Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/955D59974354A330DF6AD92E0CB427EF424D2CA2.cer
File:                     955D59974354A330DF6AD92E0CB427EF424D2CA2.cer (raw, json)
Hash identifier:          BKSHagnmDsidTylnlVj71gqpOfK5+M04K/hzJI7SPsw=
Subject key identifier:   95:5D:59:97:43:54:A3:30:DF:6A:D9:2E:0C:B4:27:EF:42:4D:2C:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       48136619A3A84AEF40CE32566825E758D059DBEE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/955D59974354A330DF6AD92E0CB427EF424D2CA2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 17:47:14 +0000
Certificate not after:    Thu 13 Feb 2025 17:52:14 +0000
Subordinate resources:    AS: 271297
                          IP: 45.229.136.0/24
                          IP: 192.231.175.0/24
                          IP: 2804:794c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:13:66:19:a3:a8:4a:ef:40:ce:32:56:68:25:e7:58:d0:59:db:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 17:47:14 2024 GMT
            Not After : Feb 13 17:52:14 2025 GMT
        Subject: CN=955D59974354A330DF6AD92E0CB427EF424D2CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:5e:1a:69:d9:73:a0:72:a2:c3:e3:ec:65:
                    f7:1b:0c:4b:ff:e5:ba:e2:e9:6f:48:3c:03:6b:7c:
                    43:27:6b:8b:90:ca:9e:12:a2:a9:79:fa:18:87:4f:
                    f4:8d:b7:74:cc:6a:55:18:b4:f9:4f:6d:5e:9c:31:
                    fd:2a:00:2a:08:22:8f:0d:68:f9:4b:32:cd:ed:1b:
                    d1:4d:19:8c:16:53:3c:98:09:f9:1c:45:4f:b2:6a:
                    09:ca:56:a3:63:5e:0b:87:64:72:39:d4:6a:02:21:
                    59:ba:45:17:2a:73:68:83:bf:89:71:5b:3d:bc:6b:
                    a0:82:7d:be:4f:72:b6:2c:8d:45:1c:cf:51:f1:3f:
                    56:59:7f:58:73:82:40:51:5f:dd:eb:0f:c8:f8:a5:
                    8f:34:5f:15:3d:d7:86:f0:df:80:0d:89:de:ff:88:
                    4e:d3:23:2f:04:91:0b:74:86:ac:32:9c:30:74:5d:
                    9e:76:f5:34:c0:4c:e5:30:84:f4:d5:c9:2b:19:a5:
                    28:fc:1b:f2:d4:79:ca:1f:6e:99:52:02:e9:a6:01:
                    bb:75:15:ef:67:bd:0f:68:91:43:56:ce:06:79:8b:
                    35:56:f3:40:8f:cd:9e:ab:86:75:9c:b2:b9:82:6f:
                    32:f6:b0:18:1b:25:46:ac:a9:ac:b2:d5:d0:8b:95:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:5D:59:97:43:54:A3:30:DF:6A:D9:2E:0C:B4:27:EF:42:4D:2C:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7MZEimnaS59E2eAw8h4oXKehr5CYmmMtHXkn1ouAthdQ/0/955D59974354A330DF6AD92E0CB427EF424D2CA2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.136.0/24
                  192.231.175.0/24
                IPv6:
                  2804:794c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271297

    Signature Algorithm: sha256WithRSAEncryption
         b7:f5:7a:ed:97:08:9f:39:3f:5d:1e:ff:dd:79:a3:6a:5a:a0:
         61:2c:ac:c2:5b:31:f0:0f:77:db:af:b0:4a:9c:b7:d2:35:34:
         e4:9e:9c:5a:bb:d9:a0:48:e4:7c:0d:9b:a1:9a:b5:b5:23:61:
         f2:a6:18:d0:5f:75:09:8c:59:df:f4:7d:f9:eb:74:77:63:a9:
         f3:41:1c:eb:27:a6:cc:e2:ff:25:df:bb:ec:05:6e:21:35:4f:
         15:8b:8b:22:02:87:5c:cd:73:7e:23:88:59:5e:d4:2c:5d:f4:
         15:4c:1d:57:05:f4:95:d2:e0:1d:a4:7b:ec:48:d7:57:a5:88:
         77:91:9c:d9:90:90:92:2f:83:96:75:a8:ac:44:dd:0b:c6:80:
         04:f9:ca:14:86:dd:30:cb:c2:ce:bc:d4:49:03:e0:f9:d6:a2:
         84:2a:d5:9d:18:f9:51:98:26:d9:0d:20:d2:2d:83:00:fb:3d:
         df:6f:50:bb:20:21:7f:9f:b3:38:c3:d5:93:44:d1:67:da:8c:
         1f:e5:7c:5f:d8:ed:b0:0c:dd:f0:e8:fa:42:50:b3:7a:07:ce:
         41:08:1b:52:9c:ad:42:c8:c1:79:13:3d:46:49:8b:5e:f7:b3:
         44:cd:8d:27:6e:3f:01:dd:65:42:a5:2d:d9:58:c1:aa:0a:4b:
         4e:ab:13:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org