Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.cer
File:                     5302D22E25022C2AC70F9FFE36DEA4859889F443.cer (raw, json)
Hash identifier:          CfWNwUVIUr4s7jDQNO0jx53af5OKRwP056XAJl1tel8=
Subject key identifier:   53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       23728E8FD38BF535BFEF8B9F7A2BD2584D80921A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:24 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:24 +0000
Subordinate resources:    AS: 267328
                          IP: 45.233.152.0/22
                          IP: 2804:4bc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:72:8e:8f:d3:8b:f5:35:bf:ef:8b:9f:7a:2b:d2:58:4d:80:92:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:24 2024 GMT
            Not After : Mar 31 11:03:24 2025 GMT
        Subject: CN=5302D22E25022C2AC70F9FFE36DEA4859889F443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:a6:d6:51:04:d0:0a:6a:73:75:5a:90:63:
                    4a:04:c2:5d:ee:ea:81:94:6e:ad:05:2a:bf:ae:f1:
                    6e:f5:e1:98:52:59:a9:99:90:ca:9a:c4:46:ab:9c:
                    f0:5f:bc:21:86:90:4f:4a:e7:e1:52:af:f4:84:71:
                    1f:8b:18:ab:3f:fa:37:97:c5:db:64:60:20:59:0d:
                    2b:0f:05:36:65:eb:27:cc:d1:30:08:de:fe:c2:fa:
                    84:2a:95:f7:37:16:48:42:9d:43:3e:fc:75:59:5d:
                    42:1f:9c:9a:e6:f7:94:68:ff:3b:03:c3:57:0f:73:
                    73:e0:c8:cb:de:e4:31:8a:3f:0d:09:b8:d8:8a:41:
                    eb:36:67:e7:bd:e4:35:0e:c2:c3:ba:35:00:ad:20:
                    fd:2f:83:42:6b:3b:9e:fa:fa:2b:7b:a3:47:a5:99:
                    a9:00:2c:b4:61:80:59:d5:cd:73:ec:94:31:e7:11:
                    94:9f:7b:ee:57:6d:e8:4d:1e:44:f6:8f:c7:53:db:
                    70:5d:58:12:83:c1:9f:4b:57:62:50:c6:5d:db:9b:
                    88:78:9e:b6:3c:df:3e:ad:f6:94:92:ad:01:a5:cf:
                    ce:e2:06:05:d4:cf:8e:b4:c4:d1:22:6e:29:ea:8b:
                    35:a5:66:63:82:a0:92:74:82:5d:f3:f6:91:42:5b:
                    98:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                53:02:D2:2E:25:02:2C:2A:C7:0F:9F:FE:36:DE:A4:85:98:89:F4:43
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DYZGbP8rfMJX9McLgSfCAL8YFSadEwsgH5ZPa2BhgAU/0/5302D22E25022C2AC70F9FFE36DEA4859889F443.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.152.0/22
                IPv6:
                  2804:4bc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267328

    Signature Algorithm: sha256WithRSAEncryption
         5e:6e:e6:94:83:1f:9b:fa:1e:36:42:9f:56:49:63:2e:42:d3:
         71:c6:89:38:35:f5:f5:6e:a1:0d:0a:bf:ab:7f:4b:dc:db:57:
         21:e7:78:b6:01:80:2b:a0:2f:92:26:55:61:d4:9d:f0:38:0e:
         12:65:b6:9f:95:2a:a6:0f:ae:d2:4a:d8:0e:70:9f:45:c0:74:
         55:3f:4f:77:fa:f0:ff:e9:65:9b:79:a7:7d:78:ce:57:56:75:
         e2:b5:a2:83:6f:02:85:6d:49:c1:6c:fa:f9:c0:1b:7b:4a:61:
         d7:2b:7b:61:c3:2d:7c:b5:74:3e:8c:67:63:31:a2:86:b2:5b:
         d9:c6:d3:b9:58:7f:ec:45:fe:53:b2:83:c0:ae:c5:cf:df:c1:
         a3:b1:9d:73:98:be:af:f7:59:08:c0:9f:b8:47:a5:07:8d:9e:
         b5:f5:e9:cb:67:94:c2:c3:a5:1a:2e:25:d9:4b:6e:ab:19:3a:
         89:fe:29:40:df:fd:01:b1:fa:f3:d9:92:e7:04:eb:63:6c:2f:
         cb:c5:6c:26:5c:86:83:c4:24:5d:7f:63:47:4a:1b:1e:6c:bd:
         3a:37:49:0d:d8:e2:34:58:96:90:4b:15:4c:d9:83:f7:45:bb:
         c6:e8:22:6d:fe:fc:83:99:6a:50:22:85:a2:36:3c:d4:b7:ce:
         e2:09:4b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org