Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/43E8DA750A51EDF7FE2DC1CE48EE2E9C6B433222.cer
File:                     43E8DA750A51EDF7FE2DC1CE48EE2E9C6B433222.cer (raw, json)
Hash identifier:          gloDDdscHoeBsBlQJt3RUWJtyHGybegn8pvpx6/hsZs=
Subject key identifier:   43:E8:DA:75:0A:51:ED:F7:FE:2D:C1:CE:48:EE:2E:9C:6B:43:32:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67DC1BA3D23370791561E2CF713EA11D30251828
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/43E8DA750A51EDF7FE2DC1CE48EE2E9C6B433222.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 19:26:15 +0000
Certificate not after:    Thu 07 Nov 2024 19:31:15 +0000
Subordinate resources:    AS: 267208
                          IP: 45.230.200.0/22
                          IP: 2804:49e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:dc:1b:a3:d2:33:70:79:15:61:e2:cf:71:3e:a1:1d:30:25:18:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 19:26:15 2023 GMT
            Not After : Nov  7 19:31:15 2024 GMT
        Subject: CN=43E8DA750A51EDF7FE2DC1CE48EE2E9C6B433222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:0e:06:29:e0:51:eb:83:ab:df:03:d2:a9:
                    a8:59:b1:24:f7:9f:06:8f:82:5b:f9:bb:78:24:e6:
                    c2:ee:2f:8f:4b:3f:b4:36:79:7f:84:67:d4:df:46:
                    cb:39:e2:22:e7:63:46:9c:a8:77:d1:b2:23:fa:81:
                    5e:6a:d5:93:fc:1f:d3:13:cc:ed:11:98:e4:eb:d3:
                    b4:7d:69:be:f1:f9:09:f8:47:d2:65:12:55:5f:bb:
                    67:3b:df:c7:38:16:b1:91:71:52:03:f8:17:ce:60:
                    44:cc:9c:83:ac:80:83:1b:ac:5a:98:64:ee:4c:08:
                    63:ae:ac:82:bf:8f:43:c4:1f:e9:c6:ec:26:5b:be:
                    44:cd:35:e5:4b:4f:b4:49:40:fb:c7:78:db:5f:64:
                    ae:24:7c:52:91:c8:e7:d5:fa:47:e9:39:18:c5:51:
                    07:5b:94:46:21:2a:53:d5:75:8d:9a:bb:de:9f:14:
                    97:7f:3a:00:07:31:41:ff:ac:2a:59:f1:f7:30:0e:
                    2e:c0:7e:0e:e4:df:2a:d2:74:bb:2d:19:b5:b8:63:
                    f0:2c:9e:81:61:92:23:7f:f1:02:e9:44:85:ae:f0:
                    95:c8:11:ad:39:50:b9:00:72:dd:11:7b:64:78:21:
                    5f:ab:f0:64:08:a5:83:05:80:be:af:65:49:65:30:
                    ef:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:E8:DA:75:0A:51:ED:F7:FE:2D:C1:CE:48:EE:2E:9C:6B:43:32:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/43E8DA750A51EDF7FE2DC1CE48EE2E9C6B433222.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.200.0/22
                IPv6:
                  2804:49e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267208

    Signature Algorithm: sha256WithRSAEncryption
         ad:6d:ef:1e:bd:79:8f:b4:e6:43:32:22:06:52:28:0c:aa:3b:
         73:01:6b:5c:4e:7e:bf:b0:c2:25:ee:8b:b0:18:c5:07:a1:b6:
         8f:ed:f5:12:35:16:85:96:e6:ff:25:b9:0d:22:17:5a:62:cc:
         53:06:4c:94:36:59:f6:cf:62:07:fc:a5:0f:89:b4:b3:b8:fa:
         6e:dd:01:79:5e:bb:f6:eb:42:4d:ed:a7:fe:87:eb:09:74:5b:
         af:49:c7:69:41:46:62:ef:54:12:9c:74:4f:30:de:48:f9:f9:
         64:31:34:0a:c6:3e:9b:64:de:53:0b:5e:ef:e5:7a:e2:79:f4:
         03:13:31:74:77:40:58:71:9b:22:9f:39:c9:ed:99:e2:a5:eb:
         2e:0d:f2:ee:b3:37:dc:ad:69:39:02:7f:e7:eb:62:bc:89:23:
         e5:47:1d:69:14:0d:81:02:6d:bc:dd:7d:ca:0b:1a:4f:36:73:
         4d:fc:25:f1:06:19:54:62:da:30:ff:fb:78:73:54:43:47:22:
         66:c3:d2:5f:89:bd:28:b3:dd:89:2c:82:67:93:a5:b0:04:6e:
         49:eb:f3:9f:a0:b6:74:94:03:70:e6:f2:fb:d4:6e:db:f0:04:
         29:4b:8e:2c:61:13:29:8b:56:b9:6f:21:b5:d6:14:61:d1:69:
         f5:1e:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org