Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/70933D44E981FE4AD73F82CBF756039B2175CBBA.cer
File:                     70933D44E981FE4AD73F82CBF756039B2175CBBA.cer (raw, json)
Hash identifier:          wHkvJ1QXu38tN5vw7VPySamFk6eCBWD0o6pF2SsM+90=
Subject key identifier:   70:93:3D:44:E9:81:FE:4A:D7:3F:82:CB:F7:56:03:9B:21:75:CB:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01C52636C83F7AD55F3CDC5CE078C55E7CD4498E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/0/70933D44E981FE4AD73F82CBF756039B2175CBBA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 07:12:03 +0000
Certificate not after:    Wed 25 Sep 2024 07:17:03 +0000
Subordinate resources:    AS: 267183
                          IP: 45.231.20.0/22
                          IP: 2804:496c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:c5:26:36:c8:3f:7a:d5:5f:3c:dc:5c:e0:78:c5:5e:7c:d4:49:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 07:12:03 2023 GMT
            Not After : Sep 25 07:17:03 2024 GMT
        Subject: CN=70933D44E981FE4AD73F82CBF756039B2175CBBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:0f:94:e0:0a:72:d8:d3:87:e3:df:c3:50:
                    ae:89:92:a0:05:80:a2:2c:fb:58:ed:49:ed:c5:f8:
                    fb:10:2c:d1:1f:4a:58:b8:66:f5:1e:cc:6f:2f:0a:
                    3c:9a:75:c3:6d:0c:d0:b8:16:16:a1:08:da:cd:d8:
                    60:a5:ff:9f:f5:ca:5f:cb:37:7e:c7:0e:32:be:ba:
                    5c:2d:e9:78:94:25:36:c4:22:b0:47:9b:32:e5:eb:
                    3e:fe:69:0b:87:f5:11:1d:96:55:b9:3c:1d:e8:d9:
                    9d:27:70:51:b5:69:09:f2:ad:c7:73:bf:6c:10:6d:
                    85:2d:24:db:fe:3c:71:01:86:ae:ed:f5:ed:d5:83:
                    bf:a8:57:6a:0c:b9:33:a6:71:ca:0f:c7:7e:1f:e5:
                    6a:41:55:78:df:57:b9:d6:6c:38:f9:a7:5b:06:36:
                    2d:d3:da:dd:08:c6:0c:d4:22:bb:75:87:7f:ec:b0:
                    83:f3:5e:36:4a:e1:d3:ed:29:b9:29:f1:90:50:e6:
                    ca:81:bc:de:89:12:a1:cb:76:56:8c:00:46:0f:02:
                    bf:75:1e:ef:79:f0:d4:55:fb:30:32:27:02:de:1f:
                    d7:6d:2c:51:eb:b1:cf:ad:70:14:ae:dd:08:bc:c0:
                    75:a2:8b:8c:77:bf:52:de:b0:53:cf:ac:e9:6b:e3:
                    d6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:93:3D:44:E9:81:FE:4A:D7:3F:82:CB:F7:56:03:9B:21:75:CB:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AwMMpEUndd1kW3mEGHQ87qQ3yfDAcWPjn1zPkGos1uxu/0/70933D44E981FE4AD73F82CBF756039B2175CBBA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.20.0/22
                IPv6:
                  2804:496c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267183

    Signature Algorithm: sha256WithRSAEncryption
         16:ae:b7:61:94:26:24:ac:ee:91:b7:f2:2d:65:0b:99:2b:02:
         85:26:25:dc:19:c2:1d:f7:25:9b:88:d6:24:b8:fe:17:92:b9:
         9c:28:84:70:a9:0a:a5:78:09:07:16:db:a6:24:83:85:87:44:
         72:70:76:33:3f:31:f7:b9:b2:f9:56:12:cf:fc:e8:ee:fd:c8:
         d8:2c:34:4f:c8:d1:8b:6d:76:6d:65:0e:23:b8:e0:7a:cc:76:
         f2:64:51:4f:cc:0f:45:a8:cf:15:c4:40:bf:32:63:85:ea:cb:
         b9:ca:67:e4:d4:7b:ec:29:15:eb:85:af:cf:62:7d:3f:60:01:
         79:38:2a:bd:ce:06:61:ea:5a:e1:f5:30:5d:68:c3:fe:e6:7d:
         db:6f:f7:77:9f:68:fd:29:21:f5:f0:52:c1:a1:c4:d7:c2:66:
         3d:27:63:0d:a1:94:8e:ee:d3:36:a0:05:d0:38:97:78:af:70:
         4c:c1:90:c2:b6:02:a5:bb:81:61:af:60:3a:8f:46:b2:e7:4d:
         df:05:f3:00:ed:00:bb:21:05:6d:13:67:7e:68:26:f7:40:62:
         b1:ba:3b:38:1a:b5:b5:f9:aa:62:20:9e:62:b3:89:b0:b9:34:
         2c:7a:47:58:a6:a0:5c:46:e7:bc:35:4b:90:6b:16:b1:3a:39:
         d0:15:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org