Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.cer
File:                     445E0D71B84300BD33B96E950879AA7A6CEBA714.cer (raw, json)
Hash identifier:          wUtcF7uPLG/wwbwudEyJagYe8hpTP8OeO0NqMSJrLyY=
Subject key identifier:   44:5E:0D:71:B8:43:00:BD:33:B9:6E:95:08:79:AA:7A:6C:EB:A7:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B23CCBFA3F9C2C050E01E6B7977E3CF24DBA204
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Nov 2022 18:34:20 +0000
Certificate not after:    Thu 09 Nov 2023 18:39:20 +0000
Subordinate resources:    AS: 269056
                          IP: 45.178.204.0/22
                          IP: 2804:5ec8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:23:cc:bf:a3:f9:c2:c0:50:e0:1e:6b:79:77:e3:cf:24:db:a2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 18:34:20 2022 GMT
            Not After : Nov  9 18:39:20 2023 GMT
        Subject: CN=445E0D71B84300BD33B96E950879AA7A6CEBA714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a5:a7:65:b3:1a:be:90:f7:87:0d:7e:03:77:
                    33:c5:b5:d6:bd:f7:62:72:bd:53:4f:95:69:44:9e:
                    9a:47:1e:70:2c:93:36:c4:f3:e4:e5:71:fb:04:58:
                    79:6a:49:0e:aa:69:59:d5:b6:68:fd:5b:28:f0:d4:
                    09:97:38:7b:ee:47:49:fd:47:92:24:7f:09:9e:2f:
                    60:57:ec:e8:e5:bc:35:fb:09:8f:43:43:73:0e:c2:
                    85:73:ea:4b:70:fc:2e:f4:93:c0:53:30:60:75:f3:
                    80:46:19:f2:5d:a2:50:b4:b0:49:00:85:fb:d0:b0:
                    0a:84:62:5a:52:d0:24:49:5b:80:55:14:56:49:1a:
                    32:33:d8:dd:41:12:d5:d4:b8:dd:21:cf:f7:48:b0:
                    05:0e:c7:92:35:86:92:18:f5:8c:fb:2c:02:90:22:
                    08:5a:ac:7c:71:92:35:04:7f:d2:d9:64:4a:a8:7f:
                    5c:85:2f:9d:07:c1:09:b0:c6:b4:55:e5:60:49:ef:
                    ee:35:3c:80:70:78:b0:bb:52:e4:9e:ca:2d:e6:2b:
                    28:7b:88:d2:89:6f:36:8f:f4:ef:0d:63:98:42:0a:
                    55:0e:c6:81:e5:c5:bf:af:bd:ba:03:59:9c:5f:35:
                    7f:22:87:fd:28:82:93:39:ae:a6:94:3b:4b:94:90:
                    31:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:5E:0D:71:B8:43:00:BD:33:B9:6E:95:08:79:AA:7A:6C:EB:A7:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5VBZ8YVp5emVZB2qEhMsVZBJ8jjhiS8NBqBvukfe8LCa/0/445E0D71B84300BD33B96E950879AA7A6CEBA714.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.204.0/22
                IPv6:
                  2804:5ec8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269056

    Signature Algorithm: sha256WithRSAEncryption
         08:ad:d1:4e:e0:ec:49:e6:0a:de:6a:17:df:90:b3:70:97:5e:
         d0:36:fe:07:60:42:68:82:95:16:c0:45:57:93:2e:f0:79:b5:
         e6:59:0e:b8:cb:7c:0f:82:42:f0:1a:8b:68:26:35:aa:89:79:
         d5:68:c4:4b:e2:a9:59:21:32:04:e5:a8:2a:0c:59:3e:a9:ac:
         c8:3d:a3:82:6c:fc:a7:75:9f:36:52:4e:f1:19:a5:65:96:b1:
         84:43:74:e9:70:c0:19:42:50:1f:df:32:ea:75:2f:d8:72:a1:
         25:93:7a:17:16:9b:fd:25:b5:26:aa:a7:0e:f2:83:d7:3c:e3:
         e0:ea:6b:9e:25:5e:6f:b7:8c:22:e3:31:99:75:eb:02:85:d3:
         5e:16:65:47:ce:ba:30:30:76:78:37:54:28:8a:00:d4:b2:71:
         ce:40:17:c7:3f:a1:4c:01:ff:b4:2b:c4:c8:d9:1f:ec:a9:c3:
         c7:b5:71:d9:45:c7:5c:15:3d:43:6b:09:c0:8a:81:fb:16:6a:
         3e:d5:82:de:61:e4:91:b5:fd:12:d7:d6:ef:36:e3:12:a9:8c:
         78:9a:0c:c0:f0:ab:13:0a:cb:83:fc:29:c0:d4:4f:24:12:16:
         5c:f2:3c:59:2e:c4:a3:bd:19:f1:98:27:33:43:a3:a2:f2:f0:
         a2:9e:ec:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org