Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.cer
File:                     8414455E5995EE7C674A31A6E51442E29CB60FB5.cer (raw, json)
Hash identifier:          G4XAOxVgDyPQDJazIuOHNYAPkGY1Do+z5tJ77r4fhRM=
Subject key identifier:   84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7330FDDC52F3C029C594285F484A49929D8B8B53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Nov 2023 17:47:54 +0000
Certificate not after:    Wed 20 Nov 2024 17:52:54 +0000
Subordinate resources:    AS: 268011
                          IP: 45.167.140.0/22
                          IP: 2804:5698::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:30:fd:dc:52:f3:c0:29:c5:94:28:5f:48:4a:49:92:9d:8b:8b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 22 17:47:54 2023 GMT
            Not After : Nov 20 17:52:54 2024 GMT
        Subject: CN=8414455E5995EE7C674A31A6E51442E29CB60FB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:84:7b:37:6d:65:68:00:41:38:0c:61:4b:
                    c1:e2:32:b4:b3:96:af:ad:ec:48:ff:3c:0b:2a:c3:
                    cb:a1:5d:8e:c4:c5:24:bf:3c:43:21:14:c4:9e:d0:
                    9e:a0:d7:99:2d:48:52:22:be:1d:d0:37:83:5b:cc:
                    cb:2c:c5:53:20:34:f1:5d:74:22:c1:fd:ee:76:fb:
                    34:07:18:0e:20:81:a5:af:32:d1:f7:b7:78:b4:9f:
                    6a:51:53:fa:81:e6:5f:51:fc:d3:33:9c:f3:aa:33:
                    6a:71:46:3c:ab:65:cd:2c:c2:32:55:7e:6b:1a:76:
                    df:7d:09:1c:76:af:2b:21:2f:fb:6a:d7:33:bb:3f:
                    3a:c5:0c:05:ae:a0:82:db:13:82:11:87:6b:d4:ec:
                    a3:b4:da:62:c6:a9:b9:8b:b8:df:24:fb:99:3a:f4:
                    09:1d:ad:9e:c1:61:a6:75:94:16:90:56:24:47:01:
                    1b:a4:66:7e:6a:9c:63:2f:ce:bd:ff:46:6d:3c:0d:
                    e5:7c:c5:58:c7:48:1d:3e:a8:33:7b:31:3c:2f:11:
                    47:bb:e0:f6:d9:15:7e:f9:97:00:65:20:91:22:f4:
                    28:10:94:fd:13:4c:29:c0:4d:a2:08:2d:74:16:60:
                    39:a1:4a:c5:2d:4a:78:1e:81:8e:f1:25:1c:0c:2e:
                    f2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:14:45:5E:59:95:EE:7C:67:4A:31:A6:E5:14:42:E2:9C:B6:0F:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/0/8414455E5995EE7C674A31A6E51442E29CB60FB5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.140.0/22
                IPv6:
                  2804:5698::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268011

    Signature Algorithm: sha256WithRSAEncryption
         5e:76:4a:7d:48:be:82:5a:48:0e:c7:47:08:15:4d:52:6b:1c:
         18:45:f5:e4:e5:8b:99:10:3e:23:bf:8d:17:d5:87:fd:62:2b:
         85:43:06:3d:be:5d:75:fc:1b:aa:0d:05:2f:86:e3:c0:a9:d2:
         46:05:4a:e5:bf:fa:e9:bd:3d:2a:e1:69:ab:f8:e0:d4:59:43:
         45:01:cf:62:cf:4a:ab:fd:07:c8:ba:e4:cb:dd:df:b5:91:ad:
         29:54:ee:da:ed:08:8e:2d:2d:ab:25:24:f0:3d:6d:7d:64:f7:
         52:b0:3e:ad:1a:79:ac:1d:b8:d4:1f:c2:ae:d4:31:38:7a:ed:
         a9:d2:9b:b7:97:ab:2a:23:ef:11:0c:f5:6a:4b:ab:b5:a4:71:
         a8:03:f5:e8:b7:85:d4:bc:45:cd:9e:ef:0b:8a:42:b2:36:a5:
         e2:f0:72:5c:9a:aa:eb:12:1b:84:20:4e:8f:f4:df:1a:db:51:
         c3:78:64:83:71:cd:9c:54:fb:8e:89:04:5f:ff:b3:a9:61:26:
         bb:1a:e0:66:ef:f2:1f:45:78:57:1e:07:a4:e9:0e:42:13:fe:
         bb:4d:05:07:94:7d:9e:55:9a:38:7e:13:3c:9c:91:09:17:6a:
         9a:aa:e9:57:c0:e2:a1:6c:7d:e5:1c:e3:49:21:27:b3:09:de:
         5a:47:05:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:40 2024 by rpki-client on console-ams.rpki-client.org