Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/45E9E748FA23E0B32B8866766DD8E684BEFA7670.cer
File:                     45E9E748FA23E0B32B8866766DD8E684BEFA7670.cer (raw, json)
Hash identifier:          sghMgIHHiOqaA/1ynZm6N+yQEQRcOeiLRr5y1DfoE+c=
Subject key identifier:   45:E9:E7:48:FA:23:E0:B3:2B:88:66:76:6D:D8:E6:84:BE:FA:76:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       14CB8A6F757AC2BE03A646DD003331851EA4E7AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/45E9E748FA23E0B32B8866766DD8E684BEFA7670.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Aug 2023 15:00:22 +0000
Certificate not after:    Wed 28 Aug 2024 15:05:22 +0000
Subordinate resources:    AS: 265198
                          IP: 167.250.28.0/22
                          IP: 170.233.228.0/22
                          IP: 2804:2c24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:cb:8a:6f:75:7a:c2:be:03:a6:46:dd:00:33:31:85:1e:a4:e7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 30 15:00:22 2023 GMT
            Not After : Aug 28 15:05:22 2024 GMT
        Subject: CN=45E9E748FA23E0B32B8866766DD8E684BEFA7670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a0:ab:67:ad:72:91:e9:f7:90:c8:bc:fc:2e:
                    39:0e:3c:68:bb:1e:4c:17:7d:aa:51:17:ee:82:9a:
                    08:97:b9:8a:fd:54:b0:8a:e1:36:4e:f0:7d:05:2b:
                    2f:f4:47:0a:3e:4b:4c:78:55:aa:58:65:87:bf:64:
                    2e:a7:63:92:4b:e4:56:4b:12:b1:64:c6:4b:ac:e5:
                    2a:e9:76:25:4f:0a:ee:d6:1f:dc:dd:bb:2c:11:b9:
                    b5:e5:57:c1:ae:74:24:a6:6d:00:15:38:14:fb:cb:
                    75:25:7c:47:d4:1f:7e:5d:7d:b7:6a:c3:fa:45:30:
                    2c:42:21:3c:b5:34:cb:18:0d:c7:db:f7:5a:d9:a3:
                    44:6b:2c:b8:18:b9:6d:2f:e3:21:15:17:85:ad:f1:
                    26:d7:4b:ba:d6:0e:f3:58:ef:87:b6:2c:9a:98:6f:
                    e1:f7:38:75:4c:04:fd:d3:b3:34:6c:1f:2a:cc:16:
                    4a:dd:ce:75:52:73:e5:39:e5:70:d6:bd:23:dd:19:
                    34:3f:86:a8:8f:fe:89:c0:25:f9:27:4f:7c:9b:61:
                    8d:40:48:cb:bf:15:cf:c2:19:01:45:ff:58:61:a2:
                    6c:35:d3:64:63:7a:4e:88:b1:2d:f7:42:dd:81:d0:
                    b8:bd:c7:f4:c4:51:b3:d2:39:6b:ac:76:bc:08:50:
                    60:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:E9:E7:48:FA:23:E0:B3:2B:88:66:76:6D:D8:E6:84:BE:FA:76:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ayJTmdpMcycQEuVqeEZ5ufF1ikeKFqUMScWPsxMzf3e/0/45E9E748FA23E0B32B8866766DD8E684BEFA7670.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.28.0/22
                  170.233.228.0/22
                IPv6:
                  2804:2c24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265198

    Signature Algorithm: sha256WithRSAEncryption
         36:59:bd:1f:b0:7b:a3:0c:6a:88:65:5a:4e:68:1e:ed:83:3d:
         ea:75:48:73:0c:d3:c7:71:0c:e6:5a:d2:8c:d0:40:47:26:cd:
         88:f2:0a:b3:70:0e:f6:b7:a9:d7:58:76:08:af:8b:e2:c2:af:
         81:54:6d:4d:6c:d8:62:45:77:8a:9c:26:7d:6e:e4:02:63:a5:
         97:be:60:a5:b1:18:df:a9:cc:57:8a:3d:7c:b6:23:50:8a:10:
         8c:86:a7:a3:32:a0:93:fc:12:e1:9f:93:ad:df:9f:f9:83:be:
         94:31:31:56:e8:87:c4:28:b9:92:5d:aa:6a:2e:31:b4:05:96:
         23:43:c5:bc:53:c2:a9:a8:49:e7:d2:0a:a8:72:b0:3a:18:a2:
         07:ca:6b:e6:d1:cf:b1:f7:60:b2:ad:e1:87:4a:3f:1e:2c:20:
         86:66:fe:ec:7e:5a:4d:11:6f:37:36:9e:98:2b:b3:89:05:4f:
         6c:4a:01:d2:15:7c:3d:7d:65:81:cd:c2:a4:ea:d7:c9:e9:66:
         6f:d7:d7:65:51:da:09:58:8d:23:a6:60:8c:50:f6:49:19:13:
         3d:7f:ff:c4:e8:a9:ee:3f:87:ae:b2:3f:88:3f:91:1e:23:6a:
         ea:1c:f5:df:74:3f:3c:e5:aa:26:2c:e5:85:f7:56:23:5f:53:
         7e:50:e3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org