Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A0579459EC0798D04F7069512F964BDBFDFEB1B5.cer
File:                     A0579459EC0798D04F7069512F964BDBFDFEB1B5.cer (raw, json)
Hash identifier:          TMZ09xd4Df4SJzYd9DcBgo5cByonnWh0wV0qlZcZyfw=
Subject key identifier:   A0:57:94:59:EC:07:98:D0:4F:70:69:51:2F:96:4B:DB:FD:FE:B1:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C315B296A9C8C381380E1F948A4D6ECAE0725DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/0/A0579459EC0798D04F7069512F964BDBFDFEB1B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 17:34:15 +0000
Certificate not after:    Wed 03 Apr 2024 17:39:15 +0000
Subordinate resources:    AS: 268109
                          IP: 45.168.128.0/22
                          IP: 2804:5824::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:31:5b:29:6a:9c:8c:38:13:80:e1:f9:48:a4:d6:ec:ae:07:25:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  5 17:34:15 2023 GMT
            Not After : Apr  3 17:39:15 2024 GMT
        Subject: CN=A0579459EC0798D04F7069512F964BDBFDFEB1B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:4a:f5:e8:7a:a4:bc:cb:11:33:00:9a:d4:fc:
                    73:23:51:79:1f:25:44:a4:da:ff:bd:ed:0f:19:cd:
                    05:59:a7:9e:dc:f9:ae:66:e0:de:12:c9:98:bb:80:
                    43:43:9d:7e:8d:e2:f0:4e:5f:3b:1f:96:b6:39:7b:
                    c6:97:f8:f0:98:5a:8a:a5:49:70:1a:09:35:d7:76:
                    23:c4:16:49:fb:dc:4e:f4:f7:74:c7:25:36:b5:fc:
                    8e:0f:cf:43:12:72:77:79:32:9f:5c:fa:73:e8:92:
                    5f:b5:3d:e4:ad:a3:3a:89:88:6c:70:9d:25:3a:32:
                    26:62:fb:bb:0b:e9:8a:4f:2b:a3:72:d3:b6:48:93:
                    4e:fe:79:0b:0e:61:9f:82:ee:30:60:79:a7:7f:0d:
                    0c:8e:c1:f3:fe:7b:63:b3:29:4e:6b:fd:4d:cc:19:
                    7c:96:c1:80:05:de:8d:b7:9f:ee:90:c4:61:3c:5a:
                    e1:e0:74:be:58:5a:92:1a:71:6d:93:cc:ba:40:4b:
                    fc:c9:5a:1a:97:06:16:83:d3:59:b2:ac:48:03:29:
                    b5:36:34:99:34:e8:08:4f:5a:b6:ed:15:14:39:82:
                    dc:05:61:6b:db:64:43:0d:2b:93:99:f8:bb:96:78:
                    86:76:c1:dc:57:b8:db:a2:30:91:cb:9b:bc:ba:b8:
                    9a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:57:94:59:EC:07:98:D0:4F:70:69:51:2F:96:4B:DB:FD:FE:B1:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/PMASVrc8Aymys473wqEAxugSPEZHkRAv5rmLNC6ZoAS/0/A0579459EC0798D04F7069512F964BDBFDFEB1B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.128.0/22
                IPv6:
                  2804:5824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268109

    Signature Algorithm: sha256WithRSAEncryption
         91:61:ba:76:6f:66:25:e8:a7:18:23:87:d8:ac:55:98:b9:62:
         f0:06:72:24:12:0d:02:5a:bb:0f:12:a0:45:85:d3:bd:cb:c0:
         12:e5:1d:af:10:51:b6:e6:75:b3:4b:77:6b:d3:04:02:bf:23:
         9b:2e:64:95:17:da:82:ae:c3:c1:47:c9:54:42:18:b5:e4:ed:
         67:30:18:95:ab:ed:d1:ae:5f:3a:7e:c5:d8:f6:95:75:29:82:
         2e:e4:bf:c7:42:40:79:4d:05:bd:31:e0:02:41:fc:36:9c:7d:
         21:9c:e4:96:9e:bc:99:cf:b9:1b:c7:13:23:52:fe:2c:32:7b:
         1d:0b:f8:8c:e1:30:17:c7:21:77:ec:4d:a0:e3:c6:8b:3c:5f:
         f4:9b:08:58:69:6f:c1:b3:36:7d:34:84:46:0c:a9:2b:b1:42:
         6a:8e:3b:08:3e:9c:ec:8d:80:6d:ec:36:e9:43:c6:af:55:86:
         41:c4:94:10:71:91:af:14:65:ff:69:5d:dd:a7:ec:20:5b:5b:
         32:08:5a:56:98:8f:ce:70:27:4c:54:25:4a:a7:76:91:db:7c:
         c0:0a:31:48:db:92:37:f7:ce:7f:c9:28:e7:d6:4a:10:67:38:
         05:95:de:14:ef:bf:fe:77:ad:3c:f6:72:ab:2e:92:37:5b:1c:
         fe:83:09:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org