Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/84A3176B70CE0A568E886C4722ECEDE04FDFAE45.cer
File:                     84A3176B70CE0A568E886C4722ECEDE04FDFAE45.cer (raw, json)
Hash identifier:          0LjWzqvgtjah1/DC4vdxlvY4p7uLeA/BN24nWx6W2hM=
Subject key identifier:   84:A3:17:6B:70:CE:0A:56:8E:88:6C:47:22:EC:ED:E0:4F:DF:AE:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       256BD27CAFAB9988563880FFBE73C4520BDD898A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/84A3176B70CE0A568E886C4722ECEDE04FDFAE45.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 20:17:49 +0000
Certificate not after:    Wed 18 Sep 2024 20:22:49 +0000
Subordinate resources:    AS: 268440
                          IP: 45.161.20.0/22
                          IP: 2804:5140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6b:d2:7c:af:ab:99:88:56:38:80:ff:be:73:c4:52:0b:dd:89:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 20:17:49 2023 GMT
            Not After : Sep 18 20:22:49 2024 GMT
        Subject: CN=84A3176B70CE0A568E886C4722ECEDE04FDFAE45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5a:01:92:88:f5:24:63:60:5f:fb:44:50:9b:
                    5c:ac:18:06:1f:a3:01:df:ff:79:5d:0e:3a:e7:16:
                    c6:9b:57:e0:78:d4:a1:17:55:33:3b:01:58:99:1b:
                    2f:a3:bb:95:1f:7f:0b:7e:9f:80:98:31:db:3c:af:
                    29:a3:5b:82:1e:e7:6c:ef:71:0f:80:7a:25:7c:30:
                    b0:53:b2:5e:24:02:2d:6d:d4:37:f0:de:0f:02:28:
                    71:83:76:5f:c5:a7:20:0e:ff:3f:e5:32:ff:b3:4f:
                    b6:bb:27:84:75:1c:ab:32:f7:5c:87:a7:10:c5:8e:
                    1c:00:01:99:b6:90:0f:80:14:39:d8:ca:49:37:cf:
                    78:39:14:9e:dc:5e:ad:45:f3:2e:c0:3a:3f:6b:12:
                    80:99:24:e3:ee:9c:ee:f2:0c:5a:5a:82:42:2d:12:
                    fc:6c:ca:99:b0:10:8c:97:1a:e5:51:a3:6d:ba:52:
                    e3:17:9e:df:8f:49:d5:69:a9:6b:dc:8d:19:3e:20:
                    9b:23:5d:57:a3:03:c8:47:e0:c2:18:ec:aa:6a:2d:
                    2c:b6:53:a7:b2:82:b4:1a:b6:88:1e:c5:33:11:1b:
                    21:0b:4c:a1:9d:67:c5:ba:77:68:87:02:48:1e:bc:
                    12:c7:8e:7b:11:67:d5:68:30:6f:83:80:7f:e4:e6:
                    86:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:A3:17:6B:70:CE:0A:56:8E:88:6C:47:22:EC:ED:E0:4F:DF:AE:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/84A3176B70CE0A568E886C4722ECEDE04FDFAE45.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.20.0/22
                IPv6:
                  2804:5140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268440

    Signature Algorithm: sha256WithRSAEncryption
         17:b8:9d:b7:50:62:3c:60:88:f4:bb:04:ae:60:b6:20:98:b6:
         e5:39:76:cf:84:69:39:0e:49:58:54:22:44:84:94:c0:7a:27:
         c3:0b:cd:c5:bf:66:bb:66:0e:8c:eb:45:58:3a:c9:32:e0:4a:
         98:2f:04:c0:af:72:55:45:bd:40:60:14:e5:1d:2c:64:b0:14:
         6b:33:e8:07:78:11:f8:99:cd:ba:4b:66:ca:45:4c:ac:6b:40:
         e2:63:e7:17:b5:9e:4f:52:ff:f0:57:83:09:5a:da:a9:e4:07:
         3d:38:7b:d5:6a:ae:0b:c6:99:21:bc:63:85:eb:8b:f9:6b:a2:
         cc:3c:f7:f5:cc:48:8d:00:99:38:5f:53:91:68:ba:af:e5:bf:
         67:a4:97:dc:86:2c:1c:da:b7:8e:0e:c2:9b:87:15:98:34:07:
         9a:bf:3f:2a:c3:38:ab:7a:6f:e4:11:3f:b6:b7:98:0d:67:f1:
         94:38:66:37:04:83:91:c0:0c:46:f2:7e:8a:58:b2:43:a9:a2:
         55:00:75:ed:4e:25:66:5d:14:b4:44:f5:37:12:98:68:bb:9d:
         31:14:98:83:92:a3:68:70:b4:27:1b:81:b7:fa:ea:f4:cf:60:
         35:3a:14:59:66:a3:e5:79:32:4e:f5:2d:f6:ea:c7:e5:64:a4:
         a7:49:d7:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org