Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A32CED4303315D3B20A3500BB27F2CB99049A555.cer
File:                     A32CED4303315D3B20A3500BB27F2CB99049A555.cer (raw, json)
Hash identifier:          9AD8ofRPlb1SiySUicU2nD42MBZ+grCm5N6koN+yNa0=
Subject key identifier:   A3:2C:ED:43:03:31:5D:3B:20:A3:50:0B:B2:7F:2C:B9:90:49:A5:55
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       749A120F9FDB333F3EEA6F7E5EB6C32CA2FFDC5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/1/A32CED4303315D3B20A3500BB27F2CB99049A555.mft
caRepository:             rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 20:41:36 +0000
Certificate not after:    Fri 04 Apr 2025 20:46:36 +0000
Subordinate resources:    AS: 267401
                          IP: 45.234.96.0/22
                          IP: 2804:4cec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9a:12:0f:9f:db:33:3f:3e:ea:6f:7e:5e:b6:c3:2c:a2:ff:dc:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  5 20:41:36 2024 GMT
            Not After : Apr  4 20:46:36 2025 GMT
        Subject: CN=A32CED4303315D3B20A3500BB27F2CB99049A555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:a1:7d:9e:6f:61:c4:8b:6c:5d:ae:8d:3d:
                    a7:f4:0c:18:0c:27:f8:90:85:12:b4:bb:5b:82:52:
                    e6:62:20:4b:be:3c:c2:cc:4a:4b:74:f3:67:7a:c0:
                    4c:48:8b:fa:d7:79:09:e7:86:36:26:f7:a4:89:55:
                    60:0a:ea:83:69:3f:db:d8:63:52:3a:10:36:36:26:
                    78:a5:fb:37:ce:b7:48:79:9e:f4:68:c7:46:63:0d:
                    5b:fc:81:5a:b9:ca:e0:7b:8a:18:7d:11:0f:e2:77:
                    e1:ba:44:a9:00:a1:18:7c:8b:a9:2f:66:f7:52:fb:
                    dc:e6:74:39:b6:5a:34:6f:f9:81:3f:5a:c5:93:a7:
                    6b:58:d5:9b:6d:60:2b:8b:7c:c6:47:29:43:7d:d6:
                    d6:a2:ab:0a:69:4c:b8:4e:8f:1c:c9:0f:7a:ff:f2:
                    75:0a:dd:cd:c4:b0:71:5c:5c:07:bd:65:42:3e:a5:
                    cf:10:49:27:b1:3e:f4:77:83:02:20:3d:d1:d6:e6:
                    54:38:0f:91:14:34:59:bd:40:66:0b:1a:7d:2f:6f:
                    33:01:18:4e:3f:c7:88:c9:f2:40:b4:a8:d7:f0:92:
                    a8:ad:ef:f9:e4:82:2c:9c:86:96:e0:f8:27:a2:ca:
                    6d:90:49:01:ab:27:09:9e:87:c0:c2:2e:33:7a:19:
                    6d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:2C:ED:43:03:31:5D:3B:20:A3:50:0B:B2:7F:2C:B9:90:49:A5:55
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/1/A32CED4303315D3B20A3500BB27F2CB99049A555.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.96.0/22
                IPv6:
                  2804:4cec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267401

    Signature Algorithm: sha256WithRSAEncryption
         b6:5d:61:0d:24:13:fe:29:22:a7:c2:1a:2a:81:f3:38:13:5b:
         16:1b:74:0d:1f:c2:81:d8:5d:81:6b:f2:f8:14:26:3b:63:2b:
         0c:3c:05:26:63:64:ba:91:a3:10:c8:fc:81:0d:a4:5e:d8:a3:
         00:49:05:37:92:f1:36:91:56:27:99:ed:4e:5f:f1:be:e5:06:
         51:9a:31:d8:e4:41:6b:b4:f7:d0:6e:8e:ad:90:bf:2d:51:51:
         cc:57:2d:97:42:1d:d5:f8:cc:a8:24:a8:b5:50:99:a2:fc:a3:
         bb:54:90:47:f0:d1:32:10:ac:21:13:eb:a3:d2:c1:c9:3f:95:
         43:0c:55:c6:e7:1a:03:e1:dc:e7:64:d2:07:90:96:44:4b:76:
         78:df:4d:eb:c7:e1:55:15:f1:67:c5:cb:7f:be:6e:0e:68:5e:
         98:be:fd:c7:7b:6d:a6:9d:46:d4:27:77:79:93:b6:40:f5:bd:
         ba:8c:e2:1b:82:15:20:65:f1:fe:86:73:3d:43:1b:d4:b0:be:
         70:81:4e:c1:26:49:a4:28:82:b7:26:89:36:37:a5:7b:1c:9f:
         97:69:38:ec:6f:73:8b:9a:db:3a:2a:d0:d0:2a:01:1a:d4:d7:
         c4:63:87:03:7f:ce:28:2c:f1:dd:cb:06:45:75:e4:99:8b:0a:
         b9:9e:47:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org