Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8942116348CB859ADB895C4FCAF2E70D15442AAE.cer
File:                     8942116348CB859ADB895C4FCAF2E70D15442AAE.cer (raw, json)
Hash identifier:          ZrLv69eHAVgNOMzi8oqOCkpM0NC5XOfXAF05weGpOh8=
Subject key identifier:   89:42:11:63:48:CB:85:9A:DB:89:5C:4F:CA:F2:E7:0D:15:44:2A:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1804D30D790D4F1F44E8755F968D1CE6ECCCEFD9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/8942116348CB859ADB895C4FCAF2E70D15442AAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 21:47:23 +0000
Certificate not after:    Thu 04 Jul 2024 21:52:23 +0000
Subordinate resources:    AS: 268841
                          IP: 45.174.0.0/22
                          IP: 2804:5b68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:04:d3:0d:79:0d:4f:1f:44:e8:75:5f:96:8d:1c:e6:ec:cc:ef:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  6 21:47:23 2023 GMT
            Not After : Jul  4 21:52:23 2024 GMT
        Subject: CN=8942116348CB859ADB895C4FCAF2E70D15442AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:00:9a:55:e9:c5:a5:b4:9c:4d:c3:ea:ec:85:
                    f4:23:1f:46:a3:11:0b:ed:74:54:18:4d:a9:c2:94:
                    5f:f1:25:e4:6b:a2:b5:74:17:3d:38:6d:d0:10:d3:
                    25:1f:40:c6:d6:01:c6:c8:f7:aa:ce:13:76:67:37:
                    91:97:71:51:d7:e2:46:2d:ea:1f:5b:92:87:30:60:
                    fb:c9:65:7d:37:36:f9:56:0e:95:38:36:3f:2d:00:
                    83:fe:62:e1:3e:5d:10:f2:ad:e7:73:ea:a3:0d:3d:
                    9a:d5:02:82:95:e5:d1:54:b3:19:38:9e:67:00:06:
                    58:4b:14:f7:09:90:b4:e3:63:d5:e5:bd:7e:4f:91:
                    de:56:8b:85:34:7a:ac:37:31:cf:c9:fc:d8:9a:90:
                    63:8b:c5:45:ad:dc:d6:23:53:78:ea:f8:5b:75:1a:
                    7d:de:be:71:c0:a4:e7:a8:74:cc:20:d5:04:52:cf:
                    31:5b:b6:76:1f:6a:8b:f9:aa:67:49:f1:56:84:3f:
                    b2:10:fd:80:84:0b:ec:a9:5a:94:76:e7:49:68:35:
                    52:08:83:55:81:dd:96:19:f1:74:fe:e9:46:d6:af:
                    9a:b1:25:aa:b7:ce:f5:d7:87:e4:31:05:09:36:d1:
                    44:d3:fb:6f:08:3a:52:1e:5d:e7:6e:b1:c9:dc:83:
                    dc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:42:11:63:48:CB:85:9A:DB:89:5C:4F:CA:F2:E7:0D:15:44:2A:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/8942116348CB859ADB895C4FCAF2E70D15442AAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.0.0/22
                IPv6:
                  2804:5b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268841

    Signature Algorithm: sha256WithRSAEncryption
         07:c8:de:3c:02:73:6c:bd:62:8f:9b:00:44:ae:7c:f1:5e:cd:
         3d:a9:3f:79:a4:17:5c:cf:05:31:8f:47:fd:f0:46:b2:3b:79:
         8a:48:4d:e2:82:00:a3:be:cc:9a:3c:d7:2d:a2:bf:1d:cf:f7:
         49:ac:86:0c:24:ea:09:29:6f:24:e9:55:25:17:e7:0b:5b:53:
         76:75:83:0b:3f:68:07:ec:48:91:6b:b7:96:6d:6c:9e:64:9f:
         84:63:05:64:37:30:f0:f1:f0:5a:1d:db:f1:e9:d2:4a:44:e1:
         29:59:da:0e:fa:65:78:2a:67:eb:51:2a:a3:d1:05:8c:e1:46:
         36:8a:33:ec:be:fb:89:65:78:a5:32:4b:35:11:e7:dc:32:62:
         f2:13:fb:a1:ce:5f:6d:69:46:47:cf:54:6a:10:10:cd:48:03:
         ad:c1:e3:6f:a0:04:61:63:c1:f4:cc:36:92:f4:43:d8:6e:9b:
         d1:40:17:9c:bb:82:22:73:86:79:0a:4b:bf:32:f9:99:34:c2:
         62:3d:93:a1:95:5f:3a:3e:51:55:aa:0d:53:95:44:cb:8a:7e:
         83:a8:9c:f2:5d:2e:b9:3d:33:4a:54:8f:cc:12:6b:d8:e7:69:
         de:b3:e9:e6:71:a8:80:fc:2e:6d:b2:60:16:e6:c8:c8:9c:73:
         c3:3c:60:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org