Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/468AA0B9BA37A8EC74BE3783037D02D193C5AB22.cer
File:                     468AA0B9BA37A8EC74BE3783037D02D193C5AB22.cer (raw, json)
Hash identifier:          aX4CzQXL4SqgY6baBaiDS8CcSUUqYUhkoX/RF2dFjQA=
Subject key identifier:   46:8A:A0:B9:BA:37:A8:EC:74:BE:37:83:03:7D:02:D1:93:C5:AB:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F27C2851B5C44C16B1FF5D016D3AE74256488EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/468AA0B9BA37A8EC74BE3783037D02D193C5AB22.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 11:55:55 +0000
Certificate not after:    Mon 16 Dec 2024 12:00:55 +0000
Subordinate resources:    AS: 268935
                          IP: 45.176.64.0/22
                          IP: 2804:5cdc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:27:c2:85:1b:5c:44:c1:6b:1f:f5:d0:16:d3:ae:74:25:64:88:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 11:55:55 2023 GMT
            Not After : Dec 16 12:00:55 2024 GMT
        Subject: CN=468AA0B9BA37A8EC74BE3783037D02D193C5AB22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dd:0a:df:8a:26:32:c9:96:cf:a7:fc:73:ee:
                    cf:3e:48:b5:e5:77:f7:5c:cc:88:86:45:14:3a:84:
                    6e:e2:a5:48:b9:6d:28:15:12:64:e8:b5:94:f8:29:
                    b3:42:ab:ca:97:82:51:dc:77:d9:92:4b:34:ee:46:
                    ac:b3:d7:31:58:15:ba:6b:a5:5a:9b:b8:cb:06:a9:
                    14:8b:64:1b:0d:8b:30:49:33:46:8c:e0:ca:0b:bc:
                    77:3b:6d:81:8b:fd:e2:1a:2e:83:16:03:d5:6f:35:
                    c5:e9:84:01:8f:11:95:cb:45:90:eb:2f:b4:bd:f1:
                    a8:d9:69:12:c8:30:57:87:57:14:96:c2:31:fe:cb:
                    ab:1c:5f:ce:35:eb:14:3c:58:74:e4:b9:fc:bd:92:
                    1d:15:97:83:4b:98:05:bd:1e:7c:26:4d:91:9f:27:
                    70:96:82:5a:3e:4a:0a:40:22:ba:81:0e:a7:6f:d9:
                    e0:e1:34:2f:f1:9f:a0:76:c2:ea:4c:3e:2c:4d:52:
                    46:40:a5:d3:2f:46:3d:8d:a4:b6:a1:de:6a:94:cb:
                    cf:87:aa:66:83:45:5f:5a:27:af:f8:cc:83:ce:94:
                    64:b1:eb:47:03:af:de:e5:c9:8e:cb:5b:7d:e6:0c:
                    95:e5:89:07:29:cd:0a:e6:8b:0b:e3:2e:83:ab:07:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:8A:A0:B9:BA:37:A8:EC:74:BE:37:83:03:7D:02:D1:93:C5:AB:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/468AA0B9BA37A8EC74BE3783037D02D193C5AB22.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.64.0/22
                IPv6:
                  2804:5cdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268935

    Signature Algorithm: sha256WithRSAEncryption
         a0:77:6e:55:38:48:9b:08:ae:82:66:6f:b8:fd:9c:e5:5b:c4:
         b1:6c:b9:d3:8c:25:9f:b3:ad:0d:5e:bc:8c:cb:87:f8:7b:71:
         e5:e1:ca:4f:d5:36:7d:fe:78:13:c9:af:22:b1:64:4c:69:da:
         ec:eb:99:f1:36:dc:2c:f5:9b:a1:35:9c:a5:d2:71:81:52:5e:
         e8:cf:b0:90:d0:02:ef:10:c8:47:66:20:ec:e2:e7:73:52:a0:
         9c:03:9b:36:41:fb:35:65:9a:3f:e8:aa:03:da:fd:b6:83:29:
         51:d6:f3:90:12:ad:a1:e8:28:d9:51:d2:3b:12:53:08:4b:de:
         04:7a:62:84:47:da:99:d1:9b:b5:b0:54:5a:ac:d2:30:62:96:
         54:9d:2d:c6:77:96:b9:34:be:ce:d8:7d:83:83:c5:55:53:bb:
         17:01:3b:e3:20:a3:94:6a:63:36:4e:82:3b:ce:a6:d0:07:df:
         b7:fc:dd:12:58:83:ec:a5:61:bc:44:55:3c:7e:bc:67:7d:92:
         68:f8:9a:ba:a0:6e:37:c0:5f:9d:6b:8c:5c:02:1e:bd:93:41:
         dc:ad:4e:91:82:a2:a6:62:92:da:68:e8:77:f7:bc:2e:26:2c:
         32:fb:90:88:ee:81:3c:df:ac:bb:ff:8d:d0:6b:3c:8f:af:13:
         39:e5:ef:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org