Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/82337F52BCD667E487FB8E99A59915EF7746BFAF.cer
File:                     82337F52BCD667E487FB8E99A59915EF7746BFAF.cer (raw, json)
Hash identifier:          IhSwlvc0D1Syr6B5zDuRiT9gBy0Rni1RjJGu+CUUV9U=
Subject key identifier:   82:33:7F:52:BC:D6:67:E4:87:FB:8E:99:A5:99:15:EF:77:46:BF:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3087D6C2544B6C680DBA61C4F537053B447638D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/0/82337F52BCD667E487FB8E99A59915EF7746BFAF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:47 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:47 +0000
Subordinate resources:    AS: 268879
                          IP: 45.175.24.0/22
                          IP: 2804:5bf4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:87:d6:c2:54:4b:6c:68:0d:ba:61:c4:f5:37:05:3b:44:76:38:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:47 2024 GMT
            Not After : Mar 31 11:03:47 2025 GMT
        Subject: CN=82337F52BCD667E487FB8E99A59915EF7746BFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:9a:2f:29:a8:bb:00:bc:a4:25:d3:6a:ff:
                    67:ae:ce:f1:4d:85:58:26:91:b8:57:89:31:62:b3:
                    20:3e:96:3a:51:28:d3:83:f9:fe:79:f8:78:55:85:
                    91:9a:65:9b:a1:cb:a1:45:13:7f:bc:23:03:e3:79:
                    6b:54:10:b5:71:d8:cd:8d:07:ee:74:16:05:0b:8b:
                    9f:3c:30:d9:ce:c1:6a:3a:12:64:3b:d4:c6:03:e4:
                    6d:9d:57:05:92:03:be:e3:6f:42:66:93:51:e6:7f:
                    67:a8:38:64:63:88:6b:43:28:40:2b:1e:58:06:25:
                    fe:4e:d5:9d:a2:68:df:01:ca:3a:1b:1f:a6:25:09:
                    6f:61:70:fd:dc:53:4c:e1:f1:d1:1f:3e:e9:7b:54:
                    a4:b0:6e:9f:d0:67:89:63:bc:32:98:d8:47:6c:65:
                    8d:45:8b:3a:7f:e1:17:3e:a7:d8:20:91:0c:10:16:
                    be:97:61:54:27:58:11:4c:92:17:04:db:c2:14:53:
                    8e:e6:6f:aa:2b:67:3e:5e:58:dc:ba:86:65:d7:59:
                    9d:56:a2:4f:00:d4:23:30:f2:cd:a1:24:db:31:ec:
                    33:97:44:2f:af:e2:68:77:d1:f1:df:ca:57:ad:4c:
                    13:70:3b:5b:c8:5f:10:b6:1f:95:8b:a6:54:fa:68:
                    87:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:33:7F:52:BC:D6:67:E4:87:FB:8E:99:A5:99:15:EF:77:46:BF:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/0/82337F52BCD667E487FB8E99A59915EF7746BFAF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.24.0/22
                IPv6:
                  2804:5bf4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268879

    Signature Algorithm: sha256WithRSAEncryption
         93:15:d9:9f:48:c6:f8:7a:88:93:48:f8:5e:39:e4:90:98:57:
         59:ec:a0:33:f9:fa:fc:86:2d:48:af:36:92:4d:33:06:b5:6a:
         ef:d6:26:83:95:37:14:ed:17:46:9d:69:61:09:dc:77:46:5f:
         cd:e8:87:1c:fa:56:7d:90:14:2d:0e:0d:75:3c:f2:80:c4:dc:
         30:7c:d8:60:ca:1f:ed:c5:23:e4:30:ed:b1:44:df:d6:03:ac:
         1a:45:0a:71:b3:36:85:88:0f:c8:7a:5c:e4:d1:53:4d:c1:f5:
         3d:42:cb:f2:9f:88:fe:fe:53:d3:7a:a2:af:ac:80:e2:94:d6:
         61:c5:bb:97:01:94:da:fd:8f:84:00:e4:d9:39:2c:4e:cf:c2:
         31:b1:ad:60:4c:55:7b:0a:cf:b2:c3:24:95:c7:af:38:db:91:
         f2:e4:35:3f:ae:53:16:9a:b1:ba:b1:b3:36:00:30:15:ba:3e:
         ec:99:59:53:e5:19:a8:6c:83:66:e8:8d:8e:77:74:8b:59:c0:
         69:64:6c:77:55:91:44:a5:7a:82:6f:76:0a:95:04:ea:1c:6d:
         7b:71:ed:39:ef:f5:b5:06:11:97:6b:02:bb:e5:46:71:e5:62:
         68:56:f5:61:61:f0:84:00:56:1f:08:f8:de:c1:5d:1f:af:0b:
         e0:80:45:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:40 2024 by rpki-client on console-ams.rpki-client.org