Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer
File:                     69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.cer (raw, json)
Hash identifier:          hBA/CEnowha1VH9q13+D46UKjn65PEckhus0ZZUIOTQ=
Subject key identifier:   69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       79A408B8B88759E92B868F6C474AC51074DFECDB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 31 Mar 2023 16:27:06 +0000
Certificate not after:    Fri 29 Mar 2024 16:32:06 +0000
Subordinate resources:    AS: 270584
                          IP: 187.94.4.0/22
                          IP: 2804:6e40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a4:08:b8:b8:87:59:e9:2b:86:8f:6c:47:4a:c5:10:74:df:ec:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 31 16:27:06 2023 GMT
            Not After : Mar 29 16:32:06 2024 GMT
        Subject: CN=69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:75:c9:c8:36:72:e9:17:f0:ee:3a:e1:98:76:
                    a0:26:14:60:14:cd:6c:e9:07:d8:29:b3:36:c9:d4:
                    02:ca:51:fd:17:3a:8c:34:b1:46:51:f6:59:00:e7:
                    41:76:96:8c:28:b6:15:dd:2e:a9:8e:d3:b2:4b:53:
                    55:a2:19:5b:49:1c:56:f8:86:ef:cb:71:aa:6b:eb:
                    4a:fe:52:d4:6a:4f:d2:62:00:87:74:a2:f1:bf:60:
                    7f:d1:54:e3:62:c1:3e:ee:30:e1:fb:7d:fa:9d:33:
                    9c:30:e6:b0:da:ca:2a:78:9d:c3:b4:88:eb:fd:88:
                    49:de:45:17:7d:65:2b:02:84:c7:c8:c5:0a:34:08:
                    0e:89:70:15:ff:2e:47:13:d1:d2:66:7c:bb:88:3b:
                    59:bc:c3:83:f5:71:fe:79:9d:12:62:59:84:86:eb:
                    7a:60:16:4f:b1:cb:c9:3a:8b:d9:89:bd:d1:33:94:
                    2c:cd:8e:18:3e:2d:87:0f:94:e9:83:9f:78:43:c3:
                    72:2b:34:ea:53:c5:8e:01:b2:cc:95:bb:7c:26:50:
                    d3:52:5a:c1:35:4c:7a:04:17:57:82:2c:8f:18:5b:
                    f1:c3:33:87:74:96:a3:49:6f:c2:78:ae:a2:74:91:
                    00:eb:5d:84:d6:54:31:3a:d4:97:3a:71:e1:bd:64:
                    03:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:AE:EE:56:7B:07:BF:EF:FE:BA:67:EA:5A:87:2A:67:AE:28:A9:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/nafc1DLob81eak9vq4q6njMjLBaVGp4UdENtBbnpEnK/0/69AEEE567B07BFEFFEBA67EA5A872A67AE28A9C7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.94.4.0/22
                IPv6:
                  2804:6e40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270584

    Signature Algorithm: sha256WithRSAEncryption
         ab:2f:cd:2e:ef:4f:f4:4f:25:81:6e:48:40:b2:e9:fe:e2:c2:
         0a:50:df:6d:a2:bf:9d:d3:b6:b5:a0:ff:2f:0c:7e:19:30:98:
         ef:c3:34:c0:35:47:9e:f1:75:89:1f:53:27:a2:33:0c:60:b8:
         c5:de:fe:83:4b:f1:99:5e:ae:bd:9c:98:cb:f6:f5:ea:18:7a:
         7d:82:77:ce:cf:46:3c:5b:b7:50:26:2b:a0:20:72:45:fc:d7:
         fb:7f:2d:b2:d9:1b:24:21:cb:21:38:af:37:ee:fe:22:0d:26:
         17:4d:73:ab:ef:3a:8c:ce:7a:7b:f2:b2:db:c9:af:eb:72:ce:
         02:8d:cb:cc:f3:52:4d:a5:08:bb:af:f2:b2:49:ec:0d:fc:ad:
         61:f9:20:82:fc:2d:5f:3c:ec:64:8a:6d:ff:bc:6d:ee:5e:37:
         08:16:8a:33:0b:ae:e2:fe:e4:cb:73:25:d8:70:ab:fe:68:b0:
         6f:f2:6a:f6:8d:84:e3:10:f4:3d:e6:c3:2e:cb:c9:8d:9f:f3:
         db:88:4c:d6:1b:84:1e:37:d3:0e:ab:45:d6:97:af:aa:8a:41:
         74:43:81:6d:3c:b3:49:4a:63:1b:9d:4d:60:39:e4:56:15:86:
         14:bd:f0:7d:21:66:05:36:fe:63:72:49:01:81:0e:b4:8d:50:
         76:90:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org