Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/45C9392AF50D0AF9130F1975B5978B71F958966F.cer
File:                     45C9392AF50D0AF9130F1975B5978B71F958966F.cer (raw, json)
Hash identifier:          6jkP90Ws25CoJNMHza5qUf2xwIQjxmgx/3VsqmZT7Ps=
Subject key identifier:   45:C9:39:2A:F5:0D:0A:F9:13:0F:19:75:B5:97:8B:71:F9:58:96:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       543E9E177990EB9C552CF4FECFEA12AE3C090CD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/45C9392AF50D0AF9130F1975B5978B71F958966F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Aug 2022 18:16:29 +0000
Certificate not after:    Fri 11 Aug 2023 18:21:29 +0000
Subordinate resources:    AS: 270984
                          IP: 131.221.140.0/22
                          IP: 2804:747c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:3e:9e:17:79:90:eb:9c:55:2c:f4:fe:cf:ea:12:ae:3c:09:0c:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 18:16:29 2022 GMT
            Not After : Aug 11 18:21:29 2023 GMT
        Subject: CN=45C9392AF50D0AF9130F1975B5978B71F958966F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:33:e1:23:76:e1:49:16:aa:ca:a3:c1:fb:33:
                    de:a9:6f:21:f8:1d:54:2b:64:29:7c:a7:0d:46:7e:
                    2c:6a:be:1a:56:91:cc:3e:92:c2:c3:94:fc:f2:b9:
                    5e:09:d9:d9:97:0d:22:59:59:74:97:4c:6c:00:76:
                    13:bb:e2:2f:c1:b2:fd:c9:44:dd:14:de:56:ac:ba:
                    c2:00:a6:45:05:a7:2c:d0:e4:34:f5:d4:b6:3a:17:
                    2d:7d:f4:d6:2b:36:32:36:f4:89:d4:59:ab:75:3d:
                    3b:2b:38:aa:b1:9b:b0:b0:f7:72:57:ed:63:32:d0:
                    45:39:1a:83:1b:35:22:ab:17:9b:94:3e:b7:80:85:
                    ef:a1:b5:42:0f:28:42:4a:7c:b0:d4:8a:aa:37:fd:
                    fd:17:b7:d8:44:ab:24:eb:6a:ec:c6:47:92:8a:06:
                    28:68:c9:50:74:62:83:9d:5a:ff:aa:43:d3:7a:f6:
                    85:1c:b1:c3:77:4e:7e:98:66:22:ef:dd:54:ab:0b:
                    b0:4f:d9:d7:62:2c:47:52:96:e4:75:12:86:6b:f3:
                    f7:fc:3f:a6:d5:10:07:03:f2:0b:c6:04:00:fb:5e:
                    ad:09:7a:90:a0:f1:b3:1d:28:55:3a:9c:66:2d:6f:
                    72:67:50:40:c7:2d:f1:3b:5f:7a:9b:db:9b:31:7f:
                    4f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:C9:39:2A:F5:0D:0A:F9:13:0F:19:75:B5:97:8B:71:F9:58:96:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/45C9392AF50D0AF9130F1975B5978B71F958966F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.140.0/22
                IPv6:
                  2804:747c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270984

    Signature Algorithm: sha256WithRSAEncryption
         86:b2:58:6a:ee:2d:eb:1f:c0:ba:72:1a:21:b8:7a:2c:c9:43:
         eb:dd:7d:e5:2a:af:c0:c1:28:a1:e0:94:f9:d2:d7:3c:6e:3b:
         f8:e8:73:e3:cb:99:bb:aa:3d:30:c4:b3:85:3e:17:2e:38:82:
         e5:1b:b3:bf:fd:e6:9b:47:a2:b5:cb:66:fa:5a:53:84:c5:9f:
         89:01:18:12:e1:0c:1f:93:63:22:70:ae:98:b6:5d:90:bd:31:
         da:6a:e0:26:b8:21:3b:fb:34:e1:46:78:3a:a5:de:00:e5:7c:
         00:ac:e8:3e:ec:f3:c1:62:dc:16:3e:29:b9:30:8c:d3:d1:51:
         70:db:65:82:00:9d:13:81:02:cb:be:cc:39:78:96:d8:ea:95:
         8f:38:c1:1b:fe:76:cb:ac:14:f9:d7:0d:cc:ff:70:ef:60:02:
         9e:ab:bd:f7:7f:91:2f:a4:9b:e1:20:2c:9e:76:01:a5:43:30:
         42:03:a0:c5:e1:d8:f7:bd:8c:c2:5d:85:74:85:a9:6f:5f:01:
         aa:45:02:6f:49:93:8e:ee:e0:18:cd:85:c9:38:43:24:83:08:
         cb:25:a7:2b:23:5c:dd:d8:7e:c8:3d:79:97:ba:e1:7a:79:c8:
         61:e2:70:61:3b:6f:ca:ec:a7:31:9a:c5:02:79:39:b1:d8:7a:
         04:8d:c6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org