Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.cer
File:                     A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.cer (raw, json)
Hash identifier:          Hxuxk32zB5h4xGVZClAzJP01gdCME4tvIyqQGI3T/Qc=
Subject key identifier:   A0:DF:EF:14:E3:F2:CB:DD:1D:3E:4A:85:DD:8E:9E:66:94:FC:CE:DF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53A0743E678B42C2D41ADBDC43B52D656E900ED1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Oct 2022 20:25:11 +0000
Certificate not after:    Tue 24 Oct 2023 20:30:11 +0000
Subordinate resources:    AS: 266984
                          IP: 45.226.76.0/22
                          IP: 2804:4658::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a0:74:3e:67:8b:42:c2:d4:1a:db:dc:43:b5:2d:65:6e:90:0e:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 20:25:11 2022 GMT
            Not After : Oct 24 20:30:11 2023 GMT
        Subject: CN=A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0c:d0:74:27:55:8a:3d:9d:9e:4a:b3:5e:38:
                    c7:91:d3:94:c5:0a:c7:3b:93:e0:b3:1c:cd:60:33:
                    60:e1:1d:4d:29:3a:8a:b6:fa:9b:eb:e4:c7:58:f4:
                    af:49:f1:f1:1e:8d:d9:13:21:cc:66:a9:56:c4:ad:
                    0e:a5:ed:68:88:4e:9a:be:9c:f2:6b:1c:62:99:1a:
                    b1:17:42:3c:06:c9:5d:9a:9b:a1:9c:29:fc:2d:02:
                    da:63:11:a9:ce:a4:2f:4d:16:fe:17:af:31:75:3b:
                    39:b1:41:d4:7c:4b:b4:21:bd:37:56:dc:88:85:aa:
                    99:4c:c5:34:ce:f3:d1:55:31:02:6d:45:3a:63:f0:
                    d8:5c:fd:a9:f4:68:c6:7b:c6:ce:5c:4f:5d:d5:68:
                    12:c9:82:0f:9b:ac:fd:bd:76:b1:bf:15:e1:42:46:
                    cf:43:4d:43:0f:69:b4:9b:61:4e:3f:e0:b0:62:e1:
                    03:dd:09:6a:2a:fe:36:e3:63:d5:51:ee:a0:9c:2c:
                    48:d0:ea:58:4c:95:51:d5:fd:62:5e:d6:af:be:ae:
                    b8:2f:33:34:c2:8d:24:da:67:7d:df:32:2f:b9:a7:
                    47:ac:d4:ba:6f:b3:23:a6:0e:47:be:bc:a7:19:3d:
                    75:e7:2b:38:77:c9:8e:5b:7b:61:b3:4e:5e:46:ed:
                    48:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:DF:EF:14:E3:F2:CB:DD:1D:3E:4A:85:DD:8E:9E:66:94:FC:CE:DF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BRccY9j3NLHySbZfi1EtDmVjG5a2rPKEUaPzyNxthMtF/0/A0DFEF14E3F2CBDD1D3E4A85DD8E9E6694FCCEDF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.76.0/22
                IPv6:
                  2804:4658::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266984

    Signature Algorithm: sha256WithRSAEncryption
         b7:74:9e:8d:d7:a8:05:49:34:e3:6c:ea:b2:a6:be:a4:06:86:
         60:d8:35:49:f2:ba:59:98:4b:4c:22:4f:af:eb:bc:1f:78:7a:
         cd:b8:eb:bc:c6:87:04:cc:2d:6a:47:68:dd:6c:33:35:24:47:
         cf:d3:1a:84:d5:4b:ff:67:eb:6c:84:2f:8a:7f:c4:de:ce:47:
         1a:ce:fe:92:c8:68:9a:2d:f5:19:01:01:fa:a9:03:48:0e:7e:
         f3:d3:24:01:0d:e3:c8:1e:80:47:d7:b2:8c:7e:50:61:8d:4e:
         c4:d1:a7:01:38:c3:9c:71:7e:8a:4d:f8:93:bd:35:60:8c:93:
         87:cb:c5:79:d5:8e:93:52:14:91:3d:a7:4e:71:58:45:49:fc:
         5c:57:f3:2f:75:7b:b2:fc:0c:76:73:ea:72:aa:bf:a8:a0:1b:
         23:b4:8d:ac:f0:99:f2:9a:bc:e0:b7:7b:b2:b2:4e:57:a7:31:
         2d:c2:8b:65:6b:8e:2a:b5:e7:05:32:b8:52:53:9d:f7:99:dc:
         67:85:37:6f:fb:53:45:0f:bb:db:01:6e:23:1e:93:6c:00:b4:
         33:7f:af:fc:55:18:0f:32:15:8b:d8:9d:89:47:15:63:8e:b0:
         ea:0b:99:fd:36:0d:eb:5e:fb:2c:20:8d:97:16:ed:1d:a0:8e:
         53:90:79:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org