Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/90811B4BCAA7D6B67FC0D93CCC3C312F7DF837EE.cer
File:                     90811B4BCAA7D6B67FC0D93CCC3C312F7DF837EE.cer (raw, json)
Hash identifier:          W2MLxOA5XYht4u5v/F8gELQveHw5D9SWhoQHLSIyHNw=
Subject key identifier:   90:81:1B:4B:CA:A7:D6:B6:7F:C0:D9:3C:CC:3C:31:2F:7D:F8:37:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       54359DAA1EDBAE75101CED7750303982248A760B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/90811B4BCAA7D6B67FC0D93CCC3C312F7DF837EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Jan 2024 20:43:14 +0000
Certificate not after:    Thu 02 Jan 2025 20:48:14 +0000
Subordinate resources:    AS: 266194
                          IP: 45.5.176.0/22
                          IP: 2804:3c2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:35:9d:aa:1e:db:ae:75:10:1c:ed:77:50:30:39:82:24:8a:76:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  4 20:43:14 2024 GMT
            Not After : Jan  2 20:48:14 2025 GMT
        Subject: CN=90811B4BCAA7D6B67FC0D93CCC3C312F7DF837EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3e:a2:0b:d9:4c:f8:ea:ae:53:dc:93:d8:12:
                    04:63:08:be:33:89:16:68:1c:9d:2a:93:9b:7e:8a:
                    3b:34:ce:cb:98:7e:85:95:8e:11:88:c4:1a:ce:8c:
                    2e:27:bb:93:9e:77:66:53:67:6e:01:c6:fc:19:cd:
                    3e:d5:c0:6e:e0:bb:b7:1f:70:9a:29:8e:53:cc:6d:
                    45:8e:7a:87:48:05:c9:6a:78:28:76:fb:24:19:8f:
                    82:79:1d:bc:8a:ca:cf:a1:8c:c6:90:ac:ac:1e:3c:
                    e3:42:60:a9:62:98:fb:9c:b8:87:99:49:13:47:89:
                    ff:c8:fd:70:da:e9:ae:fa:af:f6:5d:89:4f:c8:36:
                    87:c3:7c:13:90:75:9a:a8:a6:0d:4c:dd:d7:4b:f1:
                    16:9d:1a:ac:6d:b2:eb:05:91:46:6d:21:72:30:58:
                    12:b6:f0:7d:47:50:81:eb:81:9e:9a:b8:ba:ce:fa:
                    0e:e5:26:e9:90:15:1c:6b:49:ae:6e:29:d6:78:de:
                    90:71:81:46:2b:a9:b0:ac:ef:d9:4f:50:b0:d3:37:
                    b8:db:ac:bc:77:63:8f:68:bf:5e:14:51:c3:16:2c:
                    24:2b:ec:3a:60:03:2b:07:de:83:82:c8:0f:2a:2e:
                    25:a5:5b:0a:f4:ac:64:14:aa:30:09:ec:eb:9a:9c:
                    4d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:81:1B:4B:CA:A7:D6:B6:7F:C0:D9:3C:CC:3C:31:2F:7D:F8:37:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BoGkf6c1T7kT7vKcVzoGupHb9PZYK4k6TC45LySzBwU4/0/90811B4BCAA7D6B67FC0D93CCC3C312F7DF837EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.176.0/22
                IPv6:
                  2804:3c2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266194

    Signature Algorithm: sha256WithRSAEncryption
         19:ba:7e:ba:85:00:cf:71:cf:83:8d:81:db:19:e5:7e:78:3b:
         bd:af:94:32:68:f5:e4:6e:01:35:05:cd:48:32:71:89:4d:e5:
         5c:aa:48:6e:fd:14:d0:b6:b5:33:25:08:c3:56:8d:ca:27:0e:
         ad:cf:a2:06:ac:1a:ea:93:a2:3e:e1:ca:5c:3f:c3:c0:b9:d0:
         84:cd:dd:ce:e9:ad:32:73:5c:5f:fa:38:f3:19:0c:c8:b4:84:
         d4:b2:09:6f:7d:23:42:85:61:a0:a8:f8:24:f0:59:82:2e:c9:
         e6:e0:e3:67:d2:03:e7:e4:38:9a:6a:5f:b2:24:29:7c:68:25:
         ff:e3:b5:f4:71:0a:f2:ca:f2:33:53:fc:6f:d4:95:c6:0c:0c:
         65:1d:a7:7b:6d:0c:65:87:b4:4d:6e:b5:75:d0:b8:fa:0d:66:
         af:ae:2b:a2:3d:9a:c5:d3:59:7a:44:7a:0b:bc:b3:54:0c:b3:
         0f:df:e6:a8:0c:ae:ee:57:49:0a:be:90:c9:f1:84:7f:33:1a:
         93:94:a1:86:02:92:5e:b2:bb:03:12:2f:e1:27:4a:60:40:98:
         3c:cd:4c:4f:ea:13:71:ad:8f:fc:54:3e:51:40:73:6a:fa:9d:
         77:7e:15:7e:37:ff:aa:90:d1:dd:27:17:8f:b2:12:18:2c:6e:
         0a:ed:60:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org