Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.cer
File:                     890B378FA4B1BD7EED9F2745089E0F1EACEAA240.cer (raw, json)
Hash identifier:          rqxDFoRL8MLSgkAMa1/MMeWCnYfihu4fwMD4cwUURt0=
Subject key identifier:   89:0B:37:8F:A4:B1:BD:7E:ED:9F:27:45:08:9E:0F:1E:AC:EA:A2:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       66FB02A61BE964A3D8097C5FED117B7AB0EB85F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 18:26:13 +0000
Certificate not after:    Tue 21 Jan 2025 18:31:13 +0000
Subordinate resources:    AS: 264511
                          IP: 132.255.192.0/22
                          IP: 2804:20bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fb:02:a6:1b:e9:64:a3:d8:09:7c:5f:ed:11:7b:7a:b0:eb:85:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 18:26:13 2024 GMT
            Not After : Jan 21 18:31:13 2025 GMT
        Subject: CN=890B378FA4B1BD7EED9F2745089E0F1EACEAA240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e7:55:2b:dc:ff:b2:87:dc:a3:97:89:da:bb:
                    5e:a9:85:61:9e:79:b7:58:1f:c0:95:94:39:84:09:
                    a6:7d:a0:07:d8:12:cc:a9:2f:83:10:fd:73:eb:db:
                    c7:b4:b7:e0:f8:6c:84:51:da:ba:88:db:73:40:e9:
                    69:da:83:76:d6:c9:35:11:19:1e:a0:b8:d5:28:c0:
                    44:8e:bd:b4:a2:49:2e:1b:8a:4e:93:12:6f:c9:20:
                    ce:51:7e:61:15:6e:ec:cf:84:88:14:2a:79:9c:06:
                    b4:e8:1a:6d:73:19:32:4b:04:28:9e:c0:99:6e:7c:
                    b0:cd:56:dc:ce:71:ad:53:2d:e0:17:fd:dd:f1:e0:
                    24:5a:8c:5d:0a:01:13:39:ae:cb:6e:0b:cb:f2:28:
                    ee:a6:ad:1a:58:74:d9:f3:0d:b1:56:54:82:e0:e4:
                    06:d1:3f:a3:00:ef:3a:66:44:82:f0:e5:df:9e:e9:
                    a9:43:8f:af:cf:ce:64:39:75:a9:e5:58:da:47:0f:
                    2a:4d:13:c8:e4:10:8d:b4:15:f0:c9:be:34:b6:0a:
                    b1:ea:b1:bd:dd:c0:41:19:cd:57:9a:22:f8:23:65:
                    03:62:88:c6:4f:19:14:6a:de:22:90:82:b4:07:72:
                    ac:9a:c3:22:73:5a:60:9e:84:19:cc:da:71:2e:81:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:0B:37:8F:A4:B1:BD:7E:ED:9F:27:45:08:9E:0F:1E:AC:EA:A2:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.192.0/22
                IPv6:
                  2804:20bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264511

    Signature Algorithm: sha256WithRSAEncryption
         39:95:86:57:0a:d5:f4:11:9f:c2:6d:17:38:93:5d:68:30:42:
         a6:de:aa:a8:a9:ca:8e:3d:df:59:2d:62:84:07:4f:16:d8:16:
         54:28:cd:c4:c4:d8:fa:7e:c1:8d:c8:d7:73:2b:4c:03:da:03:
         4a:2c:3d:ce:cf:a8:75:fb:7b:dc:9f:db:5c:d1:3e:f1:22:b6:
         35:3c:ae:ff:03:ff:7b:82:7a:c3:a5:58:eb:a6:c6:75:96:43:
         4a:df:44:85:ba:8b:fd:c3:08:85:2e:83:e3:3d:17:d0:a6:d0:
         1e:f3:39:d6:d3:c8:a1:c4:6c:96:46:d9:96:eb:d5:63:90:c5:
         7d:2d:8b:5c:e9:2c:6e:30:f5:8c:69:e2:f4:e0:84:8b:4e:2e:
         e3:ae:56:37:a7:57:2d:52:5f:e2:f7:39:4d:a2:f2:41:03:38:
         54:b3:33:1e:1a:af:5b:3a:67:93:d7:c9:8b:6e:18:f5:3c:2e:
         02:ca:db:b4:2f:bc:10:83:84:0e:0f:e1:25:24:18:1d:8a:96:
         c9:a7:a5:c3:78:7f:76:39:fe:93:a6:10:fc:a8:b1:63:62:fc:
         50:eb:af:6e:c8:f1:ac:af:25:b5:da:77:df:c0:b1:3d:a1:09:
         f0:9e:13:07:4f:7f:dc:7b:e1:f2:98:9e:82:dd:79:af:37:e1:
         6c:84:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org