Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/94C6E2BC8A593186A05AABF5BE9B822B31F189AA.cer
File:                     94C6E2BC8A593186A05AABF5BE9B822B31F189AA.cer (raw, json)
Hash identifier:          3Nxztc/BmVqxi2mlLvdbEpwjCOBlImCQ/klkBNR/SZM=
Subject key identifier:   94:C6:E2:BC:8A:59:31:86:A0:5A:AB:F5:BE:9B:82:2B:31:F1:89:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56109CBEFD5412E14C2C74C5A4E5DA73675EFBF0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/94C6E2BC8A593186A05AABF5BE9B822B31F189AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Jun 2023 03:06:22 +0000
Certificate not after:    Thu 06 Jun 2024 03:11:22 +0000
Subordinate resources:    AS: 270348
                          IP: 190.83.28.0/22
                          IP: 2801:80:38b0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:10:9c:be:fd:54:12:e1:4c:2c:74:c5:a4:e5:da:73:67:5e:fb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  8 03:06:22 2023 GMT
            Not After : Jun  6 03:11:22 2024 GMT
        Subject: CN=94C6E2BC8A593186A05AABF5BE9B822B31F189AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:54:fe:b2:30:5c:45:48:e6:8c:6e:37:51:
                    4b:67:39:0a:31:93:91:2c:28:8f:7f:4a:0c:be:21:
                    f1:08:2e:db:d8:58:8f:92:5f:2c:86:f6:46:5d:97:
                    e9:bc:1e:20:28:db:d5:2b:7b:24:23:11:5d:fb:d1:
                    3b:cc:2d:ac:57:20:2c:67:0a:85:a5:89:a9:05:95:
                    37:c4:3a:14:b0:a7:16:76:59:74:a1:0d:6d:2f:2b:
                    96:f9:b0:3e:1d:ab:10:cd:99:be:64:b6:3c:2e:fc:
                    1b:39:fc:01:d5:4c:ff:0d:e9:ec:ef:22:5c:d5:fc:
                    02:f4:79:17:38:56:35:7c:d4:1c:b9:39:d7:ad:17:
                    4c:69:b4:a3:2c:48:93:2e:44:18:e4:30:ef:a8:c6:
                    22:3d:45:25:b1:a3:cd:30:7d:81:bf:67:cf:9e:f0:
                    ef:cd:ac:52:d2:02:3a:29:ee:bf:c1:0d:1a:2a:51:
                    30:a4:60:f5:7b:af:23:7b:09:3c:2d:60:55:6d:7f:
                    42:cf:e2:95:2a:26:85:14:fb:bd:c3:f8:11:4f:b2:
                    e3:f2:b0:55:24:7a:79:3d:2e:13:19:56:d1:4f:af:
                    c5:09:da:06:1d:f6:5d:af:2f:4c:8f:6d:be:df:ba:
                    83:ca:17:1b:38:cd:4f:4b:c0:9c:48:6d:0e:fa:1b:
                    00:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:C6:E2:BC:8A:59:31:86:A0:5A:AB:F5:BE:9B:82:2B:31:F1:89:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gdj8AffWnxhaqjsPTizm4q4euDHdCF42JcnnJAojbQnM/0/94C6E2BC8A593186A05AABF5BE9B822B31F189AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.28.0/22
                IPv6:
                  2801:80:38b0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270348

    Signature Algorithm: sha256WithRSAEncryption
         01:25:64:11:cc:bc:80:57:a1:a5:23:1c:20:e1:01:7c:ad:f2:
         fe:2a:74:31:fd:8d:24:21:ae:83:3d:f4:9e:cb:bc:02:d4:df:
         e1:06:d7:70:b6:f9:a4:98:0e:df:b2:f1:38:07:df:22:d0:6c:
         6a:86:b1:10:4c:59:e0:3c:5d:79:8a:19:51:12:ab:de:54:bf:
         20:fe:76:a6:8b:fe:fa:b9:c1:47:89:65:48:eb:07:25:9c:ea:
         9f:04:47:58:0a:f4:15:fd:73:48:ca:4c:e6:bc:a0:58:19:87:
         c2:95:fa:5a:8d:f4:b8:97:7e:4e:4a:ad:7e:e7:b0:87:76:d0:
         18:ed:51:3e:ce:83:16:77:ff:84:9b:1f:f4:69:af:8e:0c:31:
         bb:cb:6b:5a:15:38:07:bf:c6:ed:83:f9:a5:32:a1:ef:86:7e:
         fa:f1:26:8a:67:26:03:28:3a:66:b6:b1:62:b7:51:43:96:0b:
         8b:20:e8:a4:1d:fb:56:b2:27:74:6d:dc:51:ba:fb:26:c4:8c:
         61:85:6b:30:f6:5c:e0:59:db:1b:64:1f:0e:89:e2:b1:55:ed:
         03:16:b2:0c:dc:e0:e1:21:a3:24:58:27:73:f2:a1:19:33:68:
         45:9c:ea:85:1a:e3:63:d0:ce:ba:56:a0:2c:45:28:03:a1:81:
         53:24:83:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org