Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/69A7C404C08D66A11E0D263DBF92F8EC929839A9.cer
File:                     69A7C404C08D66A11E0D263DBF92F8EC929839A9.cer (raw, json)
Hash identifier:          VboaWCC5R6aGTfcLmpcFcBcD4LM/c4Tx5yUG+Y2nJrk=
Subject key identifier:   69:A7:C4:04:C0:8D:66:A1:1E:0D:26:3D:BF:92:F8:EC:92:98:39:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5378E14F23FBA65B68CBD4AFB92FC9AF820B4EE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/69A7C404C08D66A11E0D263DBF92F8EC929839A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 23:21:28 +0000
Certificate not after:    Tue 04 Mar 2025 23:26:28 +0000
Subordinate resources:    AS: 266644
                          IP: 128.201.180.0/22
                          IP: 2804:3f2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:78:e1:4f:23:fb:a6:5b:68:cb:d4:af:b9:2f:c9:af:82:0b:4e:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 23:21:28 2024 GMT
            Not After : Mar  4 23:26:28 2025 GMT
        Subject: CN=69A7C404C08D66A11E0D263DBF92F8EC929839A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:f8:f0:d9:5d:01:fb:bc:37:32:45:7e:1a:
                    10:13:6c:13:41:73:7d:ae:25:cc:24:31:04:a8:7c:
                    03:28:2f:ed:b4:ac:79:56:68:04:4b:5c:1a:95:d2:
                    1a:42:f9:ed:9a:01:47:22:a8:14:8e:7d:7a:b5:f5:
                    04:b9:11:e3:43:62:d1:2f:50:f9:cd:af:05:5c:77:
                    57:e2:89:cb:a0:f1:9e:28:16:8c:0a:32:1d:58:6c:
                    c1:63:7e:f5:f5:1f:dd:0d:33:f9:ae:9b:0c:eb:fc:
                    71:8a:59:fc:85:62:c7:5d:1b:e7:2b:c4:e4:f7:6f:
                    e9:9a:9e:c7:78:e4:bb:3e:17:63:a0:db:11:16:92:
                    b2:74:61:68:87:cd:47:9c:97:86:c8:4e:c7:1a:63:
                    56:0b:be:2c:03:fd:3a:40:27:0a:20:31:97:65:67:
                    9e:03:2a:f5:79:c1:fb:49:c7:05:8a:22:a6:c1:00:
                    21:00:00:45:77:34:60:af:ad:31:5d:73:ce:8c:b9:
                    b0:97:33:cf:e7:39:39:7a:b4:1e:35:75:8f:34:a2:
                    5c:2a:a8:94:69:91:0b:36:4a:bd:36:24:25:1f:e2:
                    60:9e:44:be:d6:a8:b6:74:3c:2d:49:2e:68:a6:cd:
                    b9:4e:e0:55:fd:51:31:e1:55:8a:c4:e9:c0:3b:aa:
                    65:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:A7:C4:04:C0:8D:66:A1:1E:0D:26:3D:BF:92:F8:EC:92:98:39:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Aj2X2CarFpe9yKdJnwN59pxddNaZpdzR96bt1L7ZgStG/0/69A7C404C08D66A11E0D263DBF92F8EC929839A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.180.0/22
                IPv6:
                  2804:3f2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266644

    Signature Algorithm: sha256WithRSAEncryption
         47:16:01:d7:40:00:84:80:ab:cc:cf:2a:bf:e7:32:c8:47:d2:
         1a:02:c2:c5:39:d5:d3:19:94:31:f5:62:e2:e6:d7:24:39:56:
         99:dc:64:2c:e7:c1:8b:8e:8d:55:69:6d:b5:57:72:18:13:9a:
         8e:23:48:d1:cc:76:37:2f:eb:1e:3c:bc:ea:d7:fe:bd:55:85:
         cc:51:ae:71:77:cc:1b:ad:89:0c:2a:2c:15:79:e2:74:a6:94:
         1e:15:d2:a9:e6:d8:f1:77:c6:34:1a:d8:b2:31:84:33:1b:1f:
         a7:19:bd:7f:e5:1d:d5:8c:63:6e:45:12:8c:ac:03:8a:5e:2c:
         4e:d2:30:a4:19:bd:0f:b7:a7:54:a8:ad:31:0f:49:07:85:80:
         eb:a6:b6:dc:a5:24:bb:0a:73:1b:91:e7:cd:55:98:e3:4f:29:
         d9:2d:fc:5c:85:13:74:3c:d3:e1:b5:7a:ec:08:b2:a5:03:c4:
         0f:53:50:0a:84:f7:79:3c:fc:44:a0:e4:fc:e0:61:5b:34:04:
         bb:c4:d9:df:4f:a1:48:d4:eb:08:70:27:90:ad:e5:b0:70:06:
         b3:ea:a5:55:ac:4b:e8:ab:10:84:34:1f:ed:24:a6:dc:04:e1:
         2b:a3:56:2c:69:3d:7b:d9:ea:0e:8d:3b:25:43:db:56:b9:1f:
         71:f5:9a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org