Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/45B91BE0F81348BD8D38FDD7887981473CE3720E.cer
File:                     45B91BE0F81348BD8D38FDD7887981473CE3720E.cer (raw, json)
Hash identifier:          qOcIze9qPGMnA2yyEaVkTAhlzZDMtitU8BGoP+YtPWE=
Subject key identifier:   45:B9:1B:E0:F8:13:48:BD:8D:38:FD:D7:88:79:81:47:3C:E3:72:0E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5960BF952A4F6D74C0543C667875A3FC93E10187
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/45B91BE0F81348BD8D38FDD7887981473CE3720E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Oct 2023 11:34:16 +0000
Certificate not after:    Thu 24 Oct 2024 11:39:16 +0000
Subordinate resources:    AS: 271273
                          IP: 45.229.132.0/22
                          IP: 2804:78e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:60:bf:95:2a:4f:6d:74:c0:54:3c:66:78:75:a3:fc:93:e1:01:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 26 11:34:16 2023 GMT
            Not After : Oct 24 11:39:16 2024 GMT
        Subject: CN=45B91BE0F81348BD8D38FDD7887981473CE3720E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:26:c2:15:f2:31:e9:45:a3:f9:17:08:a0:1b:
                    fc:d3:4a:46:5f:5b:37:99:52:39:ee:bb:5a:35:78:
                    f9:43:d6:b7:30:95:0e:24:94:6f:c1:ce:8c:9e:5d:
                    a0:12:a5:8d:ec:97:fd:bb:e6:35:8f:14:d9:34:72:
                    6e:57:50:ac:4a:7d:8c:6b:84:b2:70:af:12:b6:b3:
                    db:ed:37:a2:e2:8b:ec:1c:ba:c7:a5:af:c0:30:33:
                    fc:1f:7a:dc:df:49:36:14:3f:ce:5c:bb:9d:89:c6:
                    46:dd:a1:0f:c7:e7:1d:b9:3d:13:46:6f:58:e3:a2:
                    ea:d7:6a:8d:d1:5d:52:4f:31:1e:a3:f7:fe:0c:12:
                    a7:de:22:5a:35:c7:51:7d:11:d4:1e:ae:c4:6a:62:
                    02:74:84:53:f2:0c:3e:5c:5a:fd:4e:a4:d4:6a:30:
                    93:4a:50:40:34:a1:da:9a:6c:09:11:7c:e3:b5:26:
                    96:96:52:d4:ec:c9:03:10:c8:3d:c6:82:c9:59:45:
                    fa:6c:ae:89:c2:39:cd:d7:53:b9:54:83:9e:78:6a:
                    ec:ed:2a:70:94:d6:5a:a5:b2:91:ac:59:27:6d:a0:
                    ee:75:af:e8:74:f1:eb:d6:33:c0:8d:f8:98:28:19:
                    3e:ef:91:44:d3:56:3f:85:9e:28:bc:66:78:40:b6:
                    f6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:B9:1B:E0:F8:13:48:BD:8D:38:FD:D7:88:79:81:47:3C:E3:72:0E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVfXihMWY97d4musC1pVBYGcYwPeaXbsKtMDnJSQ3Pyc/0/45B91BE0F81348BD8D38FDD7887981473CE3720E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.132.0/22
                IPv6:
                  2804:78e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271273

    Signature Algorithm: sha256WithRSAEncryption
         02:99:55:e3:7e:0e:62:43:95:a9:4b:17:32:b8:74:c7:63:aa:
         f0:66:ba:e8:54:c1:76:c4:8d:16:a7:c2:8f:29:5d:f3:71:1c:
         38:41:d1:ba:38:ec:a4:14:85:04:dc:3c:de:02:32:65:02:0b:
         32:e2:8b:92:45:51:fb:c7:57:9d:d0:b3:48:50:28:bb:1d:1d:
         0c:f2:a5:32:93:cb:c9:28:5d:9f:e4:3e:41:ac:f7:93:9c:4a:
         0a:2d:33:b9:ac:23:b6:b3:de:80:c8:99:c1:21:64:f9:8e:4d:
         05:13:4d:75:af:a6:78:43:e3:14:60:b2:93:55:96:ea:ae:95:
         c8:69:1f:d1:24:a5:19:e1:e8:f7:9a:e8:81:06:4d:79:70:0d:
         d8:0d:9b:c1:64:25:b1:56:3b:28:96:dd:af:2b:fc:93:81:11:
         c6:c2:70:34:77:45:e9:51:14:b4:cc:0d:4a:c9:2e:76:28:b9:
         de:58:99:9e:1a:96:45:e4:d1:fe:fb:dc:6e:2e:30:b4:fb:94:
         47:a4:90:6b:97:3e:54:82:a7:4d:c0:02:66:d6:b8:15:24:14:
         2c:f9:a3:20:8a:d2:43:a4:63:fd:f7:71:0a:dd:21:74:36:10:
         3e:ea:1a:ae:72:f6:68:07:93:8f:4c:4d:ef:a0:2a:c6:62:77:
         4c:d3:20:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org