Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/471E90DD56CC7C081DD59ECB42865418844301A4.cer
File:                     471E90DD56CC7C081DD59ECB42865418844301A4.cer (raw, json)
Hash identifier:          0wfOR+wOETxgQq4SiqTnllA8gJdeWwPrriN0u4GrQnE=
Subject key identifier:   47:1E:90:DD:56:CC:7C:08:1D:D5:9E:CB:42:86:54:18:84:43:01:A4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5283D36B90D3C7026629F66D473759159890D334
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/471E90DD56CC7C081DD59ECB42865418844301A4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 17:54:26 +0000
Certificate not after:    Thu 20 Jul 2023 17:59:26 +0000
Subordinate resources:    AS: 265298
                          IP: 168.90.248.0/22
                          IP: 2804:2db4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:83:d3:6b:90:d3:c7:02:66:29:f6:6d:47:37:59:15:98:90:d3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 17:54:26 2022 GMT
            Not After : Jul 20 17:59:26 2023 GMT
        Subject: CN=471E90DD56CC7C081DD59ECB42865418844301A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e5:c0:a9:4c:3a:e4:e9:86:c2:74:97:18:ac:
                    c2:93:31:fd:b1:01:b2:a1:a0:e6:1f:1b:e4:14:54:
                    a0:43:13:93:8c:11:05:a3:9b:4d:51:0d:30:20:b2:
                    85:34:e0:f5:ff:d1:cf:0b:0f:6a:23:74:49:fb:62:
                    1e:0d:73:07:ff:86:c8:2f:ba:7c:89:19:e8:61:5e:
                    1e:7c:68:e0:ee:26:ce:a3:00:93:41:c6:df:ac:25:
                    b4:2c:22:71:40:89:b1:6a:21:0b:f5:ba:ed:50:98:
                    8c:f5:a6:c1:3e:f4:1f:ec:12:99:f8:39:2d:97:db:
                    77:b8:05:cc:2f:7b:c4:eb:dc:56:a4:d7:3b:c5:13:
                    02:2d:73:b3:14:12:09:f9:aa:b7:2c:b6:ae:e0:ca:
                    63:6c:36:20:d4:51:23:ae:dd:38:c1:19:fc:dd:9b:
                    bf:0d:4d:7f:ae:8b:5a:ca:58:99:8a:79:da:98:b4:
                    c7:e5:ab:b5:ea:9c:a7:05:b7:2b:2b:db:b5:84:bc:
                    2c:c4:69:c2:28:dc:65:1f:98:d7:ea:4c:91:e8:e3:
                    45:14:08:71:8a:ec:4b:fb:4c:9c:fb:70:2a:af:ac:
                    2c:3f:a7:bc:94:40:7c:5b:a6:33:cd:be:21:36:b2:
                    51:3b:c2:31:d8:02:f5:2c:d0:89:63:cb:7c:dc:28:
                    67:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:1E:90:DD:56:CC:7C:08:1D:D5:9E:CB:42:86:54:18:84:43:01:A4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/471E90DD56CC7C081DD59ECB42865418844301A4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.248.0/22
                IPv6:
                  2804:2db4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265298

    Signature Algorithm: sha256WithRSAEncryption
         75:0d:36:d5:26:f3:7b:c3:d7:64:64:e7:4d:f8:c9:e7:ea:06:
         39:7e:d5:bf:7f:bc:ca:ca:a1:76:4b:e8:df:0f:1e:74:cf:fa:
         35:85:51:71:a0:96:5c:57:5e:c5:d8:cc:99:96:c0:e9:83:b9:
         28:17:45:49:38:3e:ef:5f:1b:34:96:f3:53:67:b5:c6:43:21:
         74:7c:70:a3:d1:4d:c6:f2:84:9e:b9:5e:f2:c4:3c:da:88:6e:
         f0:b4:ab:58:1a:2e:0d:0e:97:6b:e9:c7:02:d2:1b:a3:92:84:
         3e:33:a4:8b:d0:a3:a8:c7:36:a1:8a:d7:48:51:2b:a4:9a:1d:
         48:eb:d2:ad:b9:83:b2:1e:d4:24:64:01:33:e4:b0:c7:b0:cc:
         08:4f:db:13:d2:60:99:41:9e:c2:7a:b5:79:80:b6:f8:b6:69:
         31:65:2b:d4:e2:09:3d:a2:b9:a7:17:d8:49:8c:c1:b2:0d:b8:
         8c:d1:5d:2f:96:39:5f:5b:e4:92:16:be:2f:13:9b:6d:84:7a:
         33:27:96:1e:9d:cc:a0:a9:f3:8f:c7:5a:9c:d3:76:69:2d:0a:
         f5:34:f3:39:07:46:96:6d:f4:81:d7:7b:e9:c5:28:71:0b:08:
         d1:9b:57:32:64:26:56:f3:6d:58:04:ea:fa:89:03:e3:9b:cd:
         65:f4:81:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org