Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/891E01506283CE9EA670EFA66E13C6B68951E914.cer
File:                     891E01506283CE9EA670EFA66E13C6B68951E914.cer (raw, json)
Hash identifier:          /51ottw1MYETDaYmReK79XJ8fCSH0PwsH5TMW8jEmtM=
Subject key identifier:   89:1E:01:50:62:83:CE:9E:A6:70:EF:A6:6E:13:C6:B6:89:51:E9:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       24C49D57E590D297F53AD42025AA6EB9F35D6DC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/891E01506283CE9EA670EFA66E13C6B68951E914.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Oct 2023 14:11:30 +0000
Certificate not after:    Mon 28 Oct 2024 14:16:30 +0000
Subordinate resources:    AS: 28201
                          IP: 45.191.168.0/22
                          IP: 45.231.8.0/22
                          IP: 45.235.116.0/22
                          IP: 131.161.4.0/22
                          IP: 138.59.20.0/22
                          IP: 138.117.204.0/22
                          IP: 138.121.64.0/22
                          IP: 138.185.24.0/22
                          IP: 168.181.80.0/22
                          IP: 168.195.64.0/22
                          IP: 168.227.8.0/22
                          IP: 170.239.192.0/22
                          IP: 170.239.220.0/22
                          IP: 170.254.160.0/22
                          IP: 177.125.80.0/20
                          IP: 177.152.160.0/20
                          IP: 177.221.72.0/21
                          IP: 179.189.96.0/20
                          IP: 181.225.180.0/22
                          IP: 186.216.128.0/20
                          IP: 186.251.200.0/22
                          IP: 187.1.48.0/20
                          IP: 187.17.240.0/20
                          IP: 187.73.0.0/20
                          IP: 187.86.64.0/20
                          IP: 187.108.48.0/20
                          IP: 189.90.240.0/20
                          IP: 191.5.80.0/20
                          IP: 2804:5c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:c4:9d:57:e5:90:d2:97:f5:3a:d4:20:25:aa:6e:b9:f3:5d:6d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 30 14:11:30 2023 GMT
            Not After : Oct 28 14:16:30 2024 GMT
        Subject: CN=891E01506283CE9EA670EFA66E13C6B68951E914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:dc:17:49:a8:84:e8:cc:aa:ef:8e:3b:42:e3:
                    3b:06:64:45:09:66:8c:da:97:be:6a:2f:35:e0:65:
                    0d:da:fd:7f:b9:63:fc:3a:5a:af:4e:c6:0d:4b:68:
                    45:85:f8:4a:92:21:5c:ca:fb:60:a3:1d:59:33:c1:
                    59:02:4f:8b:b7:11:eb:e8:1b:37:39:3a:b7:5d:52:
                    dd:6c:48:31:37:c7:97:9e:68:97:9d:5e:c4:d8:36:
                    65:4a:70:13:b6:88:c5:49:43:aa:43:88:78:91:44:
                    a8:4e:8f:f1:5a:ca:7e:23:98:df:0e:5b:22:5c:39:
                    d9:f9:c0:4d:07:0e:46:53:61:68:60:e8:66:17:d2:
                    79:03:cb:25:bf:be:a7:86:0f:4c:7c:63:68:17:db:
                    05:cb:48:4d:22:b5:76:ec:bf:2e:41:11:14:8a:29:
                    d4:a5:c9:a5:f3:1d:74:3c:28:9a:f6:76:1b:2d:b4:
                    e8:81:2e:ed:a5:20:27:6b:05:f3:bb:8c:eb:07:89:
                    8a:72:e0:66:4c:95:db:b8:25:ed:15:71:b8:17:24:
                    7a:1b:3f:23:88:df:b7:8e:f1:28:65:da:59:1b:d0:
                    0b:01:87:3a:05:ac:63:63:00:d9:fa:c3:9b:b9:9f:
                    97:7e:e8:59:cc:ae:04:6a:c9:19:46:57:7c:a4:07:
                    73:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:1E:01:50:62:83:CE:9E:A6:70:EF:A6:6E:13:C6:B6:89:51:E9:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/891E01506283CE9EA670EFA66E13C6B68951E914.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.168.0/22
                  45.231.8.0/22
                  45.235.116.0/22
                  131.161.4.0/22
                  138.59.20.0/22
                  138.117.204.0/22
                  138.121.64.0/22
                  138.185.24.0/22
                  168.181.80.0/22
                  168.195.64.0/22
                  168.227.8.0/22
                  170.239.192.0/22
                  170.239.220.0/22
                  170.254.160.0/22
                  177.125.80.0/20
                  177.152.160.0/20
                  177.221.72.0/21
                  179.189.96.0/20
                  181.225.180.0/22
                  186.216.128.0/20
                  186.251.200.0/22
                  187.1.48.0/20
                  187.17.240.0/20
                  187.73.0.0/20
                  187.86.64.0/20
                  187.108.48.0/20
                  189.90.240.0/20
                  191.5.80.0/20
                IPv6:
                  2804:5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28201

    Signature Algorithm: sha256WithRSAEncryption
         59:f4:17:42:b2:59:62:b6:9f:37:c9:ae:f8:fe:fe:3c:ae:64:
         70:22:3c:c7:51:14:6b:00:59:4c:b2:78:79:f3:76:27:2f:6b:
         9c:ca:87:c8:01:01:9f:b6:54:8b:83:51:71:76:61:90:6b:4a:
         69:14:e0:22:ab:5a:d0:ba:f1:2e:c7:2f:45:5c:3f:5c:04:cc:
         2e:3f:a8:f1:f2:54:c4:72:1b:29:60:4e:d0:93:2e:0e:9a:3d:
         6a:11:eb:a0:6c:ea:39:f0:99:da:1a:34:48:96:11:d7:de:9b:
         5b:01:89:c6:4e:2d:12:d1:0a:cc:0b:ea:95:c2:58:02:a7:9a:
         8f:b4:a7:a9:46:d1:d9:ed:dc:36:39:68:a8:4c:4b:76:06:0b:
         0e:80:8a:91:ea:11:37:7f:38:ea:c2:40:d5:71:c8:8c:f8:1b:
         c3:b7:ba:28:f7:23:cb:18:eb:0f:63:41:e9:dc:23:d6:78:13:
         0f:0e:90:fc:0c:58:b8:0e:90:9a:4f:22:bc:91:ca:80:c3:9e:
         6e:bc:36:62:de:9e:bd:5f:94:b5:85:d9:aa:6c:e4:bd:dc:f1:
         16:de:a0:9a:0a:92:75:2d:3d:27:a8:5d:36:cb:1b:6f:f3:93:
         ae:70:51:d8:c0:39:1b:fe:b5:cc:49:38:d9:f8:3f:c0:e6:fa:
         6d:cc:4d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org