Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.cer
File:                     896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.cer (raw, json)
Hash identifier:          mNXYDBSQe+KY7WNQSnPosJdEyNIbmLcsj218sP8EjEw=
Subject key identifier:   89:64:25:AF:5A:D2:BE:AA:DA:B7:20:A8:46:C4:F2:B7:C7:1C:3B:E3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1583AD1AC8260C9B2F9158ED0ACE4F96D302665D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/0/896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Feb 2024 19:38:58 +0000
Certificate not after:    Thu 27 Feb 2025 19:43:58 +0000
Subordinate resources:    AS: 266070
                          IP: 45.4.112.0/22
                          IP: 2804:3a18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:83:ad:1a:c8:26:0c:9b:2f:91:58:ed:0a:ce:4f:96:d3:02:66:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 29 19:38:58 2024 GMT
            Not After : Feb 27 19:43:58 2025 GMT
        Subject: CN=896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fe:cd:d8:23:04:66:36:1e:ab:d0:29:42:0b:
                    49:52:30:e9:19:7a:7c:93:3a:c8:c3:8a:87:dd:d0:
                    d7:58:5d:54:d0:3e:53:6a:3b:0d:09:f1:c4:7d:7f:
                    d1:38:ee:bb:c2:24:1c:96:16:c2:84:a7:51:c2:60:
                    c9:d7:dc:7f:36:96:6e:9d:44:48:f3:26:27:f1:c6:
                    5e:96:e2:41:91:41:59:38:65:81:55:86:5a:41:a9:
                    98:49:20:80:9a:53:c4:0e:07:d1:29:93:fe:02:cb:
                    91:03:19:3a:05:e6:6e:1d:b4:6a:50:95:2f:46:a2:
                    74:2d:3d:f8:a6:4e:ea:de:96:69:6b:28:36:09:d1:
                    e5:cc:65:e0:6a:69:79:7d:87:08:0e:94:05:4a:a0:
                    31:61:26:db:ff:75:9e:7d:db:36:64:3a:00:9f:38:
                    08:45:24:89:33:4e:41:1b:e7:cc:f1:18:9d:56:78:
                    ca:c0:69:96:0e:e7:84:b0:cd:70:d6:e8:88:f5:ee:
                    af:2b:72:4d:f4:51:db:92:b5:07:e1:56:39:9b:91:
                    cd:18:ad:01:85:01:74:4b:32:e0:02:d1:78:2c:31:
                    d9:5b:57:78:06:b5:71:78:f4:1d:31:1a:43:d5:51:
                    52:15:ad:ef:a6:6b:b1:0f:86:60:cb:09:48:8a:ac:
                    a4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:64:25:AF:5A:D2:BE:AA:DA:B7:20:A8:46:C4:F2:B7:C7:1C:3B:E3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8QcxnyJLdpR3Cse2bnx55fw7FAEPXusvBtQbM4HmRXjb/0/896425AF5AD2BEAADAB720A846C4F2B7C71C3BE3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.112.0/22
                IPv6:
                  2804:3a18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266070

    Signature Algorithm: sha256WithRSAEncryption
         43:90:f7:7e:1d:67:68:a9:80:dc:e0:7e:b1:07:d5:2c:dd:38:
         40:d2:4f:d6:13:d1:4c:cb:e5:af:85:b9:62:4e:0d:b0:67:4d:
         d5:40:21:23:0f:b7:6e:ed:3a:70:40:c5:b9:60:98:04:4b:78:
         ae:f3:e8:fc:61:b2:e6:cd:46:35:51:61:33:57:8d:14:ba:91:
         15:22:ea:95:a5:d9:f0:eb:1e:8b:28:05:cc:ff:56:c3:7c:9f:
         91:ad:15:24:a1:ef:8b:88:6b:87:e5:63:e6:ba:28:8d:01:ae:
         8d:8b:e8:e4:5b:1b:a6:6b:39:23:a1:d5:1c:3c:c3:e5:0d:bd:
         4b:52:6e:9f:76:a2:81:d8:0e:f2:1c:85:27:0b:c7:33:26:bc:
         8e:fa:5c:3c:dc:c7:93:6b:cb:a9:30:5c:47:4a:a1:9f:da:ed:
         e4:dd:84:ca:ca:1f:95:82:ce:99:f7:e6:e5:81:c0:37:f2:f4:
         72:a1:d7:ba:ef:3e:6b:68:33:14:5c:4c:74:ef:b0:6e:5d:51:
         4b:f2:6d:63:3b:6a:f5:74:12:c8:bc:d9:f1:a2:f7:25:cf:39:
         4e:a8:2b:49:74:d9:b2:f4:42:0d:fe:ce:a1:89:22:40:1f:10:
         d3:76:bb:41:74:43:b6:bf:ac:3e:d6:b4:59:3a:de:76:96:a3:
         d9:c1:f7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org