Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A45DD70E2EF647983066A1251557308D780CDF5E.cer
File:                     A45DD70E2EF647983066A1251557308D780CDF5E.cer (raw, json)
Hash identifier:          3TEFOU4LjA/FkoGakfHL4HYaYjmMZNwdp6pzLyN2wv0=
Subject key identifier:   A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0189742418A077C3855665796A65EA4180CB6694
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/A45DD70E2EF647983066A1251557308D780CDF5E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 14:10:56 +0000
Certificate not after:    Wed 10 Jul 2024 14:15:56 +0000
Subordinate resources:    AS: 263573
                          IP: 170.231.240.0/22
                          IP: 177.184.216.0/22
                          IP: 2804:f40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:74:24:18:a0:77:c3:85:56:65:79:6a:65:ea:41:80:cb:66:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 12 14:10:56 2023 GMT
            Not After : Jul 10 14:15:56 2024 GMT
        Subject: CN=A45DD70E2EF647983066A1251557308D780CDF5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:d7:3c:54:43:c7:20:14:42:4e:20:6d:d2:
                    8b:90:cd:56:25:c9:54:ce:99:50:6f:e7:df:54:62:
                    93:38:d2:f7:d8:0f:69:21:da:07:6f:d4:8b:de:9e:
                    2d:06:f0:10:91:c4:b6:d3:e2:3d:1e:5a:a2:05:1d:
                    3f:3d:80:46:16:05:f1:bf:79:37:1a:da:b6:41:40:
                    1b:0f:67:05:1c:b2:96:c5:6c:19:eb:54:f3:df:2b:
                    d1:7f:07:07:27:1a:66:05:54:65:92:10:77:aa:bd:
                    d6:73:e1:af:66:4d:9f:26:64:b7:cb:da:09:a0:fb:
                    8a:91:59:63:48:99:92:03:66:18:8f:49:04:4d:0e:
                    99:49:04:7d:74:85:aa:71:55:60:31:09:26:5a:d2:
                    6f:d7:c8:f0:3a:9d:ad:48:5a:89:8e:b0:3e:04:bb:
                    c8:a8:eb:43:cf:84:dc:1e:33:4d:3e:79:62:16:67:
                    9e:64:1c:6b:44:14:42:e7:05:0c:ad:21:0c:a5:bf:
                    4b:9b:3f:d2:54:ce:59:8b:3e:0a:b6:ab:95:22:51:
                    5b:fb:6b:78:d0:ba:9b:a5:c7:fb:71:74:f7:4c:df:
                    34:5a:d9:17:74:90:ad:2a:a3:38:41:4c:f0:65:6d:
                    49:16:a7:0d:da:df:35:37:16:ae:d4:3e:bc:5c:b6:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:5D:D7:0E:2E:F6:47:98:30:66:A1:25:15:57:30:8D:78:0C:DF:5E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/NwJvtGLy4ZWGjFSm6971HGjy5UD9CRkq13FoPdXqa9x/0/A45DD70E2EF647983066A1251557308D780CDF5E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.240.0/22
                  177.184.216.0/22
                IPv6:
                  2804:f40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263573

    Signature Algorithm: sha256WithRSAEncryption
         9a:77:a0:99:28:c7:c2:b1:87:e6:3b:5b:2c:e1:ba:3b:65:a2:
         88:05:a6:cf:3d:b6:8b:7b:1d:6e:10:a4:58:fe:8b:2c:27:e9:
         cb:27:0b:a7:01:fb:85:c7:8e:1b:e3:09:f6:4f:cc:b5:54:39:
         8d:4c:e6:ed:b3:d9:4f:01:40:bf:74:ae:15:65:f3:6d:e3:a5:
         7a:07:ba:17:75:f2:fa:4d:07:18:40:66:ac:5a:13:26:f2:03:
         d3:58:fc:39:13:21:84:da:28:d1:00:81:7b:e6:65:e6:70:cf:
         52:ad:bd:70:cd:5c:e6:38:0f:48:a3:9a:d6:f9:a3:0b:2c:4f:
         4e:9b:47:64:46:6f:68:00:ee:a9:9a:57:6e:20:e0:2c:61:38:
         b6:e6:98:a1:89:d7:f3:a5:6e:06:7f:6a:82:6c:51:c8:a1:22:
         7b:45:22:cd:98:67:d7:b7:f4:f6:5d:e0:8b:10:09:ff:da:7a:
         7d:c3:6f:17:dd:36:33:38:06:e4:df:97:41:66:43:dc:19:9a:
         34:22:93:94:fa:a8:60:e8:25:c7:07:da:bb:d2:30:52:9e:22:
         c4:1d:82:bb:be:d6:97:37:1b:56:0b:94:84:11:55:26:01:8f:
         1f:18:8b:3f:00:22:92:ea:d1:66:59:b7:af:d6:9b:36:89:db:
         53:18:f1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org