Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A241D017C20F338021199DDB6542CF566A53BB03.cer
File:                     A241D017C20F338021199DDB6542CF566A53BB03.cer (raw, json)
Hash identifier:          NAAB2k5qccc+QXmyYHNqlCImGmO0HfRYG6Dzx8KSx9g=
Subject key identifier:   A2:41:D0:17:C2:0F:33:80:21:19:9D:DB:65:42:CF:56:6A:53:BB:03
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F53BBC3913763941A8FCCB3143682C91F6D1BA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/A241D017C20F338021199DDB6542CF566A53BB03.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Nov 2022 18:59:01 +0000
Certificate not after:    Thu 09 Nov 2023 19:04:01 +0000
Subordinate resources:    AS: 269509
                          IP: 45.188.120.0/22
                          IP: 2804:65b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:53:bb:c3:91:37:63:94:1a:8f:cc:b3:14:36:82:c9:1f:6d:1b:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 18:59:01 2022 GMT
            Not After : Nov  9 19:04:01 2023 GMT
        Subject: CN=A241D017C20F338021199DDB6542CF566A53BB03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:88:a0:b8:4f:c7:4a:71:eb:ae:de:8e:d6:38:
                    f0:cd:8c:fa:bb:24:8e:17:3d:2f:b7:ad:54:17:8f:
                    5c:c3:43:e2:73:f7:d9:31:64:4f:64:70:b9:b9:a6:
                    e5:49:53:16:3f:94:0c:27:e7:8f:75:a7:eb:85:52:
                    54:d8:d8:2a:7d:60:09:45:aa:90:d6:07:1a:af:92:
                    37:83:01:90:03:3f:0f:ea:14:c5:37:76:66:bb:9c:
                    ef:4a:41:78:7c:e3:05:4d:4c:ef:01:d9:b3:ea:03:
                    f0:3e:f9:b6:58:df:7f:d9:b0:0d:22:3f:46:c3:e1:
                    3b:83:dc:31:96:a7:aa:cb:f2:6c:2e:32:53:8e:24:
                    03:19:1c:83:6c:24:08:bc:52:15:ad:5b:9b:15:85:
                    89:67:45:ea:4a:78:dc:06:7f:99:98:27:8c:38:1e:
                    1d:a2:0f:7c:41:e4:d7:5b:5b:59:db:bf:92:36:a4:
                    ed:8c:f8:e7:18:e5:20:d2:5b:79:b9:ac:9c:7e:15:
                    a2:f8:59:bf:e9:93:ca:5a:a9:d2:c5:ad:11:01:33:
                    f1:86:61:1f:ef:78:9a:b6:a1:39:55:09:ca:e4:2d:
                    7a:0c:aa:cb:04:0e:a8:8a:8f:85:00:cd:ad:89:a9:
                    fe:9b:97:54:df:d2:19:f4:b1:66:16:3e:9c:c3:71:
                    e0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:41:D0:17:C2:0F:33:80:21:19:9D:DB:65:42:CF:56:6A:53:BB:03
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2nvxQgRJP5Pt1JxoGCbQw5AkB2yr6VEcfKt6KKKU54XD/0/A241D017C20F338021199DDB6542CF566A53BB03.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.120.0/22
                IPv6:
                  2804:65b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269509

    Signature Algorithm: sha256WithRSAEncryption
         4b:61:1c:58:57:11:df:a2:81:70:05:e6:26:d4:a0:f6:96:e2:
         9f:3c:35:90:8e:30:a1:95:db:e9:cb:e0:b6:37:cf:be:de:dd:
         73:a7:d4:08:34:f0:be:4b:ac:60:36:3a:31:fa:f4:2c:35:89:
         74:d0:2d:5e:95:69:9c:0d:68:b3:e5:b9:ee:3e:f1:05:54:14:
         cb:d4:75:71:9b:48:fd:92:86:fb:d6:cc:32:91:a7:18:49:44:
         2d:91:06:9b:e0:f9:c5:43:b1:de:4b:51:93:13:bd:49:56:4a:
         f3:0e:5f:20:04:7d:bd:1f:66:8e:8d:4f:d4:b3:88:cf:54:9d:
         9f:04:7b:b0:29:3a:62:f3:28:cc:3c:27:fe:73:39:f3:a9:04:
         be:45:74:96:03:5a:0b:f7:f2:b5:d7:c7:fe:84:d7:f1:b4:90:
         ac:e0:5b:b3:42:ae:4d:22:d9:d9:fa:e3:a6:38:51:39:34:48:
         e9:f4:dc:4d:41:dd:c2:17:ba:c7:22:fe:d3:24:c0:bb:73:81:
         76:33:25:4c:20:1f:f2:1b:6f:30:d5:ac:16:7d:b6:64:8d:d7:
         86:4b:5e:b4:13:3e:a6:0b:7a:9c:17:7f:19:a3:4c:44:17:36:
         32:34:40:ef:27:12:3d:81:be:6d:aa:5f:61:3a:e1:cb:df:87:
         d3:e8:0e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org