Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/85318E38F0022CA01B9801C5C2C525A6337F70C3.cer
File:                     85318E38F0022CA01B9801C5C2C525A6337F70C3.cer (raw, json)
Hash identifier:          5uccfMzWn7WXtlCb+3iA6kJAZIqWxlX8w3uJQ5mhpzo=
Subject key identifier:   85:31:8E:38:F0:02:2C:A0:1B:98:01:C5:C2:C5:25:A6:33:7F:70:C3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59980B4B2EB9F1E3640F2ED70FCC8D039F64764F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/0/85318E38F0022CA01B9801C5C2C525A6337F70C3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Nov 2023 13:13:16 +0000
Certificate not after:    Fri 08 Nov 2024 13:18:16 +0000
Subordinate resources:    AS: 269022
                          IP: 45.178.144.0/22
                          IP: 2804:5e44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:98:0b:4b:2e:b9:f1:e3:64:0f:2e:d7:0f:cc:8d:03:9f:64:76:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 13:13:16 2023 GMT
            Not After : Nov  8 13:18:16 2024 GMT
        Subject: CN=85318E38F0022CA01B9801C5C2C525A6337F70C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:45:8f:bc:60:fe:bc:1c:12:55:ff:c0:ed:cc:
                    22:d6:2a:61:13:3a:75:1a:55:e3:1f:30:75:ac:3d:
                    9a:e0:d1:03:fb:a8:44:f7:6b:b5:11:02:5b:36:dd:
                    9f:c0:03:50:99:ab:da:fa:a3:d3:42:7c:fa:dd:be:
                    b6:a1:5c:3f:92:36:8a:c2:bc:a5:ce:af:3f:8c:0a:
                    9b:d1:91:66:ce:09:43:9e:3d:c2:c5:f7:2c:d2:c9:
                    0b:26:5c:ef:dc:42:58:3e:55:c8:5f:a1:48:73:d1:
                    32:5f:81:dd:7d:a4:45:b0:78:51:8d:02:f3:4c:18:
                    2e:f5:99:71:7e:50:ed:c5:14:b2:6c:c2:a2:f8:81:
                    3b:cd:61:08:83:29:d8:62:a6:be:4c:58:48:ed:44:
                    4e:97:c1:51:33:55:44:7f:83:1b:9e:58:24:e9:67:
                    f7:61:7a:6c:40:c2:3f:20:f1:ba:fb:e3:82:66:e4:
                    fe:f4:61:08:00:63:40:bc:f2:b8:aa:7b:08:c3:d1:
                    18:71:ca:d7:e7:3c:88:37:9b:69:f8:5f:27:43:57:
                    02:e7:30:c0:59:91:a6:57:e1:82:30:dc:6d:54:ad:
                    d8:60:0e:31:39:45:f7:17:c9:55:f3:d3:5c:e6:1c:
                    93:8e:ad:39:5c:d0:88:e7:d3:99:77:2a:9f:e8:a0:
                    4a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:31:8E:38:F0:02:2C:A0:1B:98:01:C5:C2:C5:25:A6:33:7F:70:C3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/0/85318E38F0022CA01B9801C5C2C525A6337F70C3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.144.0/22
                IPv6:
                  2804:5e44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269022

    Signature Algorithm: sha256WithRSAEncryption
         8b:cb:30:58:81:6f:e3:74:48:5b:d0:08:ae:25:69:1b:ce:72:
         e3:9f:81:66:45:52:65:73:10:8c:e0:22:fd:46:74:29:69:a5:
         f1:ee:6c:2b:6f:73:7c:a7:49:f8:bd:69:3a:29:c7:50:85:d5:
         79:d4:29:94:36:89:5c:41:d9:b3:3e:0d:de:6b:1b:b1:ff:42:
         5a:7c:35:d4:9c:9a:44:2a:2b:7f:ef:0e:05:11:ed:47:2b:c9:
         62:e9:ae:d7:6e:af:19:e8:07:2a:0c:87:1d:5e:f1:de:3f:5c:
         62:83:0d:91:16:82:5a:b5:54:3c:6e:95:e4:3b:74:a1:d6:2b:
         8d:0c:8f:69:e6:b6:d3:2e:f5:9f:82:fb:75:d1:03:6b:c4:50:
         de:11:41:bc:6c:72:6f:fc:6a:6e:5d:63:1b:3f:de:de:4a:fa:
         e9:be:56:40:df:82:ec:9e:83:8d:7f:96:16:c9:51:17:ab:84:
         cd:85:62:c6:ac:91:b8:95:13:2c:d7:94:34:3e:ab:68:7b:67:
         56:90:f9:30:5e:69:b6:66:96:c8:12:4d:38:93:4f:6a:1a:52:
         fc:34:37:61:ca:05:12:cc:a2:37:4d:54:40:dd:3a:f7:11:7e:
         e3:8d:01:e9:0d:a7:99:b8:1e:52:ce:2a:e9:c1:64:5e:8f:48:
         ba:01:cb:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org