Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/94A3DB62B012EF07C9AFE1762646CC714080A576.cer
File:                     94A3DB62B012EF07C9AFE1762646CC714080A576.cer (raw, json)
Hash identifier:          fVrr2t5e5eMU8UNZMkdwzyWmPJB3l5cSe+QJjby7JJ4=
Subject key identifier:   94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B0DF4F54A7B1F51DE3AA1619CABB32A54694F97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/94A3DB62B012EF07C9AFE1762646CC714080A576.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 15:51:40 +0000
Certificate not after:    Fri 25 Oct 2024 15:56:40 +0000
Subordinate resources:    AS: 268088
                          IP: 45.168.100.0/22
                          IP: 2804:57d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:0d:f4:f5:4a:7b:1f:51:de:3a:a1:61:9c:ab:b3:2a:54:69:4f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 27 15:51:40 2023 GMT
            Not After : Oct 25 15:56:40 2024 GMT
        Subject: CN=94A3DB62B012EF07C9AFE1762646CC714080A576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:c9:fd:25:67:0d:04:7c:6b:1d:9c:3c:2c:
                    15:b7:55:cd:68:0d:63:5e:40:98:30:90:02:aa:f4:
                    78:3a:5f:83:95:fc:0d:d2:2f:bb:73:05:9d:c5:d7:
                    4f:b6:81:06:96:ee:6b:e7:27:05:0e:05:61:12:50:
                    ad:04:ed:db:35:0f:32:9e:e2:78:6b:20:cf:e5:3c:
                    29:53:60:40:4b:0d:c7:93:06:aa:58:cd:67:4f:80:
                    35:29:ff:58:1e:11:02:0b:fd:2b:29:32:20:c7:1c:
                    37:fc:df:57:7b:7c:b1:54:10:01:df:ce:1e:61:61:
                    3f:9a:9e:0f:ee:f9:b7:95:1c:58:1a:38:7c:ff:2a:
                    ad:72:a1:5e:15:1a:f7:86:44:1f:2c:1a:ab:45:f3:
                    16:a0:3f:81:ea:6d:74:63:7c:6b:80:a5:cd:7a:e0:
                    30:1c:59:42:62:91:e4:25:e8:6d:10:41:80:14:a8:
                    34:ff:1e:66:f1:09:16:b4:01:ad:9e:55:08:17:07:
                    24:0a:ab:d1:77:cf:a9:38:ce:ca:b4:41:b3:d8:22:
                    55:fb:43:43:d1:c0:45:a5:a3:ae:4f:07:28:3c:54:
                    42:c8:d4:20:df:80:41:b0:bc:45:54:32:9e:f9:4f:
                    44:1d:1f:c5:ef:5a:c2:62:15:62:71:27:1e:63:29:
                    ab:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:A3:DB:62:B0:12:EF:07:C9:AF:E1:76:26:46:CC:71:40:80:A5:76
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/94A3DB62B012EF07C9AFE1762646CC714080A576.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.100.0/22
                IPv6:
                  2804:57d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268088

    Signature Algorithm: sha256WithRSAEncryption
         9f:45:d6:07:5e:8c:65:aa:5d:4b:50:6a:cc:a5:dd:be:a9:a6:
         a8:2b:19:41:22:26:24:fa:90:f8:95:4a:07:1e:9d:88:35:28:
         b5:28:cd:37:1e:4d:86:fa:b6:f0:82:c6:6e:5e:59:26:93:fb:
         ea:8f:c2:f6:8d:63:ad:97:45:8c:6a:fa:40:19:c2:68:da:0e:
         5e:41:5b:67:70:67:75:b9:f6:40:fe:c4:68:38:88:7c:7f:6f:
         14:49:a4:cc:55:b7:73:be:dd:12:20:72:ad:f9:d4:ba:98:b6:
         64:d2:03:fc:71:e0:56:9e:c0:3e:63:cf:a3:63:86:c1:92:3b:
         e7:4e:b0:28:56:ae:ec:30:c2:65:f9:16:45:29:a5:5c:31:c3:
         36:c0:93:b0:38:d0:0f:23:8c:f9:20:2a:68:c2:69:f3:66:c6:
         82:77:db:72:93:e5:de:ba:52:60:92:d2:8f:01:8b:b8:ff:19:
         c3:f9:d4:81:10:2a:da:32:c0:36:ea:94:18:dd:fb:a8:df:9a:
         27:fe:3e:b1:12:72:e7:69:99:a1:c4:89:99:84:9b:1f:fe:1f:
         f8:70:7d:bf:1c:66:fb:09:d3:4e:9a:15:14:32:92:99:0b:44:
         4a:4a:ac:c4:bf:6b:1e:c1:df:9c:14:18:ba:d3:48:4c:33:2b:
         ce:7b:3b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org