Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.cer
File:                     458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.cer (raw, json)
Hash identifier:          64nqh4K2EH3kNLXT1J4/UVJCPbgtcbSOPk0NVEu5fpM=
Subject key identifier:   45:8B:0D:FA:16:A8:C6:30:CA:CC:3A:E2:F4:E4:CA:B2:34:C0:92:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E8D94033C0DB53DD171024C86D4766533E2DA71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 23 Apr 2023 20:32:04 +0000
Certificate not after:    Sun 21 Apr 2024 20:37:04 +0000
Subordinate resources:    AS: 263998
                          IP: 143.0.84.0/22
                          IP: 170.245.200.0/22
                          IP: 2804:291c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:8d:94:03:3c:0d:b5:3d:d1:71:02:4c:86:d4:76:65:33:e2:da:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 23 20:32:04 2023 GMT
            Not After : Apr 21 20:37:04 2024 GMT
        Subject: CN=458B0DFA16A8C630CACC3AE2F4E4CAB234C09299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:dd:9e:ac:84:95:11:cd:92:3a:1d:85:64:b5:
                    4c:39:68:b2:11:92:2c:33:f5:e9:74:43:06:26:ca:
                    6a:64:ca:d4:03:32:8f:e9:87:e0:ba:01:f9:14:e3:
                    e0:3d:4a:dc:d7:55:26:07:d6:ae:31:b7:17:3b:0f:
                    61:c8:b6:8a:bb:7f:d6:c5:b1:a6:c2:2e:00:10:ee:
                    e6:21:d7:a3:d1:c4:be:ab:66:52:00:6b:80:56:0c:
                    81:6f:24:30:74:a7:2c:fb:fb:26:32:27:f6:5c:fe:
                    43:00:c7:26:17:fe:ac:fb:7f:bd:94:30:13:6c:1b:
                    be:04:e1:bd:5b:c5:bd:ae:9e:f2:6e:66:dc:d7:5a:
                    bd:9f:22:df:a3:3e:62:f0:35:69:c8:37:3e:df:04:
                    92:67:f2:5b:9e:c8:c9:ed:fe:5c:1c:38:4e:5f:83:
                    fd:e4:94:f7:f6:0e:9e:d0:63:81:18:53:94:89:84:
                    d8:8e:9e:62:3b:a9:a1:22:f8:5f:20:0e:c9:9b:39:
                    44:7e:5d:d6:d8:25:c0:d6:4c:73:4f:72:a1:5d:01:
                    66:ba:36:c7:5e:04:83:71:7a:1c:e4:19:09:49:6e:
                    8d:03:71:be:61:5d:05:dc:8a:27:03:a7:f1:2e:75:
                    05:92:73:ed:f3:f2:7a:14:93:58:83:ac:89:2b:f6:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:8B:0D:FA:16:A8:C6:30:CA:CC:3A:E2:F4:E4:CA:B2:34:C0:92:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/458B0DFA16A8C630CACC3AE2F4E4CAB234C09299.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.84.0/22
                  170.245.200.0/22
                IPv6:
                  2804:291c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263998

    Signature Algorithm: sha256WithRSAEncryption
         6c:43:2e:bd:7b:e2:97:2c:8d:aa:f2:cc:87:e6:14:ae:35:5b:
         b6:93:67:f8:30:cf:c2:a2:7f:bd:7a:fe:bb:e0:66:2b:22:ce:
         ab:80:b7:27:f0:4c:61:cc:19:a1:ef:fb:10:54:75:1d:25:17:
         05:f7:87:e0:26:e6:c0:19:7b:4b:a2:f8:4f:66:31:76:b8:31:
         5e:84:ed:6b:39:1b:8f:50:0b:18:c1:cf:28:1f:2a:f0:31:c8:
         7f:55:28:7c:ce:6a:49:6e:f5:31:b7:8c:df:9b:64:9e:5f:ca:
         75:13:7c:ef:ee:00:53:e8:28:50:b7:ae:38:e2:46:54:f5:42:
         03:10:e0:14:c9:2c:f4:04:79:03:c7:14:17:89:61:2a:db:7d:
         37:82:f8:e2:ed:eb:19:f9:b8:f2:02:38:82:da:ff:8f:58:0f:
         ca:1d:28:18:83:d0:93:1e:5f:ae:6b:15:8a:74:95:39:52:45:
         63:7b:0c:e2:19:46:dd:57:74:24:0b:a5:f9:b2:a6:82:88:9a:
         f5:52:f7:33:21:d9:f9:20:00:77:43:c1:ef:ff:43:f4:f7:fc:
         04:0c:50:e4:c1:50:e6:ff:6d:a7:52:99:42:39:d9:11:c5:ed:
         05:c3:e7:08:51:d6:3d:61:fa:7d:42:52:1c:a7:94:28:49:ac:
         e7:a4:2d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org