Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/928AC495DA09D88A3B9ECB22758AFD89A7AA482F.cer
File:                     928AC495DA09D88A3B9ECB22758AFD89A7AA482F.cer (raw, json)
Hash identifier:          Y7mWl9e5KvW8dReSrlyaiYSX8fqAfuXj4nBziV6Mam4=
Subject key identifier:   92:8A:C4:95:DA:09:D8:8A:3B:9E:CB:22:75:8A:FD:89:A7:AA:48:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A1194F77A8E3ABFD5BFA76D6A5DCA96DB460DD7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/0/928AC495DA09D88A3B9ECB22758AFD89A7AA482F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 02:53:59 +0000
Certificate not after:    Sat 10 Aug 2024 02:58:59 +0000
Subordinate resources:    AS: 268533
                          IP: 45.162.224.0/22
                          IP: 2804:52ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:11:94:f7:7a:8e:3a:bf:d5:bf:a7:6d:6a:5d:ca:96:db:46:0d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 12 02:53:59 2023 GMT
            Not After : Aug 10 02:58:59 2024 GMT
        Subject: CN=928AC495DA09D88A3B9ECB22758AFD89A7AA482F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e8:a5:8d:40:bb:91:82:7f:5f:6e:71:f2:96:
                    4e:a6:ac:50:d1:53:b1:8e:32:a3:38:c9:61:f8:f5:
                    3e:96:65:e7:cf:0b:96:37:a2:a9:94:6b:b7:f0:28:
                    05:1c:08:da:97:80:be:3d:e1:49:f8:88:fa:2a:e1:
                    75:f4:25:88:c1:b1:e9:09:2a:48:20:b7:1d:87:92:
                    12:57:f4:f4:07:76:9b:60:f2:ae:f2:f0:23:f0:0c:
                    99:c6:9c:fc:b2:0e:8b:98:48:89:b8:4e:ef:d0:8c:
                    32:a3:c2:a3:a3:98:eb:00:54:2f:74:46:73:75:3f:
                    14:8c:c2:9a:00:f2:10:a2:6b:25:b0:d6:d5:1c:96:
                    a4:ef:f9:2d:52:de:5d:a0:92:a8:0d:0d:08:83:80:
                    b2:71:bc:59:18:dc:de:8a:f7:e1:3f:6f:0f:d8:c2:
                    d9:33:f8:25:ae:09:6b:97:b4:bc:bd:a9:08:79:79:
                    32:e0:49:99:fe:0c:7d:fd:ab:e2:3a:0e:52:33:62:
                    39:c1:f5:6b:b3:14:f0:77:3a:80:e0:93:90:4a:8e:
                    cf:ae:69:75:20:f9:de:38:c4:de:a8:6a:7b:61:b2:
                    82:e9:ab:70:36:86:5d:19:21:4f:06:53:5a:b8:96:
                    8f:cd:ef:35:9d:b0:bf:78:36:9c:e5:51:47:6c:6c:
                    67:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:8A:C4:95:DA:09:D8:8A:3B:9E:CB:22:75:8A:FD:89:A7:AA:48:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gdehe68K2ueR4hWQ5U5bpCgZcX27pRJRJYPFDnA2d4KR/0/928AC495DA09D88A3B9ECB22758AFD89A7AA482F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.224.0/22
                IPv6:
                  2804:52ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268533

    Signature Algorithm: sha256WithRSAEncryption
         89:d2:7d:50:20:65:46:95:cf:32:10:fb:49:63:6d:61:fb:ec:
         02:4e:1c:36:76:5b:ea:fe:07:67:35:9a:45:8b:23:e9:ff:42:
         15:e6:ed:5d:ab:ac:57:24:c6:35:46:94:14:51:4a:28:fa:34:
         e5:3f:69:30:b7:12:2a:a6:70:f0:b4:d1:42:56:1b:6f:41:61:
         ee:98:e4:18:23:ad:f0:c6:a5:b9:da:23:1e:c6:4b:73:20:32:
         f5:c9:f6:8b:de:d8:8d:84:20:f0:17:42:bf:86:db:58:90:e6:
         f9:76:60:52:db:db:ec:ad:2c:ee:c7:88:18:eb:5b:d5:53:c3:
         1f:7f:c0:8c:35:c3:ea:d3:84:cd:e5:7d:9f:56:eb:a0:ff:00:
         0e:da:fb:fb:07:f4:08:32:6e:29:09:25:a8:ba:cc:21:e1:d8:
         d1:e1:e7:43:59:56:20:9a:92:a7:10:77:b6:7b:15:d7:c4:33:
         65:08:e4:52:06:22:2a:d2:09:53:5d:ed:69:4d:e1:8b:74:79:
         8a:55:29:da:8c:94:cb:15:9f:23:c8:4d:a2:dd:43:47:03:aa:
         77:b1:98:86:1e:65:2c:35:26:0b:c4:f1:90:5d:b5:59:3d:0f:
         05:c6:ee:48:45:b1:1c:ae:cb:5f:a7:43:a7:d1:97:fb:39:c1:
         26:bf:da:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org