Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/997803E7A2CCE603DA65F15F6AFC1C56EC37B08D.cer
File:                     997803E7A2CCE603DA65F15F6AFC1C56EC37B08D.cer (raw, json)
Hash identifier:          YQajzZKJvOamOoFopptRMEzpjikOVK9dwkDUof0Qf58=
Subject key identifier:   99:78:03:E7:A2:CC:E6:03:DA:65:F1:5F:6A:FC:1C:56:EC:37:B0:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       179333705139A0D904B2D6063CED091E3D92BC96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/997803E7A2CCE603DA65F15F6AFC1C56EC37B08D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Mar 2023 18:46:10 +0000
Certificate not after:    Wed 20 Mar 2024 18:51:10 +0000
Subordinate resources:    AS: 266460
                          IP: 170.82.252.0/22
                          IP: 2804:3828::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:93:33:70:51:39:a0:d9:04:b2:d6:06:3c:ed:09:1e:3d:92:bc:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 18:46:10 2023 GMT
            Not After : Mar 20 18:51:10 2024 GMT
        Subject: CN=997803E7A2CCE603DA65F15F6AFC1C56EC37B08D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:e3:0c:33:92:49:7f:fb:86:8b:9a:78:90:
                    9f:00:ba:c3:5e:d6:07:ab:bb:24:7f:d1:90:04:12:
                    42:c5:5e:c9:8a:f2:86:99:d6:be:51:e7:a5:c8:95:
                    aa:1d:96:92:d6:8a:f3:b1:1d:90:f7:22:22:9b:3b:
                    88:0f:d4:72:9b:24:71:57:21:18:1b:9a:8c:af:47:
                    52:53:78:69:40:4b:e7:4d:5c:43:ba:b5:2f:ab:ec:
                    43:ed:f8:76:ef:40:7b:59:a8:9d:ff:cb:e9:ea:db:
                    9b:7e:97:b8:06:bc:e4:7b:62:8d:33:51:55:ad:cd:
                    70:cd:af:e0:4c:d1:07:93:84:46:d8:8e:eb:fb:20:
                    5c:c8:0e:63:e0:e9:94:08:9f:30:b3:8f:fd:ab:29:
                    b7:7e:3e:23:68:fa:2c:28:94:4d:78:ac:89:3c:b5:
                    84:f8:e6:e3:ad:ef:73:20:ca:3b:29:a7:0d:e7:c1:
                    df:04:61:df:3f:62:31:c7:ba:f4:e7:25:02:9d:0d:
                    f2:c1:33:cd:e4:8c:9f:31:4f:fd:9e:87:1c:6e:79:
                    d3:33:91:c2:19:a4:02:14:df:7f:50:6d:7c:fa:e5:
                    d7:fd:e1:d6:50:87:3b:d4:c0:26:fa:2f:35:11:4c:
                    60:4f:67:ee:bd:04:36:59:a5:06:bb:28:5a:15:9f:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                99:78:03:E7:A2:CC:E6:03:DA:65:F1:5F:6A:FC:1C:56:EC:37:B0:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4JiPpcd4YGQfDynhsP5SuX17RHUDVpTdrdK6ffErFhVe/0/997803E7A2CCE603DA65F15F6AFC1C56EC37B08D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.252.0/22
                IPv6:
                  2804:3828::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266460

    Signature Algorithm: sha256WithRSAEncryption
         10:dd:69:14:e5:01:ba:ef:a7:41:74:4e:9e:83:50:23:65:8f:
         e5:3d:58:56:6c:84:3f:56:55:b9:e9:11:01:ac:cf:ef:2f:17:
         43:7a:bd:aa:4e:43:0d:15:dc:d1:ae:ed:cd:4f:61:e8:8a:e6:
         3f:1a:b0:a0:66:50:6a:70:be:81:d0:7b:88:55:c2:82:18:ee:
         cc:7a:cf:6f:2c:ef:eb:ce:41:d7:9c:4c:a5:3d:02:f1:0b:12:
         bd:c8:0b:56:8c:a1:7a:9f:c0:22:38:fd:59:0f:85:2f:ef:e9:
         28:50:d8:2b:61:b1:b4:be:e0:56:03:0c:70:35:e5:bc:dc:14:
         e4:b0:50:1c:dc:81:a7:35:c3:b2:bc:26:3e:54:02:ae:f6:2a:
         51:1d:4b:07:9f:a9:e9:9c:f2:f1:1b:2c:83:3c:e3:b7:bd:cc:
         f6:6c:b7:1e:5d:9d:99:37:57:9a:66:99:0e:b0:bb:88:b3:39:
         75:a2:9b:35:61:92:ef:05:09:1e:b6:b8:02:3b:b8:ae:7c:6d:
         8b:16:6d:af:c2:0c:40:f7:10:1c:0f:1f:06:5c:5c:69:ea:95:
         9e:b8:b4:68:ed:33:b5:05:b2:1d:2c:6c:e1:12:9a:24:23:79:
         85:7f:5d:6b:88:28:9d:a1:ea:69:d8:ee:d4:40:4e:fa:65:58:
         dc:7e:e1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org