Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A257660CD1CA45A9DB85ABBEFCF8FA151B1B6C3A.cer
File:                     A257660CD1CA45A9DB85ABBEFCF8FA151B1B6C3A.cer (raw, json)
Hash identifier:          LQTJOW9t9N9eS3tebAEsumPl553j8MKvnn4QEq83Eg8=
Subject key identifier:   A2:57:66:0C:D1:CA:45:A9:DB:85:AB:BE:FC:F8:FA:15:1B:1B:6C:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D969C09FCCD6F1A5AC58DE151C0FA5A6814A4AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/A257660CD1CA45A9DB85ABBEFCF8FA151B1B6C3A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Sep 2022 01:11:28 +0000
Certificate not after:    Fri 08 Sep 2023 01:16:28 +0000
Subordinate resources:    AS: 267170
                          IP: 45.230.52.0/22
                          IP: 2804:4934::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:96:9c:09:fc:cd:6f:1a:5a:c5:8d:e1:51:c0:fa:5a:68:14:a4:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  9 01:11:28 2022 GMT
            Not After : Sep  8 01:16:28 2023 GMT
        Subject: CN=A257660CD1CA45A9DB85ABBEFCF8FA151B1B6C3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:e8:02:a8:86:ca:58:08:6d:17:00:3c:42:
                    2a:f4:34:4e:27:3e:a1:98:5d:ce:6a:85:6a:25:d6:
                    92:54:39:57:bd:ad:b5:4c:f7:a4:0d:e0:45:13:a4:
                    2c:fc:df:e2:c9:b7:b8:7e:d4:e2:c0:cf:fc:cc:ee:
                    fd:20:f3:73:8a:5b:44:03:ac:88:3c:4a:57:1d:f4:
                    2f:f1:ae:a9:28:c5:10:de:62:21:d3:ea:4e:33:71:
                    de:cf:71:1d:7d:50:69:ae:19:f7:a0:a1:bd:80:fd:
                    76:92:bc:19:b3:4c:38:77:89:70:98:d6:b9:54:4c:
                    db:dd:53:e6:9a:11:8f:46:6f:68:ce:a5:66:82:91:
                    79:77:ed:af:1b:97:24:a6:a5:1b:a7:a0:83:16:6b:
                    a1:03:a6:d2:b0:2b:1c:b4:d6:59:44:74:40:03:48:
                    53:f8:d3:59:0f:db:c6:5e:d3:2a:47:2c:e7:a5:76:
                    a4:93:14:4e:45:39:1a:52:80:0c:42:0a:bf:61:4d:
                    63:09:83:91:ac:6c:7a:61:cc:83:63:00:7a:b0:9f:
                    62:8b:49:2a:bf:d9:7a:15:fc:d7:db:f3:56:29:fe:
                    06:b2:db:be:09:88:a1:f5:87:9d:3d:95:7b:d6:8d:
                    2f:29:cd:c5:30:f9:27:6c:c5:d1:09:cc:dc:2b:27:
                    4f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:57:66:0C:D1:CA:45:A9:DB:85:AB:BE:FC:F8:FA:15:1B:1B:6C:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Db6boxfrSfMUNcWTqEMjNejdc8jks7USUtBo5WQY6Cu4/0/A257660CD1CA45A9DB85ABBEFCF8FA151B1B6C3A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.52.0/22
                IPv6:
                  2804:4934::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267170

    Signature Algorithm: sha256WithRSAEncryption
         a4:e6:a9:60:3f:96:a5:60:27:f9:e6:2b:6e:ac:ad:8f:c6:98:
         27:1a:e6:51:d1:58:8c:55:86:f3:df:8b:b7:41:96:3c:19:b4:
         d6:e3:6b:ee:63:7b:3e:3c:c9:b4:6f:f2:86:cd:52:86:50:9e:
         9d:4a:7e:38:fb:1f:4f:61:a6:81:74:15:4b:5a:b8:64:4c:aa:
         f2:07:b8:ac:57:99:e6:e0:79:de:86:cf:d8:84:80:e4:eb:10:
         01:1b:a1:2b:3c:4c:c5:85:27:5a:04:5d:94:ca:4d:dc:45:4c:
         01:e2:97:b2:b0:30:20:b8:fd:47:e3:d3:df:1e:48:3c:d2:d6:
         0c:c0:7a:f9:74:ae:2c:d7:7b:08:19:a9:ba:6c:fa:23:b6:cf:
         cb:64:19:97:c5:f1:07:02:03:59:c0:07:00:7a:bd:b9:b2:88:
         ce:48:1d:93:df:32:e4:54:d6:4e:74:e1:5d:58:36:f8:c1:7b:
         e3:ae:9a:70:7f:74:fa:6d:db:ba:03:89:ab:ce:0a:70:0a:0c:
         20:9b:a5:f3:3c:b9:db:e9:69:e5:cc:d5:2b:f2:6b:2e:12:16:
         bb:9f:40:d0:d5:19:ca:94:c0:58:b4:db:44:71:0d:fb:26:02:
         69:8b:1f:c6:f7:ea:54:2e:9f:4c:22:76:d1:a9:f3:10:36:83:
         57:b9:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org