Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A64651C2B14522E90B84EC0C98457F6BD6CBFE80.cer
File:                     A64651C2B14522E90B84EC0C98457F6BD6CBFE80.cer (raw, json)
Hash identifier:          PUtQNxrqhUvTAV65AfIy/dhKxmaKdqb2Mm985fugbnw=
Subject key identifier:   A6:46:51:C2:B1:45:22:E9:0B:84:EC:0C:98:45:7F:6B:D6:CB:FE:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       37EFCDD40959F6ACC9FA3E846277EFE2802A3579
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/A64651C2B14522E90B84EC0C98457F6BD6CBFE80.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Dec 2022 16:34:21 +0000
Certificate not after:    Wed 27 Dec 2023 16:39:21 +0000
Subordinate resources:    AS: 269674
                          IP: 45.191.140.0/22
                          IP: 2804:6830::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ef:cd:d4:09:59:f6:ac:c9:fa:3e:84:62:77:ef:e2:80:2a:35:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 28 16:34:21 2022 GMT
            Not After : Dec 27 16:39:21 2023 GMT
        Subject: CN=A64651C2B14522E90B84EC0C98457F6BD6CBFE80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1d:eb:60:70:93:a8:06:a6:a2:c0:97:bb:9a:
                    0a:55:9d:2d:d9:65:89:d2:e0:b1:fd:35:54:d2:b2:
                    62:c1:93:0d:a7:0c:47:fc:ef:51:58:2e:31:c8:8f:
                    a0:29:da:bd:45:40:b1:75:0c:e4:d6:d2:77:61:5b:
                    75:ff:30:74:90:f6:be:6d:b7:f8:55:01:a9:e4:0c:
                    cb:6c:39:75:d8:c2:b9:08:62:41:37:5e:e8:1e:95:
                    3c:57:bf:20:85:89:1a:37:58:30:b0:eb:2e:d6:52:
                    68:cc:c1:d7:0d:f1:3a:e4:f0:32:64:a9:53:db:f6:
                    02:4f:81:e1:41:e1:a4:81:10:25:eb:88:f6:9b:d8:
                    59:f4:56:41:fb:44:db:17:3c:b8:50:38:43:c5:f7:
                    25:1e:18:9c:b9:2a:f4:b4:1c:15:e5:e5:e3:f7:9c:
                    94:78:2e:2c:5d:15:73:2b:06:3f:33:3e:7a:17:ab:
                    ee:98:c9:8d:3e:8d:58:1c:79:3c:76:c7:ef:a3:85:
                    8d:41:1d:47:33:c9:10:19:16:de:c0:9c:e6:55:d7:
                    ff:ad:3b:3a:1d:e8:b4:18:06:cb:c2:23:f6:30:fc:
                    61:29:b8:30:87:91:df:62:41:a9:4a:2c:0b:7d:8f:
                    c8:59:7e:2d:fb:fc:4c:34:fa:b4:cd:3b:e3:81:1d:
                    e4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:46:51:C2:B1:45:22:E9:0B:84:EC:0C:98:45:7F:6B:D6:CB:FE:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HaXomBQJds5YqaiwhrJc5HstgyGtvnEvVnao7phVagQy/0/A64651C2B14522E90B84EC0C98457F6BD6CBFE80.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.140.0/22
                IPv6:
                  2804:6830::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269674

    Signature Algorithm: sha256WithRSAEncryption
         b7:84:ce:0a:d1:aa:2f:43:52:9d:03:56:f5:8b:46:a7:ce:db:
         54:fb:a2:c0:46:5f:40:c1:96:c1:3e:b7:f5:b0:ce:f2:2f:67:
         19:2e:59:44:96:c5:07:cd:39:f2:a7:5b:d0:99:a6:c8:52:c9:
         1b:79:54:45:18:e6:c6:0d:24:ba:ef:ab:6b:73:96:63:b3:1d:
         68:09:37:57:16:23:f6:d8:16:7b:03:99:70:6d:39:e8:c6:71:
         3e:6a:ba:bb:41:f0:06:d6:cc:88:84:a4:ed:3e:24:ec:5e:64:
         60:16:6f:95:9c:d2:20:5a:e2:ed:b4:24:cc:a5:d3:62:70:99:
         df:a3:d8:47:fd:a8:39:ae:33:36:18:86:a7:7d:5c:a3:95:ed:
         27:c9:d6:00:18:fb:24:e8:ef:23:57:16:d1:79:c2:18:3c:cb:
         c3:ed:b2:00:99:28:88:e3:42:aa:63:45:84:c4:d0:82:3f:19:
         44:91:bb:af:e0:74:37:1b:72:cb:35:4e:aa:88:d7:8c:5c:24:
         9d:95:54:1e:3e:6c:57:8a:ba:58:7c:de:38:24:77:ba:05:9e:
         34:78:fc:ec:6d:f9:08:b9:f1:03:7f:08:75:f0:2d:71:62:3e:
         79:95:08:2f:7c:a4:57:6a:99:d9:3c:c1:6c:0d:fe:05:d3:9c:
         b5:29:47:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org