Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/8ACB44001222477F120CEC52E5689FA8BF637DEA.cer
File:                     8ACB44001222477F120CEC52E5689FA8BF637DEA.cer (raw, json)
Hash identifier:          J6WWhLiUHgenz5EF1Q1Q18m3M6jDmGmluSH5w2Sz/8w=
Subject key identifier:   8A:CB:44:00:12:22:47:7F:12:0C:EC:52:E5:68:9F:A8:BF:63:7D:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       558D40063EC2BB47241374A58CEFF758675BCC46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/8ACB44001222477F120CEC52E5689FA8BF637DEA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Nov 2023 05:38:38 +0000
Certificate not after:    Wed 30 Oct 2024 05:43:38 +0000
Subordinate resources:    AS: 266164
                          IP: 45.6.184.0/22
                          IP: 2804:3bac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:8d:40:06:3e:c2:bb:47:24:13:74:a5:8c:ef:f7:58:67:5b:cc:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  1 05:38:38 2023 GMT
            Not After : Oct 30 05:43:38 2024 GMT
        Subject: CN=8ACB44001222477F120CEC52E5689FA8BF637DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:28:a5:50:ab:6f:18:08:94:e1:50:1b:1a:97:
                    32:d0:57:1b:c2:10:98:ce:3b:35:d1:b8:66:89:e9:
                    79:61:53:9c:60:2f:d4:7e:92:3b:23:b5:0f:1b:cc:
                    29:5e:cc:d4:2b:f4:06:39:a9:47:bf:9c:29:5a:07:
                    7c:27:cd:22:e6:58:af:da:10:f5:51:4f:5e:15:74:
                    60:fa:96:59:6b:95:1f:47:ed:40:47:d4:05:1f:9c:
                    af:ba:eb:6b:b3:ef:db:7c:d1:01:01:dc:2b:11:50:
                    61:1c:37:1f:31:11:aa:85:44:e8:d1:88:85:bc:31:
                    54:4b:d2:82:42:49:3c:1c:dd:bd:1e:fd:23:af:cc:
                    6f:ca:5f:38:1c:a5:c9:0b:29:7a:07:10:a0:1d:db:
                    cf:44:11:d8:3e:e8:cb:52:56:a2:02:90:e0:cc:5a:
                    73:03:46:da:76:33:95:af:f2:91:01:b4:88:27:ab:
                    e6:5b:b9:d9:50:0d:0b:8a:ff:b8:5d:21:86:f0:2e:
                    77:c5:2f:59:db:ab:8a:04:e7:d4:5c:bb:a3:cd:d6:
                    05:08:77:46:50:d4:8c:39:37:49:c5:0e:14:5f:b3:
                    36:80:a0:ca:9d:62:d1:e8:d2:29:76:d1:66:fd:4a:
                    23:df:0f:39:d7:0d:bc:97:66:48:a1:f2:ba:bc:e3:
                    23:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                8A:CB:44:00:12:22:47:7F:12:0C:EC:52:E5:68:9F:A8:BF:63:7D:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/8ACB44001222477F120CEC52E5689FA8BF637DEA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.184.0/22
                IPv6:
                  2804:3bac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266164

    Signature Algorithm: sha256WithRSAEncryption
         15:af:c3:ee:8b:89:4c:ee:e8:07:95:70:0d:f5:b1:63:4e:02:
         e1:00:45:26:32:8c:d7:6a:00:aa:de:f3:f3:c7:26:fb:fd:e1:
         6d:51:19:a0:d7:fe:4a:8e:62:b4:bc:bf:1b:96:90:06:ae:53:
         b1:a1:1c:fb:f7:e9:38:a1:cf:28:12:e9:68:90:bf:ff:49:99:
         96:17:66:0d:52:43:52:74:85:1e:de:62:78:54:88:b3:31:11:
         e8:ea:a9:33:1a:7f:3e:a2:6f:16:11:33:42:2f:b2:c5:8e:08:
         f4:6b:3d:38:34:73:de:d9:dc:3e:a8:2b:22:32:61:55:d0:f8:
         37:04:68:36:85:d6:bf:f3:85:54:26:47:16:50:f7:a1:b7:f6:
         b6:06:b8:8b:7b:94:d7:b7:ce:46:80:bc:2c:f5:c6:5d:0a:69:
         42:99:22:17:0f:b5:e6:aa:21:86:fa:92:63:fb:f4:d8:c2:69:
         3a:6c:82:1c:9e:56:2b:cf:67:8f:a7:a8:36:f4:a8:91:87:9b:
         51:65:69:22:d0:01:73:26:68:bc:c1:37:e8:71:d7:c3:7d:61:
         80:c7:c1:a8:79:11:a5:61:09:ec:d4:71:b5:d6:43:6f:77:54:
         14:69:8b:51:6d:03:7a:92:53:4e:8e:95:33:b9:34:fb:51:3d:
         1b:89:88:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org