Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.cer
File:                     48A2894AA5501C96F790A8A2BBFD27CDFD55659F.cer (raw, json)
Hash identifier:          9BcaXJoU9YQolf9SUkK4hCHhLXULwx2d/CERxs17zHI=
Subject key identifier:   48:A2:89:4A:A5:50:1C:96:F7:90:A8:A2:BB:FD:27:CD:FD:55:65:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       180AD77D29D93D978E54E30CA83C90CF6C987312
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 00:05:49 +0000
Certificate not after:    Wed 10 Jul 2024 00:10:49 +0000
Subordinate resources:    AS: 266388
                          IP: 170.80.156.0/22
                          IP: 2804:3714::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:0a:d7:7d:29:d9:3d:97:8e:54:e3:0c:a8:3c:90:cf:6c:98:73:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 00:05:49 2023 GMT
            Not After : Jul 10 00:10:49 2024 GMT
        Subject: CN=48A2894AA5501C96F790A8A2BBFD27CDFD55659F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e3:66:1b:ab:88:5a:c3:8d:f1:c7:15:04:ec:
                    d3:49:8f:5c:f5:57:c9:62:5f:2e:fc:0e:e5:e4:36:
                    17:95:c2:21:89:37:38:4b:3d:2b:40:17:5e:2f:d1:
                    eb:fa:9d:47:95:67:62:ce:ff:36:ec:a6:f3:42:8c:
                    fa:52:bc:8d:ef:ce:38:f7:ad:f2:2b:33:b7:0f:68:
                    28:75:ef:38:be:b9:e6:6e:4d:7c:e0:f6:53:0b:39:
                    64:db:ed:c7:c2:06:a7:59:d8:6b:f8:85:67:05:8e:
                    3a:27:f2:58:34:8f:88:8f:db:dd:09:40:1b:49:9e:
                    4e:fc:e7:40:70:de:2c:8c:74:75:aa:c4:3a:06:c1:
                    a4:85:5d:70:1d:64:77:18:48:69:de:60:aa:e6:f7:
                    09:09:53:26:e6:05:39:66:bf:0e:84:c0:24:85:12:
                    b6:f0:49:a7:43:74:8b:83:00:d8:f6:a0:81:bf:2b:
                    82:58:85:28:0f:86:14:fc:f7:a6:13:f0:65:30:e6:
                    ed:a8:28:9c:cc:c1:3c:b2:eb:fd:94:1d:86:bf:5f:
                    15:22:38:9c:46:c9:58:45:f1:88:38:81:b7:ae:13:
                    ea:ce:3c:f3:7d:e1:19:28:5d:74:87:12:b9:1f:5c:
                    e3:8b:14:06:35:6f:27:99:51:3d:d0:fc:ac:bc:26:
                    12:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:A2:89:4A:A5:50:1C:96:F7:90:A8:A2:BB:FD:27:CD:FD:55:65:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7xiPpnYEQa3DaQ3HnUYYW6V5YhSGZGuTP73CBw3Rwu7C/0/48A2894AA5501C96F790A8A2BBFD27CDFD55659F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.156.0/22
                IPv6:
                  2804:3714::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266388

    Signature Algorithm: sha256WithRSAEncryption
         10:6d:7a:31:68:69:a2:70:12:52:4d:72:2e:b6:5f:2b:e3:3e:
         8c:23:d0:d3:d4:21:28:89:b9:e7:32:10:7c:a0:5a:e3:9e:d5:
         16:29:df:a7:b9:e0:15:89:eb:bd:36:8e:8e:0a:2f:41:b7:ca:
         ed:eb:7d:d0:96:b8:1f:ce:f1:93:23:36:96:a0:a2:73:80:5b:
         30:77:72:ae:00:42:6f:88:7f:d1:00:6f:a8:38:53:a9:e0:97:
         4e:1b:fa:8a:43:1e:b2:d9:c8:77:ec:69:bb:9d:9f:4e:9b:dd:
         97:ad:c4:4d:bd:27:15:01:e0:5c:1d:57:e5:3b:60:ca:62:27:
         6d:23:2b:82:68:d5:0a:ab:01:3f:52:82:a7:86:16:ac:a9:90:
         98:1b:ef:17:1e:73:96:72:63:65:1a:f6:6b:5f:e1:40:2c:03:
         d5:92:14:95:f5:11:eb:2a:ad:24:71:94:ee:ca:af:e4:cd:8d:
         9b:06:f1:d3:fc:bb:24:1c:43:44:2d:ed:4d:8d:d3:ec:f1:82:
         61:f0:77:f9:81:77:28:3e:78:9e:cc:c5:c8:c2:d0:3a:f6:5f:
         7d:23:1b:89:a3:45:30:d4:b2:2e:94:fa:45:8e:b8:ac:f9:4d:
         10:3e:bc:41:69:a8:e5:9c:fb:23:41:6c:fe:57:aa:4b:25:18:
         75:f7:f5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org