Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA.cer
File:                     A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA.cer (raw, json)
Hash identifier:          bdo6yreWUd0vo2amj3fOkh6AU4TLSqpWI4+x/NhbSMw=
Subject key identifier:   A3:EA:C5:7E:A1:E8:25:5E:82:D1:64:94:F3:A8:DF:A7:C1:00:45:AA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       278D6827CE83C3DE8440783385177BC3E8F23304
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Oct 2023 16:08:59 +0000
Certificate not after:    Wed 09 Oct 2024 16:13:59 +0000
Subordinate resources:    AS: 267999
                          IP: 45.167.108.0/22
                          IP: 2804:5674::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:8d:68:27:ce:83:c3:de:84:40:78:33:85:17:7b:c3:e8:f2:33:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 11 16:08:59 2023 GMT
            Not After : Oct  9 16:13:59 2024 GMT
        Subject: CN=A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6e:be:c5:f1:d4:bd:2d:9a:f4:7d:e9:01:bc:
                    83:75:fd:c3:49:a6:2c:c5:20:fb:ed:31:92:ca:35:
                    51:e5:ba:41:9d:0b:d2:a2:11:b6:d9:02:2b:37:4d:
                    32:ff:58:c9:e3:f4:c8:6e:52:22:d5:85:04:f7:0d:
                    26:84:16:45:73:15:6f:3f:66:ec:80:0a:c0:e0:3b:
                    28:53:ed:3e:c9:d1:27:9d:88:02:1a:1b:37:8f:f5:
                    44:a5:c9:7e:72:fe:d7:b8:7d:49:57:f6:e0:ae:06:
                    c4:ac:ba:1d:b9:da:2e:e6:8c:50:90:de:80:36:81:
                    f9:e0:33:d3:d9:78:b1:f0:c7:1f:05:e5:2c:68:ab:
                    08:c8:7e:9b:a8:da:74:bc:71:8e:5b:e6:39:95:dd:
                    08:99:d8:47:80:41:7a:80:ff:22:13:c5:d1:1b:68:
                    5a:be:a5:8e:96:c5:b8:f5:86:67:50:d6:92:ff:9d:
                    17:11:91:d9:ae:61:09:1b:47:ca:21:64:94:f7:08:
                    f5:00:ec:68:e3:97:06:e3:2b:29:91:34:da:16:33:
                    be:a2:28:c4:b8:5f:01:03:37:74:09:4b:cf:19:cb:
                    f5:21:60:b3:36:dd:3c:4a:7a:24:18:38:af:67:83:
                    36:d2:32:29:6e:9e:e6:8e:73:67:95:81:77:23:c8:
                    0e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:EA:C5:7E:A1:E8:25:5E:82:D1:64:94:F3:A8:DF:A7:C1:00:45:AA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AmPjEGeCynt2bSTu8x14GVudWfpWkkfAdWvgfuFZWrKd/0/A3EAC57EA1E8255E82D16494F3A8DFA7C10045AA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.108.0/22
                IPv6:
                  2804:5674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267999

    Signature Algorithm: sha256WithRSAEncryption
         81:a5:4e:75:1f:a7:75:e3:fa:65:a4:bf:89:1f:75:14:ca:50:
         d5:ba:57:24:f4:01:d0:01:0f:36:5f:0d:48:76:4f:1c:55:1f:
         2b:b0:bf:1f:0c:05:f7:4a:ee:b4:88:0a:64:4b:48:7c:48:fb:
         38:fb:23:dc:08:01:74:bf:78:57:b2:f3:b1:ec:03:19:43:13:
         cb:21:55:28:06:fa:a7:95:d1:3a:fa:b1:b5:c4:91:10:45:2a:
         cc:b2:9c:2a:d9:e5:02:3a:44:c8:03:fd:28:a9:e6:be:c9:b4:
         98:d6:60:e9:e4:ef:13:e7:53:fb:02:94:29:ea:63:34:ef:30:
         e8:92:f3:32:4e:94:46:8b:41:bb:51:57:71:34:40:e3:22:d6:
         35:aa:bc:2e:76:8c:90:b2:f9:5f:36:eb:5e:4e:90:64:81:59:
         9d:83:bf:2a:41:ba:69:60:68:0e:25:3e:0a:bf:9b:c6:a3:4f:
         f8:ca:52:3a:82:44:f6:b3:27:78:80:bf:9e:56:54:51:a4:55:
         08:7f:b7:c3:60:2f:c6:33:69:52:0e:0d:a4:c4:e2:c9:0d:2f:
         c9:d4:56:bd:53:a7:70:55:62:d3:f5:48:6c:aa:60:6c:c8:3b:
         14:15:8e:ed:9d:6c:ba:19:d1:da:f9:e7:9a:be:66:93:6c:84:
         f0:71:82:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org