Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/90BAFF2466D229495DFBA3994D0CE610C76B58E4.cer
File:                     90BAFF2466D229495DFBA3994D0CE610C76B58E4.cer (raw, json)
Hash identifier:          T1ED9xJRoenuhxhRTyn0ZS/sC3KGNNhPYRxvBHsoVws=
Subject key identifier:   90:BA:FF:24:66:D2:29:49:5D:FB:A3:99:4D:0C:E6:10:C7:6B:58:E4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       775AA49572D1AB7FDC3C28543D7E796BB4E6F030
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ed4zsYouLN1ahnLxA1mVkMNMKZPVHNT4M3jLjmN2K5GH/0/90BAFF2466D229495DFBA3994D0CE610C76B58E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ed4zsYouLN1ahnLxA1mVkMNMKZPVHNT4M3jLjmN2K5GH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 May 2022 20:57:09 +0000
Certificate not after:    Mon 22 May 2023 21:02:09 +0000
Subordinate resources:    AS: 268451
                          IP: 45.161.104.0/22
                          IP: 2804:516c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5a:a4:95:72:d1:ab:7f:dc:3c:28:54:3d:7e:79:6b:b4:e6:f0:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 20:57:09 2022 GMT
            Not After : May 22 21:02:09 2023 GMT
        Subject: CN=90BAFF2466D229495DFBA3994D0CE610C76B58E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:98:1a:b6:86:5b:18:eb:cb:17:b3:95:76:
                    69:ad:f3:8f:4c:18:04:b8:42:f9:fc:05:7d:82:7e:
                    98:91:30:27:bc:67:1a:8b:64:0f:23:b3:96:2b:e0:
                    a7:9a:b9:c2:83:cf:62:af:5b:09:dc:d3:80:41:45:
                    2b:4d:91:c8:d2:54:07:4c:c2:cb:17:48:d3:02:f2:
                    0a:85:6b:b4:7c:e8:93:09:5b:0d:07:4b:01:c3:f6:
                    fa:ce:ea:e6:8f:0b:ef:7e:e6:02:e5:f4:d0:d7:70:
                    09:4a:bf:3a:e8:3c:9d:9f:5d:c6:d7:be:62:f8:e3:
                    eb:a3:ab:9f:7a:12:24:e5:6c:aa:70:26:db:6a:cc:
                    e6:7e:f9:13:8e:28:14:a4:4e:dd:1c:a9:50:a3:f3:
                    ad:68:3d:0b:83:d5:7a:f3:02:bf:b3:c8:98:ee:9c:
                    3f:26:af:f4:5c:9b:05:0d:47:5f:2b:33:d2:42:97:
                    b6:b3:a4:48:2d:d3:2e:a1:98:8c:18:ac:c6:ef:40:
                    18:73:e6:09:76:9f:43:77:7b:ed:db:05:54:c0:c3:
                    48:cd:5a:4e:86:f3:83:70:47:42:55:d7:9f:1f:96:
                    1e:37:be:32:31:f6:69:58:7a:fa:7a:c4:aa:8e:14:
                    38:28:ae:00:55:da:f6:4b:ba:2d:ed:ec:d2:4f:2f:
                    2c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:BA:FF:24:66:D2:29:49:5D:FB:A3:99:4D:0C:E6:10:C7:6B:58:E4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ed4zsYouLN1ahnLxA1mVkMNMKZPVHNT4M3jLjmN2K5GH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ed4zsYouLN1ahnLxA1mVkMNMKZPVHNT4M3jLjmN2K5GH/0/90BAFF2466D229495DFBA3994D0CE610C76B58E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.104.0/22
                IPv6:
                  2804:516c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268451

    Signature Algorithm: sha256WithRSAEncryption
         06:f2:93:eb:6d:b2:36:6e:ba:fd:f8:15:14:12:4e:f9:d8:25:
         c1:c5:af:b7:65:16:54:f5:1f:ec:5f:a4:ac:40:4d:ed:60:b6:
         8f:cc:a1:06:46:c4:5d:86:3a:70:2e:66:b1:73:b8:8d:58:b2:
         32:05:f7:4a:49:02:a5:14:bf:06:d6:91:b5:d1:8d:8f:64:00:
         a8:c0:a1:54:00:bd:46:f6:4b:5b:7b:74:43:fc:d1:12:b0:59:
         3e:53:ed:fb:e1:7a:c8:8d:65:27:33:82:3f:d3:54:46:47:4a:
         6f:51:85:2d:b7:a9:2e:89:b5:a1:25:8c:ec:21:88:60:f9:fc:
         9f:1f:31:91:ff:2e:28:53:8f:6a:91:05:23:16:2a:26:b6:7a:
         88:ae:53:aa:13:88:70:2d:56:f3:e9:81:75:4a:18:33:fd:c0:
         23:ce:b7:98:e2:65:ad:83:6f:78:1c:ea:ef:cf:74:9f:bf:92:
         8d:bd:af:fb:dc:17:29:fc:9e:45:6c:04:76:45:57:4d:a5:6f:
         be:76:e7:94:eb:0a:6c:2f:36:e6:d8:66:f7:a4:b6:57:d7:b6:
         d7:78:9a:49:68:e0:34:40:34:c0:e8:4c:fa:20:23:69:a1:cc:
         d6:f8:7d:d5:f6:99:b2:61:25:6b:8e:ea:c2:3d:fb:65:74:84:
         8f:3b:5c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org