Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/85148194E7412878BCCDE25660F9052CF17D2FB1.cer
File:                     85148194E7412878BCCDE25660F9052CF17D2FB1.cer (raw, json)
Hash identifier:          u8kV3gKnlhLAuezdWQ87mivUV4X41hbpKOrqVuu7/Eg=
Subject key identifier:   85:14:81:94:E7:41:28:78:BC:CD:E2:56:60:F9:05:2C:F1:7D:2F:B1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50C33C2A00D2D413E1A599EAB767867B9600D6E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/85148194E7412878BCCDE25660F9052CF17D2FB1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 21 Aug 2023 12:53:38 +0000
Certificate not after:    Mon 19 Aug 2024 12:58:38 +0000
Subordinate resources:    AS: 269606
                          IP: 45.190.0.0/22
                          IP: 2804:6724::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c3:3c:2a:00:d2:d4:13:e1:a5:99:ea:b7:67:86:7b:96:00:d6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 21 12:53:38 2023 GMT
            Not After : Aug 19 12:58:38 2024 GMT
        Subject: CN=85148194E7412878BCCDE25660F9052CF17D2FB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:1c:d9:f6:db:57:54:e8:ff:2f:64:d4:4a:
                    a7:14:c5:ed:a4:4d:04:ba:8f:94:ba:eb:f3:ed:73:
                    5f:f9:54:71:57:d2:67:b9:d4:23:b1:ef:f2:03:76:
                    87:87:62:60:74:be:c9:c0:1f:1d:15:88:95:7d:44:
                    f8:d9:8b:7a:e3:29:22:0f:16:60:63:b2:88:20:e5:
                    04:c7:b7:68:5d:e9:83:b1:fd:cf:23:91:ae:c9:39:
                    b0:5e:6c:73:36:ae:e9:be:86:3e:b3:82:e4:83:93:
                    23:71:2d:8c:26:df:78:5d:5e:58:a2:30:a3:71:b5:
                    d4:a4:b8:b3:aa:18:28:e9:c7:57:57:9f:4f:fa:72:
                    80:19:f9:fb:a7:9c:83:82:d6:72:fc:4e:3c:04:46:
                    5b:61:e8:bf:23:99:24:79:b5:ce:8d:3e:18:75:5c:
                    b1:b4:63:ea:47:3f:3b:a3:5a:18:bb:7c:bf:19:e9:
                    e8:08:10:2b:b0:c0:3a:20:bb:5a:43:0b:14:8d:d5:
                    71:fb:17:14:32:80:72:f1:40:65:79:e8:be:08:b1:
                    ce:14:28:00:61:e2:c9:79:9a:9e:51:b3:c4:34:c2:
                    5c:d4:ef:b2:e1:e0:36:c0:86:a8:53:e2:39:03:3b:
                    87:c1:74:ce:7e:5a:3c:f4:20:30:1d:ac:3d:fe:6d:
                    56:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:14:81:94:E7:41:28:78:BC:CD:E2:56:60:F9:05:2C:F1:7D:2F:B1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/85148194E7412878BCCDE25660F9052CF17D2FB1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.0.0/22
                IPv6:
                  2804:6724::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269606

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:ff:e1:bd:2d:13:71:96:89:85:6b:fc:0a:ef:f0:aa:54:
         8c:d9:f8:58:0a:9a:1a:46:2f:c3:5c:7a:21:06:f2:53:a4:21:
         f5:32:0d:67:bc:68:96:b0:62:4f:1e:a7:ea:c6:f0:42:86:4c:
         a7:a7:b1:89:e3:11:72:8c:6b:06:a6:01:00:ca:5e:d1:bf:ab:
         f4:f6:6e:b3:5b:f8:16:28:16:8a:6d:50:49:86:5e:7e:d1:44:
         6b:bc:17:36:fd:2c:7f:fc:e9:65:ba:fe:28:7b:d8:a8:9e:f1:
         3e:e9:96:2f:fe:31:aa:a9:50:a7:79:ce:be:74:23:43:e3:67:
         88:af:d3:d2:fe:8d:cc:93:9e:8c:1a:74:7d:80:15:33:8b:aa:
         8a:94:40:1a:1f:e1:f1:69:5c:48:55:a9:6a:ec:e3:6d:dd:ac:
         71:bd:40:66:3f:d8:69:61:3e:f5:e2:ac:3b:e5:b6:52:ab:96:
         df:a7:22:1c:09:4d:eb:a2:a2:b0:a2:e7:21:94:f3:4b:c8:7c:
         09:2e:1e:31:83:9b:c8:63:8b:4f:76:79:40:95:58:10:57:8c:
         d6:20:8a:14:da:c3:63:00:e9:89:ce:b6:f3:1c:e3:0e:ae:75:
         b4:86:c5:27:e6:23:cb:0a:66:e7:e2:ed:c7:3a:b8:9d:3c:7e:
         66:dc:0c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org