Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/90E3AE9C4AACF1BD08D22E8D3D7D221D0C14E9AC.cer
File:                     90E3AE9C4AACF1BD08D22E8D3D7D221D0C14E9AC.cer (raw, json)
Hash identifier:          Y61e5T010/L17BNzR0u4oW9ZB4SARgZPiN8v7FM6oV8=
Subject key identifier:   90:E3:AE:9C:4A:AC:F1:BD:08:D2:2E:8D:3D:7D:22:1D:0C:14:E9:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42F5BC85D586A9E3C470AB1B19709D44537FF399
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/90E3AE9C4AACF1BD08D22E8D3D7D221D0C14E9AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Feb 2024 05:10:31 +0000
Certificate not after:    Sun 16 Feb 2025 05:15:31 +0000
Subordinate resources:    AS: 269441
                          IP: 45.185.36.0/22
                          IP: 2804:64ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f5:bc:85:d5:86:a9:e3:c4:70:ab:1b:19:70:9d:44:53:7f:f3:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 18 05:10:31 2024 GMT
            Not After : Feb 16 05:15:31 2025 GMT
        Subject: CN=90E3AE9C4AACF1BD08D22E8D3D7D221D0C14E9AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:67:7b:2e:30:44:6c:68:d6:c3:d1:b9:d0:3c:
                    1c:f6:b1:9a:74:55:03:11:72:9d:3a:60:2f:b4:3c:
                    14:bf:ff:d7:ad:22:fe:b3:e3:c1:ae:d4:4e:f5:7a:
                    97:69:e4:db:ea:f8:29:00:7c:95:ca:81:f1:5b:58:
                    55:84:f9:ac:31:19:80:cf:e3:08:41:28:85:42:56:
                    08:89:ec:d2:4a:c1:43:ca:9d:21:b3:28:74:4f:3c:
                    9b:79:91:f5:fb:d0:67:15:7e:ab:33:dc:35:a5:8f:
                    2b:6e:0a:1b:17:9a:03:c4:9d:0f:98:6c:62:78:c8:
                    07:18:5c:cc:eb:b4:be:03:5b:20:a0:2a:47:74:12:
                    b2:f0:d5:3a:5c:e2:96:ed:1f:db:61:24:0a:b6:e1:
                    5a:8a:49:01:57:66:aa:d6:f2:b7:cf:75:9f:0f:ef:
                    85:ff:bb:7b:0d:3a:7b:53:7a:e4:30:40:64:8b:37:
                    26:9c:03:a4:4e:07:7f:7f:97:14:7d:6a:6f:0d:dc:
                    10:3d:e8:0d:5a:63:f7:ad:01:9c:69:52:0a:68:2f:
                    ca:c3:d4:aa:f7:7e:8b:33:9a:ef:44:6e:5e:29:14:
                    1a:29:79:72:a6:20:c5:2a:8f:31:29:52:ce:8a:f6:
                    81:bf:c6:59:d7:19:87:9a:0a:1b:1e:da:3c:d3:c7:
                    2b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:E3:AE:9C:4A:AC:F1:BD:08:D2:2E:8D:3D:7D:22:1D:0C:14:E9:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/90E3AE9C4AACF1BD08D22E8D3D7D221D0C14E9AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.36.0/22
                IPv6:
                  2804:64ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269441

    Signature Algorithm: sha256WithRSAEncryption
         9f:0b:c4:2a:f8:ce:c4:b3:3e:8e:6a:99:d4:09:25:d8:03:ec:
         93:86:ac:28:0c:fd:ef:a0:6f:36:11:9f:e3:c3:99:73:65:87:
         73:3a:f0:d2:6e:18:28:bc:1a:01:aa:2b:b9:ff:ec:c8:8b:7f:
         ce:e3:ee:b8:51:8b:cc:d7:bf:93:5b:ee:a8:35:bf:1a:1f:66:
         52:33:7e:19:ea:a6:be:f0:75:dd:c8:ae:d9:35:a5:34:c4:08:
         d5:52:e6:b8:b5:63:99:c7:39:54:03:bb:b9:31:b3:a8:fc:20:
         92:2e:78:64:08:f3:c5:ff:91:98:70:ad:eb:2b:87:81:c0:27:
         b6:8e:e0:68:7b:dd:ef:84:69:83:2b:35:32:26:3c:5b:d1:6a:
         e8:30:d8:1d:a6:81:01:6f:b3:04:be:6d:48:a0:6e:1a:36:f0:
         1b:26:84:7b:8b:b2:c0:79:a4:8d:26:ff:24:d8:13:db:6c:49:
         85:87:93:96:29:00:1b:9d:d1:7d:6d:0f:43:0f:f5:5d:f3:a2:
         57:52:04:9f:6e:3e:84:6e:9e:2d:f5:59:fd:cf:dd:ad:9d:ee:
         75:2c:56:39:5c:73:d8:25:06:9e:87:24:0f:41:17:7c:21:2c:
         21:07:67:2f:ab:47:33:c1:55:5c:e1:88:63:3c:c8:5b:06:a9:
         00:49:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org