Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer
File:                     86806D9BD12A677347ED32D286F9803B86B05A33.cer (raw, json)
Hash identifier:          15vGnpTVn0kyroP3/vBhEXbG+zIG2Y/ovfICL7J+9rU=
Subject key identifier:   86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C71947032B87FBCFD738ED6960F629B4924F677
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/86806D9BD12A677347ED32D286F9803B86B05A33.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 22:18:34 +0000
Certificate not after:    Mon 03 Mar 2025 22:23:34 +0000
Subordinate resources:    AS: 268183
                          IP: 45.171.24.0/22
                          IP: 45.186.92.0/22
                          IP: 2804:5954::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:71:94:70:32:b8:7f:bc:fd:73:8e:d6:96:0f:62:9b:49:24:f6:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 22:18:34 2024 GMT
            Not After : Mar  3 22:23:34 2025 GMT
        Subject: CN=86806D9BD12A677347ED32D286F9803B86B05A33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:12:db:3a:05:31:ad:4d:f3:64:fd:44:40:
                    85:dc:ca:03:f5:8a:56:f0:4d:b4:a0:0a:63:1a:18:
                    4a:21:67:d1:74:81:75:96:d7:39:be:66:c8:80:5b:
                    c2:c1:0b:a2:0a:8b:07:8f:9f:a1:5f:b3:0d:ca:b9:
                    ff:b4:9f:94:59:c4:e7:c3:1b:ef:5e:51:54:87:14:
                    df:86:10:3c:6c:76:6c:47:8e:f5:8d:77:fd:50:26:
                    c3:10:45:4c:c2:0a:26:a1:5b:8f:a3:b5:58:ce:63:
                    e8:74:e6:24:5b:aa:ca:62:08:90:d1:62:71:e2:05:
                    61:e4:df:8b:e9:97:95:55:e8:46:3b:25:8d:bb:cf:
                    51:3e:35:40:6e:36:f6:1c:8e:f5:0f:30:cb:88:f1:
                    b2:3d:af:1f:c7:cb:fa:46:0d:1b:73:cd:5d:7e:cd:
                    83:63:79:4c:86:72:93:05:40:28:dd:85:0a:e0:a8:
                    ba:2d:04:5a:53:41:53:8d:68:6b:58:c5:86:01:7a:
                    69:3e:80:20:ac:b1:f4:c1:53:cb:00:42:dd:0c:c9:
                    03:0d:a8:79:7d:79:84:a9:12:cb:8a:9e:80:95:dc:
                    f8:49:75:71:c0:40:66:38:aa:2b:58:20:c0:04:cf:
                    06:17:df:3a:3a:75:d2:69:60:40:92:75:5e:ab:b3:
                    70:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/86806D9BD12A677347ED32D286F9803B86B05A33.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.24.0/22
                  45.186.92.0/22
                IPv6:
                  2804:5954::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268183

    Signature Algorithm: sha256WithRSAEncryption
         0c:7a:a4:1a:8f:23:48:af:6e:c3:9a:cb:be:1c:f2:f0:b4:ba:
         53:05:a3:26:c4:f9:5d:9f:2a:aa:a5:b3:28:a4:66:7c:51:fd:
         9b:a9:d5:8f:0b:07:87:9e:09:73:d4:78:a9:0a:44:dc:fb:17:
         18:54:31:79:5d:f3:2b:da:4d:42:0c:37:c8:b9:99:6e:c8:13:
         2b:57:08:0e:64:e7:2a:85:fc:e8:7c:73:17:9e:66:eb:40:bf:
         25:14:69:99:ff:08:44:75:4c:1e:ab:c1:e5:8d:4c:a5:4f:73:
         d5:dd:e6:5f:62:05:36:6d:44:97:f6:c8:84:a9:bb:d9:46:93:
         99:db:08:2f:78:b4:b1:67:f6:17:2b:ff:fa:3d:af:c2:3d:a0:
         d0:dc:54:5a:1c:4d:ca:54:f4:9d:82:1e:c8:ee:b6:6c:c3:ff:
         ce:5e:6d:16:23:fe:38:f6:44:a3:40:18:7c:91:b4:ef:24:43:
         0c:a0:23:77:bd:97:d9:b2:dd:da:f9:b4:aa:a8:5b:7f:33:b4:
         52:df:0a:0d:e8:14:5f:ef:88:fd:3a:05:30:ad:5c:2f:fc:5a:
         f9:77:79:e2:09:5f:13:fa:1e:34:b6:d1:62:ca:e9:cb:7f:34:
         d0:88:df:d4:d0:3e:c1:5c:70:d3:0b:32:35:3f:8e:6b:3c:66:
         c3:6f:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org