Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/57AF2DD217BFC98BC90686B4E02C2581542C05C9.cer
File:                     57AF2DD217BFC98BC90686B4E02C2581542C05C9.cer (raw, json)
Hash identifier:          TvHqaGqv5NOeL1kHJrvMI3EVbQE9HHmjykKtoyqtt/M=
Subject key identifier:   57:AF:2D:D2:17:BF:C9:8B:C9:06:86:B4:E0:2C:25:81:54:2C:05:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B805752F929D8F3B69E82AF24B28A3DAF5C48DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/57AF2DD217BFC98BC90686B4E02C2581542C05C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Nov 2023 09:32:52 +0000
Certificate not after:    Wed 06 Nov 2024 09:37:52 +0000
Subordinate resources:    AS: 266556
                          IP: 160.238.228.0/22
                          IP: 2804:3dd4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:80:57:52:f9:29:d8:f3:b6:9e:82:af:24:b2:8a:3d:af:5c:48:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 09:32:52 2023 GMT
            Not After : Nov  6 09:37:52 2024 GMT
        Subject: CN=57AF2DD217BFC98BC90686B4E02C2581542C05C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cd:ec:98:61:d0:1e:fc:af:0f:66:f3:9a:f4:
                    86:6c:39:9b:54:52:cf:82:ef:18:71:b0:f3:40:23:
                    1f:a5:1d:7d:b4:dd:3f:48:c5:11:c4:ad:6a:4e:2b:
                    a1:88:ad:bd:ab:e9:d1:ca:00:03:8d:3f:d8:40:30:
                    54:fe:bd:3e:89:6b:8c:0f:b5:13:b8:b4:a0:9d:85:
                    42:11:1b:5f:17:2b:09:d1:b7:4c:e2:9b:eb:a4:42:
                    c4:ae:b3:e1:63:73:b2:da:0c:9c:c4:3a:be:61:f1:
                    f8:96:d8:b9:03:dc:73:91:e5:65:60:7f:fc:11:cf:
                    a5:a6:a4:6e:e6:3d:a8:b4:5b:5a:cc:64:8c:b4:4a:
                    9f:1e:da:ea:e6:84:db:77:86:cf:91:3d:60:3e:a7:
                    8e:25:f9:bc:5f:d0:0e:b7:82:45:50:d0:a3:ad:5e:
                    ba:8f:a8:6a:a7:fe:1e:ae:7c:36:ab:96:4c:bb:1d:
                    2b:cd:2b:4f:90:58:39:f3:2d:27:06:be:8b:78:63:
                    66:d1:88:98:46:30:4a:eb:67:11:ce:69:a2:f8:05:
                    9d:c4:81:af:0a:b2:8e:bc:18:73:91:b7:6e:35:62:
                    87:d3:a0:7a:eb:2d:21:cc:f2:78:a5:5d:84:0d:ad:
                    7a:b5:13:d5:82:2a:d9:39:b0:72:9c:9b:7b:35:c9:
                    5f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:AF:2D:D2:17:BF:C9:8B:C9:06:86:B4:E0:2C:25:81:54:2C:05:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ESTVpdiAp7TS8GnGVHyxzHsxadzJC9tXRAPwSz2x8Gr/0/57AF2DD217BFC98BC90686B4E02C2581542C05C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.228.0/22
                IPv6:
                  2804:3dd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266556

    Signature Algorithm: sha256WithRSAEncryption
         59:ca:a1:5d:bb:bf:86:f0:a7:f3:f1:b7:cd:45:51:1a:92:3a:
         63:6d:7e:15:a9:14:b4:3a:62:95:db:72:30:35:8b:fc:9b:6c:
         74:01:c4:b7:b7:47:19:78:a7:1b:ac:b5:96:2d:d0:61:f0:a4:
         9d:f0:d9:5e:1f:5e:63:b3:af:70:63:2f:29:d5:64:31:58:18:
         af:8c:fc:5e:f7:0a:9e:4d:3e:7a:49:fd:05:77:60:54:05:07:
         e1:57:97:be:bb:43:ef:75:2e:96:3a:d6:28:48:92:a8:63:ae:
         a2:b9:a7:02:4e:28:e3:c4:ba:b9:57:52:15:17:d5:dd:fc:dd:
         9e:27:c6:19:d0:57:e3:74:75:f7:ba:51:e4:b3:c5:78:14:0d:
         e6:81:c8:77:69:5d:54:98:f8:a6:15:fb:ea:b7:b9:70:c2:ec:
         15:8c:a3:65:f1:6b:cf:bf:62:92:ed:fc:93:eb:22:a7:e7:84:
         79:a5:f6:9a:f3:20:fc:79:89:be:b4:f6:b1:13:a1:41:67:46:
         98:66:20:a4:3b:96:6a:94:08:21:d9:ae:79:fc:e5:58:2b:b3:
         f8:d1:27:30:33:d0:55:bb:c4:fe:cc:d5:cf:74:93:30:98:13:
         85:08:5d:c1:43:e1:97:62:87:de:c5:13:f5:3a:4b:d2:1b:a5:
         54:7e:6d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org