Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer
File:                     70D798B697E2DABE76F292588CBE1B2FBEB22C9E.cer (raw, json)
Hash identifier:          bIiaV5FALgdEJUX1ED1xLwAULj90pUTHUftd1sYdxKc=
Subject key identifier:   70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B75ED0763757E98A221F5FBBC51A691A05EFD21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 12:59:23 +0000
Certificate not after:    Thu 20 Feb 2025 13:04:23 +0000
Subordinate resources:    AS: 268373
                          IP: 45.239.172.0/22
                          IP: 2804:502c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:75:ed:07:63:75:7e:98:a2:21:f5:fb:bc:51:a6:91:a0:5e:fd:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 12:59:23 2024 GMT
            Not After : Feb 20 13:04:23 2025 GMT
        Subject: CN=70D798B697E2DABE76F292588CBE1B2FBEB22C9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5a:be:ca:a8:53:a4:b1:a7:77:d0:3c:f6:35:
                    3c:23:65:76:c8:c9:d9:5e:21:b5:8d:70:3e:f6:41:
                    78:2e:c0:68:c8:fb:06:9c:a8:ed:1e:0c:59:80:fc:
                    d2:f8:e1:7f:2e:f1:56:4e:15:d8:79:4a:a4:23:75:
                    dd:a5:fd:ff:0c:e1:a4:02:dd:80:c1:2b:de:e7:d8:
                    e3:33:0e:72:fe:5d:d2:50:2b:fc:35:a3:b5:ce:11:
                    3b:18:42:6d:b7:69:fa:f5:59:88:19:a0:7e:4e:93:
                    e6:b6:f6:c0:ff:32:01:9a:c9:8f:9e:76:29:88:38:
                    b8:df:4a:99:41:ec:c8:d6:4d:72:37:99:5a:ac:12:
                    e6:db:a5:f6:03:5d:4c:4f:18:48:33:00:74:cc:87:
                    7e:8c:b6:19:96:42:2e:74:a2:70:94:3b:aa:6a:08:
                    92:41:f0:5d:fa:5d:65:c5:2b:10:7f:bd:c9:88:56:
                    21:31:c4:c4:1d:b4:8d:9a:66:c3:28:c6:08:b7:09:
                    48:43:8e:1d:75:a8:27:b1:c8:88:bb:f2:f3:dc:03:
                    61:5a:79:8e:4c:77:bd:f8:39:a4:e1:44:9f:4e:0e:
                    b9:50:db:8f:e9:9a:9d:18:84:83:28:04:bb:d0:e0:
                    c3:ef:87:96:0b:11:cd:41:10:4f:de:b5:fb:f8:b0:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                70:D7:98:B6:97:E2:DA:BE:76:F2:92:58:8C:BE:1B:2F:BE:B2:2C:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4AryoyJ34nGGGcfE1WnGCEciUck8Rdh1gX2AuFFiDtv4/0/70D798B697E2DABE76F292588CBE1B2FBEB22C9E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.172.0/22
                IPv6:
                  2804:502c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268373

    Signature Algorithm: sha256WithRSAEncryption
         64:d0:53:96:c8:93:13:32:02:0d:5e:07:d6:56:65:ee:93:ae:
         79:6e:2e:49:f3:b7:df:9b:55:40:ea:df:f0:9a:d7:ed:cd:a3:
         39:d8:9f:c0:8d:06:2f:f6:cb:a2:c6:ae:b0:37:1a:0a:03:58:
         64:5f:9d:68:88:70:39:96:d3:30:00:0f:41:9d:d1:c7:50:95:
         a9:d7:64:be:07:6f:9b:16:09:d3:fa:e7:6f:2c:17:eb:d8:c0:
         97:67:81:1c:9f:14:71:c8:90:8a:fa:16:e7:94:dd:59:2a:22:
         a6:9c:d5:93:8b:69:bd:7f:2f:ba:5c:5d:41:f7:96:3d:8a:2d:
         f8:91:05:9c:22:7e:7c:0d:3c:16:e6:af:6e:e3:e5:e4:16:32:
         9b:72:fd:6b:bc:9a:d4:57:8f:61:e4:fb:61:df:55:f9:8e:c6:
         8b:c2:df:f6:15:ac:9b:46:4e:b7:ff:3c:7c:2d:96:a0:65:6b:
         7c:31:57:5d:4a:6d:fb:21:ab:d5:a2:94:10:6d:5f:ab:2d:cd:
         7a:aa:ee:47:c9:04:4a:11:2d:1c:65:d4:9e:56:3a:ec:65:d5:
         5a:ac:bc:2a:64:b3:55:1d:fa:09:09:5b:3f:46:08:4e:78:41:
         be:c1:14:24:c0:4f:c3:b4:6f:e9:06:2b:75:00:a8:38:5c:b3:
         31:01:73:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org