5:3b:67:8a:27:ce:81:59:d8:
                    2c:75:c2:20:83:ba:2d:97:c2:b1:50:3a:2c:e4:26:
                    e4:9b:ce:a2:3d:1a:fd:b6:89:a1:be:d5:81:eb:a1:
                    cd:18:d0:2b:db:29:4d:19:47:53:10:8b:42:1a:82:
                    ca:0e:93:f1:e1:09:6f:8e:e0:98:22:5f:3c:b8:89:
                    07:e4:12:e3:37:f0:69:35:28:cd:d1:6d:f0:d9:b0:
                    bf:07:9a:c9:51:07:51:71:c5:ea:60:14:83:33:6c:
                    df:08:62:8d:83:56:cc:89:33:0d:6e:61:bc:0d:e0:
                    b2:aa:96:53:84:23:ad:34:a4:72:49:03:dd:25:d7:
                    14:cb:d9:07:8a:d3:66:9b:6b:36:df:ce:61:8d:0c:
                    dc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:2D:F1:3B:0C:7E:DD:40:48:40:F2:58:96:96:31:69:11:9B:E7:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dn3FAxPNQ7PfPokL2oxQyCSELZ5NJ2x6GkMUotNE8FRU/0/382DF13B0C7EDD404840F25896963169119BE7E9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.240.0/22
                IPv6:
                  2804:6570::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269490

    Signature Algorithm: sha256WithRSAEncryption
         49:06:7d:ee:b5:c8:72:f5:f7:66:c1:7a:2e:50:44:1f:d5:0f:
         59:d6:1e:ff:c9:00:9f:f1:53:bf:c0:12:b6:7b:21:17:61:6f:
         76:94:b5:f7:06:8d:fd:5b:9b:8e:c9:ae:8f:45:a1:e6:41:a0:
         4e:c1:0d:08:18:cf:98:2a:b4:2f:83:11:c0:7b:c1:70:1a:dc:
         12:3a:fd:f6:da:19:66:d7:0c:36:de:a6:b6:c8:c0:e9:be:c4:
         9e:bf:f0:d3:2b:46:98:aa:9c:a0:69:64:1f:ab:e4:88:08:15:
         93:a1:12:ae:9f:9c:0b:d4:03:19:ab:a2:67:9d:57:9c:73:02:
         35:c8:63:3b:6d:e2:71:c5:3f:a1:04:58:70:2e:09:ca:7b:96:
         7d:ae:41:b4:14:35:5d:af:79:0f:4a:10:d2:57:e2:ff:bd:73:
         02:11:ad:1c:77:50:c7:85:9f:13:fc:2e:d9:46:96:85:a9:c2:
         17:01:b3:cc:a7:92:66:92:90:56:0d:14:84:f9:a5:3f:1d:9f:
         41:36:7e:51:7d:65:79:b4:0b:57:38:c4:d5:e4:ca:9a:74:c5:
         6a:04:8e:37:16:a8:12:f3:a6:21:04:01:e2:cf:06:d2:bc:27:
         36:df:5b:70:39:e6:f2:50:e0:ed:79:53:83:e9:3a:42:8a:4a:
         9e:8c:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org