Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A90C51F287F829905266548E409D0259B53DAEA7.cer
File:                     A90C51F287F829905266548E409D0259B53DAEA7.cer (raw, json)
Hash identifier:          woeWbMAiCTJeRDZCTcjpiTLfsmG07eIKeelgB8dWAkM=
Subject key identifier:   A9:0C:51:F2:87:F8:29:90:52:66:54:8E:40:9D:02:59:B5:3D:AE:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A99453325F52589946A5D87C3753705CFD069A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/A90C51F287F829905266548E409D0259B53DAEA7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Jun 2023 19:57:01 +0000
Certificate not after:    Wed 12 Jun 2024 20:02:01 +0000
Subordinate resources:    AS: 267946
                          IP: 45.166.64.0/22
                          IP: 2804:55a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:99:45:33:25:f5:25:89:94:6a:5d:87:c3:75:37:05:cf:d0:69:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 14 19:57:01 2023 GMT
            Not After : Jun 12 20:02:01 2024 GMT
        Subject: CN=A90C51F287F829905266548E409D0259B53DAEA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:20:63:14:57:dc:00:89:a7:ed:f8:28:1b:3f:
                    40:31:f4:b3:c4:f1:52:1b:ab:d7:2e:66:34:07:b0:
                    4e:da:a1:d7:75:26:24:ba:40:27:7a:68:e1:6e:42:
                    0a:d3:c9:ba:ec:69:76:e7:f2:c1:68:b7:4d:85:5c:
                    50:f3:e7:d6:09:60:2a:a0:1e:47:d0:54:88:99:9d:
                    28:5f:eb:62:43:cb:dd:4e:93:ee:7b:d0:96:08:95:
                    0b:21:5f:a7:56:fd:9c:b9:92:3f:a9:ca:85:73:a9:
                    1f:a6:fc:61:0e:a2:e1:82:1d:37:ea:ff:a3:9d:77:
                    79:9f:e1:16:a0:7b:1f:5f:ac:07:40:a1:46:c9:5f:
                    0b:16:55:88:f4:de:3b:c3:28:80:06:12:65:fe:31:
                    1b:3b:c1:e1:ed:97:f0:e8:bd:05:f3:fd:cd:c0:4b:
                    69:d0:df:ad:d7:3d:56:f4:59:b6:a4:e6:a2:c2:c9:
                    6f:af:c4:29:c6:a6:f1:c9:c8:13:67:24:1e:a4:1a:
                    f1:79:8f:e8:a5:19:44:d6:9a:ea:bb:4a:e8:44:58:
                    6f:bb:6b:9d:8d:e7:4d:97:53:94:b8:94:21:51:52:
                    72:cf:02:a2:25:fc:e6:28:21:3a:ca:a9:46:63:93:
                    9f:e8:53:c3:32:e1:ee:49:98:85:9d:49:a0:4f:24:
                    02:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:0C:51:F2:87:F8:29:90:52:66:54:8E:40:9D:02:59:B5:3D:AE:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/xeHYWhQGJ5MPjEZuZtpXAuYt4S1bkJNLoiZy3koXmsH/1/A90C51F287F829905266548E409D0259B53DAEA7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.64.0/22
                IPv6:
                  2804:55a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267946

    Signature Algorithm: sha256WithRSAEncryption
         81:ef:c2:2e:4e:32:27:f7:52:65:79:e8:b4:b0:37:82:71:8a:
         8a:38:32:ba:39:a7:8a:f6:7e:9c:cc:67:19:fa:13:ab:33:25:
         82:0b:87:fb:10:c1:f7:af:56:93:a2:65:49:c9:43:46:ee:ab:
         1a:05:c0:d5:38:a0:93:65:04:68:0a:ff:3c:60:ce:b1:da:18:
         ec:e6:73:0d:18:83:99:0f:7f:8e:d1:80:cb:3e:be:02:95:6c:
         12:eb:9e:42:64:c6:38:67:b1:9e:da:0b:98:34:10:1e:af:84:
         8b:b1:43:37:5a:7d:33:2a:59:37:d5:4a:8d:85:20:ae:01:8c:
         ba:11:d9:14:91:86:21:46:bc:ad:99:d5:c9:6a:ea:1e:d0:a5:
         f2:21:10:65:6a:73:d7:0b:8d:9d:8b:f6:c1:f6:ab:ec:fb:ca:
         57:70:0f:9a:8d:c7:e7:74:6d:10:52:54:16:0a:df:07:6b:42:
         f5:86:db:4f:9c:99:43:30:02:cb:f3:c5:7f:e8:c7:54:d0:9a:
         db:7e:ab:02:81:08:bd:17:12:ff:ec:c3:f3:52:21:c7:64:dc:
         ac:91:48:e6:ae:44:50:d0:dd:21:46:5d:8b:24:03:cd:13:96:
         f0:9a:7b:05:de:22:e7:c0:4d:d2:fc:b3:39:ff:f0:7a:fc:ec:
         19:70:56:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org