Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer
File:                     83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.cer (raw, json)
Hash identifier:          +f8vX+qvLFTYdUApA6iSqIzoA6HuWFKViKe6bM9JfeY=
Subject key identifier:   83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       426CA5387D961EF204A773710CFDE75ED35A303B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Nov 2023 14:02:01 +0000
Certificate not after:    Tue 26 Nov 2024 14:07:01 +0000
Subordinate resources:    AS: 262478
                          IP: 177.47.240.0/20
                          IP: 2804:a78::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6c:a5:38:7d:96:1e:f2:04:a7:73:71:0c:fd:e7:5e:d3:5a:30:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 28 14:02:01 2023 GMT
            Not After : Nov 26 14:07:01 2024 GMT
        Subject: CN=83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ef:89:b7:65:4c:87:aa:3e:58:af:9a:aa:d1:
                    ff:40:54:45:4c:23:68:bb:07:c8:cc:03:d6:63:33:
                    c2:13:56:bd:e8:5b:67:f7:2f:ab:45:fc:cf:24:43:
                    17:ec:d0:ee:4c:5d:39:d1:5c:c6:ff:be:2b:6c:02:
                    4a:77:af:cc:00:d3:36:36:8a:f4:71:b6:65:0e:01:
                    10:2a:e1:15:4a:37:97:96:a5:e1:ac:1c:c5:16:53:
                    3c:d7:e7:c6:a1:ec:b5:45:5d:cd:68:4f:49:05:14:
                    79:09:a2:d1:a4:e4:bf:df:eb:75:48:c1:13:ed:bb:
                    ee:d7:62:1a:f0:46:d7:ca:b7:eb:7e:e5:8b:be:60:
                    47:d3:ce:cf:29:a8:88:aa:02:27:14:4e:b6:ae:53:
                    eb:46:25:1e:6d:fc:28:66:91:2b:b3:04:df:ba:1b:
                    c2:e9:e9:1c:32:36:6b:81:22:da:41:06:4c:89:f8:
                    e8:38:87:65:76:e8:2f:b0:ab:cf:7f:bd:1a:a1:f3:
                    fb:64:29:ba:06:7e:d4:b2:3b:13:fd:51:71:18:92:
                    6d:81:8e:66:d6:92:3d:9f:7b:90:aa:42:26:50:ac:
                    ba:8f:79:8a:12:85:8f:9d:c6:8e:d8:af:d2:52:ec:
                    8d:36:b2:a1:d3:26:64:18:6a:f4:f1:54:ca:c7:e1:
                    b2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:AA:14:54:A4:47:D7:E8:AC:E4:B7:50:2A:4E:FF:D9:E7:89:F8:E4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EWWxNTZdu4jP94Sd67pdSkfLCdwNwUwy51z3AxskiK8A/0/83AA1454A447D7E8ACE4B7502A4EFFD9E789F8E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.47.240.0/20
                IPv6:
                  2804:a78::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262478

    Signature Algorithm: sha256WithRSAEncryption
         b1:5d:86:cf:52:ec:c2:1d:c4:79:f4:d2:21:1d:79:af:2c:11:
         c6:77:70:cc:28:e7:18:59:cc:bf:b2:5d:e0:7d:82:3e:bc:c9:
         77:aa:3b:66:89:5c:56:9d:3b:d7:d6:be:c7:7e:5c:f1:0c:93:
         04:73:12:be:85:49:b1:18:ca:a2:5e:bc:f5:47:cc:e4:2a:1a:
         b2:1a:fc:5d:fd:85:19:41:7a:ac:3f:15:51:d7:5d:f5:0e:c2:
         03:29:33:74:97:0f:a3:fc:2c:69:90:3a:82:b0:f0:70:78:a9:
         59:21:52:34:62:a8:78:d0:49:e2:f2:04:56:aa:cf:30:e4:31:
         81:90:09:96:da:61:4d:24:46:b3:ef:d4:41:34:f4:ed:c8:23:
         5f:d4:c1:78:11:71:73:63:82:ff:b9:87:97:de:76:7b:6e:0c:
         af:0b:a0:eb:69:dc:fa:6b:b3:66:8b:d1:33:cd:2e:b7:94:79:
         a1:b0:9b:80:4a:e3:7b:13:f6:2f:14:3d:e1:7b:c1:26:78:14:
         ff:c6:7d:5c:ef:9c:96:21:6c:39:c6:fd:23:7f:c2:b6:2f:34:
         0f:5a:80:ec:d7:78:37:d2:95:86:4f:c2:9a:27:74:0b:3a:1a:
         98:37:a1:78:cf:81:27:09:87:92:10:5f:c8:84:91:02:a7:01:
         24:16:66:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:40 2024 by rpki-client on console-ams.rpki-client.org