Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/45BED260877BEEE1921A0099C1B7293C972DB403.cer
File:                     45BED260877BEEE1921A0099C1B7293C972DB403.cer (raw, json)
Hash identifier:          FG6Q4BkmC2aCUUHi2XvQW5oj+I4kBrqNyeYpQDEDPFk=
Subject key identifier:   45:BE:D2:60:87:7B:EE:E1:92:1A:00:99:C1:B7:29:3C:97:2D:B4:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4959634C2E34DAE2F3109F9D6CFACB62FBC9B7B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/45BED260877BEEE1921A0099C1B7293C972DB403.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 May 2023 09:52:12 +0000
Certificate not after:    Sun 26 May 2024 09:57:12 +0000
Subordinate resources:    AS: 271642
                          IP: 190.9.76.0/22
                          IP: 2804:7eb4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:59:63:4c:2e:34:da:e2:f3:10:9f:9d:6c:fa:cb:62:fb:c9:b7:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 28 09:52:12 2023 GMT
            Not After : May 26 09:57:12 2024 GMT
        Subject: CN=45BED260877BEEE1921A0099C1B7293C972DB403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:9c:dc:6f:95:45:14:e5:a3:f8:3b:24:8c:
                    a1:96:2a:fc:65:72:f7:8a:09:96:58:0f:6c:7e:21:
                    39:c6:94:b0:93:05:0b:41:c2:8b:fd:9a:c7:22:28:
                    c1:c4:8f:39:59:bb:4a:e1:a7:33:9f:1d:62:c2:03:
                    15:e6:18:a5:85:4c:d6:a3:d5:30:3f:16:aa:be:55:
                    99:73:99:cd:ba:2d:d6:7f:d1:5e:df:e7:ff:4b:25:
                    02:8f:aa:78:e9:50:40:db:68:80:41:f4:6a:a3:12:
                    52:7e:34:b9:7f:e5:b1:1a:79:33:76:1b:82:35:01:
                    35:ad:35:04:af:90:8b:2a:27:ac:6f:eb:c2:e6:1e:
                    93:58:1d:f6:5a:09:55:c7:41:27:12:6c:d8:f6:57:
                    e3:e2:c3:6a:08:64:e6:69:4d:67:f6:9b:04:84:19:
                    ce:d2:73:f3:ac:e8:14:a7:90:5c:ba:23:40:1d:7a:
                    08:81:43:7c:cc:63:83:17:c6:6b:e4:4b:46:14:07:
                    ec:9c:19:12:e6:d9:de:90:2d:5e:8a:75:2c:e1:95:
                    a0:54:7b:92:8f:23:0f:42:48:85:e8:88:d6:b9:97:
                    35:c5:e1:ab:39:a6:7e:75:ec:bf:cf:6c:c5:8f:6d:
                    40:4c:af:19:78:c7:e6:7f:1d:12:d9:b6:3b:43:85:
                    cb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:BE:D2:60:87:7B:EE:E1:92:1A:00:99:C1:B7:29:3C:97:2D:B4:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FQyvKNLAxGXFiy3pQVng2ehz5RR11UWB5xi8zy51UKaQ/0/45BED260877BEEE1921A0099C1B7293C972DB403.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.76.0/22
                IPv6:
                  2804:7eb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271642

    Signature Algorithm: sha256WithRSAEncryption
         58:cf:b0:f1:7a:b0:db:5c:98:93:62:c6:cb:c7:48:76:73:3a:
         9c:5f:f7:2b:93:87:d9:e6:7e:86:fd:9c:b7:1c:0f:9c:4d:b9:
         45:60:ec:e0:51:5f:2f:35:69:df:69:14:04:4e:f5:10:cb:ac:
         b4:1f:01:92:4f:e7:b9:2f:aa:cc:ad:7c:10:7c:67:64:1f:58:
         f9:b3:80:b5:e5:8d:4a:27:f7:b9:69:38:d4:77:d3:5b:6f:3a:
         7f:69:ed:b6:e7:aa:b4:5d:43:29:f4:a9:eb:60:0b:d4:a3:f6:
         0b:37:7b:0c:e0:50:30:df:95:6c:1e:c3:66:ff:c7:96:8d:61:
         65:f0:50:98:1d:30:10:8e:7b:16:f1:4a:06:de:75:82:11:4c:
         85:16:be:e2:d7:01:13:88:ad:7a:65:aa:3a:65:41:92:28:ca:
         bb:bc:af:db:a9:af:a9:e9:45:78:5f:fa:b3:6a:b0:1a:ed:3d:
         0a:be:c2:64:2e:b6:0f:c7:9d:38:ef:b7:8d:4b:25:e3:31:6c:
         db:27:8b:d2:f2:3d:d8:73:c8:d1:30:f2:56:d6:66:5e:f8:a4:
         36:33:11:25:21:ca:2a:35:4e:da:97:6a:c0:01:dd:1d:d3:ee:
         0b:de:e3:1b:b1:c9:21:6c:8e:15:08:fe:ee:23:d5:44:4c:ca:
         14:25:4d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org