Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.cer
File:                     8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.cer (raw, json)
Hash identifier:          zfRaDO5FJpKTAtLNZTZ6lKTDQFZQPSeRjjH7Whffimk=
Subject key identifier:   83:45:A7:56:1C:0C:4A:73:A3:0F:B2:FE:B6:C9:A6:0A:4E:89:AB:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5CAB6753598F9F602F56FA10738A935E1621EE0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/0/8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 01:02:54 +0000
Certificate not after:    Tue 04 Feb 2025 01:07:54 +0000
Subordinate resources:    AS: 266169
                          IP: 45.6.188.0/22
                          IP: 2804:3bc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:ab:67:53:59:8f:9f:60:2f:56:fa:10:73:8a:93:5e:16:21:ee:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 01:02:54 2024 GMT
            Not After : Feb  4 01:07:54 2025 GMT
        Subject: CN=8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d2:dd:7c:dd:59:ab:fa:8a:ff:a8:51:0f:c6:
                    be:e6:39:07:0a:a0:53:de:89:1b:fc:cb:37:6e:14:
                    ec:c1:95:0e:2b:83:88:01:5c:d2:75:4c:f2:67:73:
                    a2:8b:c3:b2:6c:94:53:d3:d6:54:4d:16:43:d1:2a:
                    b9:84:86:97:c2:a2:e6:65:16:ff:e3:d9:39:bc:7c:
                    f8:59:b1:92:82:6c:c6:b6:02:2c:dd:a7:f1:92:01:
                    2b:86:be:9d:bc:05:01:08:3e:37:64:fd:ea:60:38:
                    07:98:e7:c2:3f:d3:ee:1c:e6:48:bc:dd:a4:a7:68:
                    8e:0e:86:dd:18:5c:a5:19:5e:5b:2b:83:61:36:9b:
                    87:53:17:fc:c8:7a:f5:21:65:63:f2:82:7a:b6:62:
                    6c:5c:4b:a7:0b:4c:b2:10:65:1b:5a:34:a7:ff:47:
                    6f:28:e1:9b:0b:90:2e:07:e3:2a:be:b7:c9:95:72:
                    f6:65:e6:62:70:6a:f4:31:a0:99:39:5d:80:33:9b:
                    8c:d6:e2:81:9a:cc:6a:7b:b1:e0:5a:da:94:b6:d2:
                    2f:94:a4:00:3c:3e:62:6f:6b:ee:72:55:38:a5:c5:
                    9c:7c:4c:7a:0d:88:d6:78:01:f2:5d:55:20:a0:ab:
                    a1:06:f8:f4:a2:18:95:5d:d6:0f:79:b5:a9:34:2e:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:45:A7:56:1C:0C:4A:73:A3:0F:B2:FE:B6:C9:A6:0A:4E:89:AB:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/0/8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.188.0/22
                IPv6:
                  2804:3bc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266169

    Signature Algorithm: sha256WithRSAEncryption
         5c:cc:b9:26:b7:bc:05:ef:15:ed:b3:94:7f:97:63:89:45:4b:
         fb:2d:5c:6a:52:f7:2f:00:a8:20:96:8c:17:85:19:6c:48:9e:
         02:75:67:d2:2c:8a:c8:7e:75:c0:e3:e5:b6:a0:7f:88:84:5a:
         0d:5b:04:c8:5a:6d:b9:2c:a1:34:b8:c2:54:e2:0c:51:e1:a8:
         6b:10:80:46:08:48:25:96:10:0f:d0:d6:ca:86:36:98:09:7f:
         49:b8:a6:cb:67:ec:0e:5c:34:10:dc:0d:c4:cd:35:ee:5d:0f:
         07:28:f5:ec:e3:8c:25:34:84:1d:3c:9b:b0:5b:b5:50:47:06:
         2b:60:44:70:d4:d3:da:d7:22:72:f4:32:40:45:30:1c:86:de:
         6a:ed:9e:98:85:da:7a:8b:45:8b:d3:13:3e:fb:f1:f3:5f:6b:
         de:67:6f:3b:51:a2:ae:38:66:a9:03:77:5b:c4:a6:73:4e:91:
         55:92:db:82:ac:ce:8e:5a:d1:4c:d4:80:85:a3:93:ca:7a:2e:
         c3:0c:1a:0d:f8:6d:5d:21:3c:65:e2:97:04:e7:be:09:b5:0a:
         db:2b:07:2a:a4:14:61:9e:15:29:c6:60:bc:4c:b0:86:44:b1:
         0a:e4:5e:c6:13:be:e2:f3:4b:21:12:d6:25:e7:47:83:75:2a:
         a2:29:d9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org