Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.cer
File:                     90487C5691390B1D7F5E129EBFEA377AA41D94C0.cer (raw, json)
Hash identifier:          IhWmWsXp+aPmmJin43yPbIyF3aehyoqD1jRy69+ob0M=
Subject key identifier:   90:48:7C:56:91:39:0B:1D:7F:5E:12:9E:BF:EA:37:7A:A4:1D:94:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       052B56A973615702CF815E8D1CF172447DDF4C98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 15:54:38 +0000
Certificate not after:    Tue 03 Dec 2024 15:59:38 +0000
Subordinate resources:    AS: 268297
                          IP: 45.237.248.0/22
                          IP: 2804:4f00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2b:56:a9:73:61:57:02:cf:81:5e:8d:1c:f1:72:44:7d:df:4c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 15:54:38 2023 GMT
            Not After : Dec  3 15:59:38 2024 GMT
        Subject: CN=90487C5691390B1D7F5E129EBFEA377AA41D94C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7b:9a:c1:7c:e7:1d:29:db:58:e7:1f:89:aa:
                    ed:73:9e:1b:bd:28:bf:c4:b7:a7:fd:f0:8c:09:61:
                    f7:fe:d8:65:b0:b7:ce:6a:01:d1:07:4e:de:7e:2e:
                    fa:8d:05:89:76:ed:cd:91:6e:d4:ea:4b:0f:c7:af:
                    02:bb:1e:f8:49:ee:15:d9:f4:7c:81:e8:14:9e:62:
                    57:bd:38:94:eb:c8:e2:ba:2a:24:dd:07:1d:d5:ff:
                    69:b7:a6:f9:de:2d:ec:97:2f:00:ec:1d:b7:ec:a6:
                    85:36:3c:aa:8e:3a:86:39:a5:88:84:1d:7c:4e:6b:
                    7b:90:4c:48:b8:97:f8:f9:d5:a6:6a:54:29:4a:bc:
                    c7:96:72:93:78:26:b6:6a:f1:23:36:a7:19:bf:09:
                    fb:b7:e0:d5:fd:5e:c8:2e:a6:29:fe:09:b3:e7:04:
                    a8:6a:52:02:e1:03:68:48:fc:4f:62:b2:05:cc:29:
                    81:26:bc:be:ab:6a:85:fc:03:c7:3a:00:41:b7:e5:
                    51:be:fe:d4:50:43:e5:0c:07:01:10:89:00:10:f1:
                    78:af:bf:8f:28:c8:1e:8f:00:cc:26:bf:56:90:b1:
                    fe:72:8a:e9:fc:60:53:b2:f2:3f:b4:02:e4:7c:ad:
                    6c:96:27:f6:8f:d8:99:04:35:9e:7c:1e:a2:bb:69:
                    34:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:48:7C:56:91:39:0B:1D:7F:5E:12:9E:BF:EA:37:7A:A4:1D:94:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3ttCT1oXX4kYCotaszxukuruL1N3YNMC4Xsr8oDv6tV/0/90487C5691390B1D7F5E129EBFEA377AA41D94C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.248.0/22
                IPv6:
                  2804:4f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268297

    Signature Algorithm: sha256WithRSAEncryption
         5a:c5:08:5b:ab:d9:d2:33:dd:63:47:df:87:47:c3:5b:52:25:
         e9:d7:0e:b0:7c:42:87:ab:bf:fb:44:e5:52:d2:2a:de:ad:f1:
         eb:e2:f7:21:f5:d0:ae:4c:8a:61:8c:16:97:c0:0b:a1:73:f4:
         6a:55:47:68:9c:2b:7f:47:0e:44:5e:66:be:d1:4c:2f:b4:37:
         a5:8e:ca:99:79:36:ce:17:28:35:b6:4f:ec:d8:d2:fb:09:07:
         e0:b3:06:dd:12:65:5d:75:92:b6:c9:eb:bc:d5:1e:3a:1d:98:
         3d:69:dd:34:e8:13:f0:68:13:e2:98:ee:fd:eb:42:84:60:bb:
         57:41:f4:ac:e9:05:00:b1:23:c3:14:49:aa:80:20:1a:26:4e:
         f4:7d:db:eb:ec:a4:47:b4:23:f3:01:f4:bb:f9:40:f6:00:95:
         8c:64:f0:70:08:a1:7e:f3:d0:33:6f:be:73:96:c8:69:4b:77:
         83:75:59:4a:b6:73:8f:69:b6:4a:34:c7:9f:ae:d6:cb:5d:29:
         15:51:04:9b:8b:bb:ee:3d:e5:3a:3b:a5:3f:c6:5a:90:68:bd:
         3a:43:62:20:f6:80:c9:17:09:c0:fa:5c:6a:ad:20:5d:d6:bb:
         bb:48:e3:29:1e:94:9c:9a:b1:1c:d2:15:45:dc:9d:69:64:71:
         a7:59:1d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org