Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer
File:                     A698EEF1D908F4D05C52C434D64D84AA126409A2.cer (raw, json)
Hash identifier:          cE1tN2adew/r78dFj7335V+6J3envjKDPcEmlEcbcFI=
Subject key identifier:   A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       215CFF5214C8F09FAE3A3AB9A52BE7E2B80DF9EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Nov 2023 05:56:00 +0000
Certificate not after:    Wed 13 Nov 2024 06:01:00 +0000
Subordinate resources:    AS: 268628
                          IP: 45.164.188.0/22
                          IP: 208.52.162.0/23
                          IP: 2804:5418::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:5c:ff:52:14:c8:f0:9f:ae:3a:3a:b9:a5:2b:e7:e2:b8:0d:f9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 15 05:56:00 2023 GMT
            Not After : Nov 13 06:01:00 2024 GMT
        Subject: CN=A698EEF1D908F4D05C52C434D64D84AA126409A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:e0:c3:60:a0:b5:0e:1a:3b:a5:4f:2b:f2:
                    c1:4f:15:30:e5:24:95:97:91:20:96:b3:67:68:0b:
                    43:7f:ea:23:9b:d8:83:19:a2:e3:a1:bc:6c:4c:f3:
                    71:d6:c5:13:2a:5b:f1:17:c5:85:17:24:7b:e5:9c:
                    20:40:02:20:5d:ab:5f:7e:96:86:22:cd:ca:2a:c2:
                    ad:8a:f1:db:1c:b6:bc:3f:89:3c:94:ce:ce:b4:21:
                    a3:5c:f6:5c:49:71:2a:39:62:34:3e:9b:6e:55:76:
                    f3:d5:fd:8d:77:3b:ad:91:6b:13:b7:cb:7c:0e:4d:
                    11:16:75:ba:37:d9:29:c3:a8:e4:31:94:63:a0:1d:
                    d6:ed:ad:6a:d5:cd:e0:9d:a6:ff:5f:50:38:ae:54:
                    7b:cf:b7:d4:c9:94:63:45:34:59:bb:c3:77:46:4f:
                    c4:cc:50:18:0f:5c:90:f0:f5:c2:ae:fc:62:8e:bf:
                    70:5d:be:06:89:ab:48:f5:00:a9:63:ea:4b:4d:92:
                    39:0d:e0:7d:ea:ee:1a:b5:2c:e7:5f:3d:69:3b:3c:
                    60:1f:3f:e3:35:49:46:55:b2:cd:db:e5:a1:37:56:
                    c0:94:73:56:6c:26:af:e1:57:56:2a:88:65:88:2f:
                    c9:de:ac:2a:e3:96:08:0f:35:62:dc:c0:10:41:04:
                    d8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.188.0/22
                  208.52.162.0/23
                IPv6:
                  2804:5418::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268628

    Signature Algorithm: sha256WithRSAEncryption
         6a:67:c0:7e:e4:c2:e4:85:03:6c:28:aa:5b:77:c5:d7:a2:b7:
         9e:45:9f:d4:41:73:12:f8:1d:27:35:b9:6e:84:d1:37:61:b9:
         8c:ec:57:19:2e:02:60:e5:f9:39:36:c0:10:a2:17:fa:ea:c4:
         71:80:77:ad:46:30:8f:12:93:42:1b:3a:85:2a:10:fc:04:ab:
         09:cc:bd:da:4c:4a:47:78:14:30:a9:58:50:65:46:fe:b5:d5:
         14:dd:c6:67:6e:e0:c8:8a:40:56:15:b3:88:60:9c:5c:7e:e6:
         8d:66:4a:4f:44:11:15:3d:40:80:4a:1e:1a:fc:e2:e3:44:79:
         1f:82:f7:b6:c6:36:7c:8f:2b:66:a8:d3:64:b6:7e:5f:df:95:
         9a:14:68:37:06:e5:5f:3e:26:b0:54:06:4b:97:46:0f:e9:ee:
         42:a1:67:01:96:87:3b:c7:9d:86:eb:c1:e4:c6:5c:62:06:40:
         9f:44:ba:0e:2c:f4:f8:67:c5:39:a9:e0:30:0c:b8:90:37:a8:
         42:96:2e:c7:c0:62:95:ab:5d:48:a2:72:c0:fd:a0:ba:4d:04:
         b9:44:92:28:e7:e5:a1:dd:5d:6c:3a:b1:c6:cc:64:7e:13:7b:
         85:23:5d:19:3c:70:2f:6a:b9:c9:13:67:22:80:46:28:54:bf:
         dd:ac:6c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org