Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/925D7915C118C67C435168D22CBFB7B5EE13F53D.cer
File:                     925D7915C118C67C435168D22CBFB7B5EE13F53D.cer (raw, json)
Hash identifier:          lPG777s/atiwG/8WVx8W6RtH0lN7MJZUb/70CwU9UNo=
Subject key identifier:   92:5D:79:15:C1:18:C6:7C:43:51:68:D2:2C:BF:B7:B5:EE:13:F5:3D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34F57922496B241EC80DB5ABB65303A76B50E653
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/925D7915C118C67C435168D22CBFB7B5EE13F53D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Mar 2023 02:39:15 +0000
Certificate not after:    Mon 25 Mar 2024 02:44:15 +0000
Subordinate resources:    AS: 270409
                          IP: 190.89.196.0/22
                          IP: 2804:6b94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f5:79:22:49:6b:24:1e:c8:0d:b5:ab:b6:53:03:a7:6b:50:e6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 27 02:39:15 2023 GMT
            Not After : Mar 25 02:44:15 2024 GMT
        Subject: CN=925D7915C118C67C435168D22CBFB7B5EE13F53D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1a:15:fe:b0:f6:78:41:56:7c:8a:ea:67:0a:
                    c1:2c:4d:d1:d8:e8:ff:25:87:c0:57:ce:ec:46:91:
                    bd:b8:bc:fa:69:dd:82:6e:b2:2b:e7:80:8f:2c:ab:
                    ca:73:69:60:5e:7f:bd:15:a5:ba:16:02:3b:26:ee:
                    90:c4:f8:b0:17:6a:f0:9e:7e:d8:f3:7d:1c:20:d7:
                    33:81:8d:e2:6a:ec:94:1e:5e:59:1e:b9:ae:a9:ea:
                    0f:df:cb:3f:37:c5:fd:0a:27:16:2a:11:f4:2c:32:
                    a0:f6:b0:4b:d8:61:e1:48:72:3c:73:25:8f:d2:ed:
                    ff:dc:a5:41:71:82:cc:19:01:06:bd:04:9f:20:5b:
                    a4:36:6a:56:f5:4b:8c:52:bc:44:c4:e1:17:5a:b5:
                    58:23:84:e1:bb:80:90:8a:e4:ac:3b:a5:73:35:e2:
                    5e:dd:73:7a:b4:07:21:a1:f1:1f:0c:5c:d4:fb:d7:
                    0c:fa:a7:be:ad:65:08:01:94:96:ef:4e:93:ae:02:
                    40:eb:05:6a:41:1b:6a:97:0b:ed:ec:b5:f3:a5:5e:
                    64:19:d4:0a:2c:37:a6:cb:a3:88:a0:c1:37:aa:d0:
                    d2:6c:67:02:0b:79:9e:96:86:9f:c5:03:4f:26:4e:
                    54:ef:95:f9:d3:8e:2b:dd:34:c0:1e:b1:de:52:fe:
                    e0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:5D:79:15:C1:18:C6:7C:43:51:68:D2:2C:BF:B7:B5:EE:13:F5:3D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7F1ySewvxUkhKbCFewPiNFS1mGq5NzjaxaXNdhBEzApa/0/925D7915C118C67C435168D22CBFB7B5EE13F53D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.196.0/22
                IPv6:
                  2804:6b94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270409

    Signature Algorithm: sha256WithRSAEncryption
         67:1f:93:f0:9e:47:09:53:e2:ea:6b:58:54:da:5d:1a:b2:57:
         4c:12:4b:90:a6:33:f7:e4:db:ef:57:4b:70:88:15:d4:c8:30:
         48:7a:ec:27:05:05:a4:e6:fb:86:88:45:af:d5:cf:20:7a:30:
         85:39:fa:3a:0a:49:0d:ac:10:37:79:96:21:37:0e:cc:a5:54:
         1f:88:c6:37:de:d3:24:84:11:23:d3:37:3f:26:7d:d4:50:b1:
         58:c3:ab:72:79:c9:65:ba:e6:91:ed:48:d8:b2:a7:5d:07:f2:
         94:4b:1c:d9:38:6e:88:83:87:e3:77:a1:77:7e:d7:23:6c:42:
         0e:d9:01:75:84:92:b5:6c:f7:bc:3f:ff:ec:aa:02:4a:54:3e:
         bc:9a:f1:2d:c4:da:2e:54:78:7c:8f:17:d8:88:c3:f6:d8:2d:
         64:3d:bb:64:4b:7e:05:10:16:a6:d6:79:10:1c:9f:3b:0c:b5:
         68:6d:0f:6b:93:19:60:ca:5b:58:00:12:2c:93:a6:05:a3:63:
         a7:fb:3c:c8:c1:10:e9:cf:ce:bb:0a:b9:9a:19:a0:96:79:74:
         da:03:b8:cc:03:2a:72:85:be:4e:6f:9b:3d:cb:79:56:fa:22:
         e4:68:13:c1:b4:51:5d:5c:f1:f3:2d:8d:39:d7:07:98:25:79:
         d9:3f:7c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org