Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/45D754D10F29B9A2487478D837839CB8E8A62D47.cer
File:                     45D754D10F29B9A2487478D837839CB8E8A62D47.cer (raw, json)
Hash identifier:          leewz+rgATomRZ7PRWYEPg2o97Hj2tw6G9iuJER8WAE=
Subject key identifier:   45:D7:54:D1:0F:29:B9:A2:48:74:78:D8:37:83:9C:B8:E8:A6:2D:47
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A81ED00C8EFA3898D0713CDCB0D6A7F81CD95C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/45D754D10F29B9A2487478D837839CB8E8A62D47.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 16:53:38 +0000
Certificate not after:    Wed 04 Dec 2024 16:58:38 +0000
Subordinate resources:    AS: 266309
                          IP: 170.79.176.0/22
                          IP: 2804:35d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:81:ed:00:c8:ef:a3:89:8d:07:13:cd:cb:0d:6a:7f:81:cd:95:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 16:53:38 2023 GMT
            Not After : Dec  4 16:58:38 2024 GMT
        Subject: CN=45D754D10F29B9A2487478D837839CB8E8A62D47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:b7:40:fd:60:33:84:1d:65:53:cd:f1:02:
                    16:dd:82:5a:d9:9a:14:12:88:a4:38:42:b0:80:d2:
                    02:7d:46:0c:84:91:64:e0:88:0b:19:b1:1f:04:15:
                    74:f8:06:4d:3d:22:fe:ec:0e:0e:81:83:52:30:29:
                    7f:b4:4f:83:c8:17:6c:05:77:f5:3d:64:28:30:43:
                    b5:20:df:53:bb:2d:1a:bc:41:39:38:75:86:55:43:
                    b2:cd:08:e1:de:73:33:9e:96:aa:60:28:4c:46:b2:
                    99:5b:d0:b3:a8:4b:26:fd:6b:c0:74:06:6a:1f:cc:
                    fd:f8:87:19:96:71:e4:6f:00:6c:ff:58:e3:48:39:
                    da:63:1e:21:a1:8b:6c:e7:41:c2:a1:c4:ec:26:97:
                    83:7d:ec:df:c5:74:bf:7d:28:f3:af:aa:31:fe:11:
                    78:d0:57:f0:83:4b:41:93:5a:31:bb:08:81:ed:b2:
                    1f:ca:fb:48:42:20:c6:25:a0:48:3c:a8:6e:af:b6:
                    4a:dc:27:67:f4:4c:83:4d:d3:78:67:0d:47:78:03:
                    80:d4:94:55:e3:39:dc:c9:bb:77:3a:8d:fb:a5:f1:
                    0f:99:29:57:22:74:d9:26:d6:b7:0d:86:08:42:0e:
                    09:3a:47:0f:b3:5a:88:c3:99:3b:d4:fd:a7:05:33:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:D7:54:D1:0F:29:B9:A2:48:74:78:D8:37:83:9C:B8:E8:A6:2D:47
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/45D754D10F29B9A2487478D837839CB8E8A62D47.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.176.0/22
                IPv6:
                  2804:35d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266309

    Signature Algorithm: sha256WithRSAEncryption
         17:f1:a9:72:bf:ea:38:d8:ce:86:37:90:0f:02:1c:95:c5:9f:
         ee:d6:3a:05:99:88:f4:a9:39:b6:2c:16:21:9a:78:d8:91:de:
         0d:51:55:52:66:99:9a:d3:52:f4:fd:67:49:2b:1f:7a:79:50:
         d7:4b:55:2d:6e:ac:1b:4b:24:ee:09:40:c6:d3:4a:02:1b:b8:
         c1:87:13:8d:fe:13:e0:f9:22:93:ba:1e:1d:3d:59:65:47:e0:
         96:69:79:b1:49:c4:06:0f:36:cb:c9:09:6c:6a:b2:7b:e4:b6:
         a8:c1:ff:fb:c5:5c:c4:10:ab:fb:fa:71:bf:7c:df:10:42:98:
         99:36:b6:5e:c3:a2:60:16:4e:94:22:5e:ad:ad:8f:b4:25:e6:
         45:47:19:64:7d:9a:43:bb:e4:dd:c0:1e:6e:2b:f4:53:cd:a4:
         f9:6f:16:3c:74:b6:ee:05:75:ba:a7:5b:ce:ec:b8:72:dc:56:
         62:16:74:71:ec:76:63:f0:51:b2:3f:55:89:8a:9c:bf:ba:dd:
         64:50:c7:90:ca:0f:ed:49:bc:ab:c1:f0:99:83:83:44:d1:62:
         59:30:12:b0:e9:72:9e:22:c8:b3:fc:21:82:6c:ef:c6:b8:b8:
         f9:4e:e9:6e:e1:72:49:5b:0b:a6:b9:85:ca:55:68:7a:a1:3a:
         6a:79:90:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org