Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A65E24713246C08915D514F09D9BE439ABDB1DE7.cer
File:                     A65E24713246C08915D514F09D9BE439ABDB1DE7.cer (raw, json)
Hash identifier:          HFCasfd//YacHXLWGozliA+6pj2pH8IIm8Rmz8hldcc=
Subject key identifier:   A6:5E:24:71:32:46:C0:89:15:D5:14:F0:9D:9B:E4:39:AB:DB:1D:E7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       487D7E176A4A2F9A454A6CBF3A6A54A47ACCDC68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F1h85mbtiSmjCVT8f8h4uw6xdpkaJ7Spm4ZCuKkUniSp/0/A65E24713246C08915D514F09D9BE439ABDB1DE7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F1h85mbtiSmjCVT8f8h4uw6xdpkaJ7Spm4ZCuKkUniSp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 16:59:48 +0000
Certificate not after:    Wed 26 Feb 2025 17:04:48 +0000
Subordinate resources:    AS: 268867
                          IP: 45.174.212.0/22
                          IP: 2804:5bc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7d:7e:17:6a:4a:2f:9a:45:4a:6c:bf:3a:6a:54:a4:7a:cc:dc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 16:59:48 2024 GMT
            Not After : Feb 26 17:04:48 2025 GMT
        Subject: CN=A65E24713246C08915D514F09D9BE439ABDB1DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:b5:23:01:da:43:3c:dd:da:8c:df:d0:89:
                    b4:d0:f4:3e:0e:86:46:9c:04:e9:7f:f2:95:29:1e:
                    39:42:9f:f1:9d:41:27:ee:05:62:0d:c7:64:b9:79:
                    b8:34:22:5c:d0:18:17:60:a6:a0:3e:a6:42:9b:e7:
                    3b:af:13:f0:36:37:08:11:1c:3e:dd:c8:8c:1f:b4:
                    46:a0:0c:41:dc:e4:10:5a:90:59:07:7a:97:20:0d:
                    68:f1:9e:8b:2e:88:ed:d4:21:35:23:fb:51:60:b4:
                    17:d3:42:72:a6:a0:73:8b:a8:ab:d9:5c:1a:18:ef:
                    17:21:93:ef:01:13:da:71:1a:29:e0:b9:b0:0f:fb:
                    82:f4:27:81:7e:91:16:68:94:3d:fa:52:74:f2:e8:
                    57:f6:27:1f:d8:68:12:e0:50:09:fd:73:b7:96:25:
                    3f:85:50:84:ca:81:9a:37:bd:7e:55:3f:49:5f:bc:
                    ec:8e:aa:b8:70:fe:f9:fe:76:7d:26:82:6b:40:93:
                    a5:bc:c2:d1:76:7a:bd:04:fa:7f:83:2a:ac:90:fc:
                    8b:43:17:72:a8:c7:c6:cd:a5:a2:e6:76:ee:7b:58:
                    27:b6:ea:88:11:c7:96:18:3d:ce:6d:0e:9d:49:f8:
                    db:85:b2:c4:1c:bc:12:03:4b:1e:32:22:80:39:cc:
                    f8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:5E:24:71:32:46:C0:89:15:D5:14:F0:9D:9B:E4:39:AB:DB:1D:E7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F1h85mbtiSmjCVT8f8h4uw6xdpkaJ7Spm4ZCuKkUniSp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F1h85mbtiSmjCVT8f8h4uw6xdpkaJ7Spm4ZCuKkUniSp/0/A65E24713246C08915D514F09D9BE439ABDB1DE7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.212.0/22
                IPv6:
                  2804:5bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268867

    Signature Algorithm: sha256WithRSAEncryption
         96:04:5e:14:94:b7:93:96:7c:11:6f:14:59:09:bd:f5:6b:59:
         6b:00:f3:a4:55:77:97:cb:02:b1:18:89:de:a3:ee:0a:66:dd:
         ab:0e:38:12:c1:f9:a5:95:bf:46:a5:96:dd:c5:23:f6:21:99:
         79:36:14:0a:a3:62:02:02:bf:c3:8e:48:40:d1:86:ec:09:d3:
         7f:33:e8:16:1d:d9:13:c2:92:c3:04:16:50:35:3b:05:79:d8:
         1b:fc:b7:7c:4b:c8:fd:10:27:0d:7e:5a:55:25:48:cc:22:49:
         a6:01:37:f1:a5:32:78:24:fe:b7:79:b6:e6:05:f2:67:c3:97:
         f3:c0:14:17:6a:10:50:48:e8:b9:95:0b:05:cb:02:58:9a:f7:
         03:9e:70:58:67:fd:97:0d:a7:98:67:33:f7:b5:e3:6c:86:2a:
         14:a4:81:68:56:2b:6c:ee:1c:b1:ed:69:5a:fd:89:96:50:8b:
         11:c6:30:3c:33:1d:28:14:f8:6b:e1:aa:be:e2:a1:6f:31:cd:
         27:20:30:66:46:47:f9:d1:ed:eb:b9:c8:16:9a:81:1e:3a:5f:
         82:8d:77:40:ae:31:d6:82:9f:40:f6:cc:25:c4:df:a0:c8:8e:
         37:15:82:16:e9:05:b9:a0:bc:16:48:97:79:43:d3:a9:12:24:
         86:3c:2a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org