Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A98E983F88A257C5CB2E79D89AF17EC0BB1FD539.cer
File:                     A98E983F88A257C5CB2E79D89AF17EC0BB1FD539.cer (raw, json)
Hash identifier:          RTzWpjX9slPSv9YgnwOY0xSchfhLbRIZqO6LegvcMgU=
Subject key identifier:   A9:8E:98:3F:88:A2:57:C5:CB:2E:79:D8:9A:F1:7E:C0:BB:1F:D5:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6E08882ADD7700DB7E5AD0316A09A50A66F6BE18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/A98E983F88A257C5CB2E79D89AF17EC0BB1FD539.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Oct 2022 18:18:05 +0000
Certificate not after:    Mon 02 Oct 2023 18:23:05 +0000
Subordinate resources:    AS: 270901
                          IP: 189.50.32.0/22
                          IP: 2804:7330::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:08:88:2a:dd:77:00:db:7e:5a:d0:31:6a:09:a5:0a:66:f6:be:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  3 18:18:05 2022 GMT
            Not After : Oct  2 18:23:05 2023 GMT
        Subject: CN=A98E983F88A257C5CB2E79D89AF17EC0BB1FD539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:75:e8:9e:e4:a1:0c:4b:d2:1c:cd:21:cf:99:
                    0b:05:0f:79:ea:d5:d3:64:e8:0d:e2:a5:01:4c:4a:
                    22:47:8f:c1:9c:81:07:b4:f4:91:42:3c:8e:d5:8f:
                    10:6a:00:db:01:fa:3a:ff:5e:ef:7a:09:99:a6:00:
                    61:0c:0d:02:05:6a:23:b9:d2:39:00:9f:ca:2d:6f:
                    c5:f3:9a:16:2d:77:63:6c:85:56:bb:16:24:60:8e:
                    f2:57:a8:4c:9f:4b:5b:3e:2c:8f:a7:9f:9e:6e:18:
                    5e:df:e9:40:b7:27:9a:32:e9:2b:18:5e:d0:97:ff:
                    41:f4:19:ad:9f:24:88:8b:78:dc:4e:58:9e:26:36:
                    63:d9:37:e5:ae:46:5b:f8:47:67:8c:66:08:3f:86:
                    c0:2f:05:8c:82:2a:2e:a3:2e:b1:a4:d6:d4:15:b6:
                    47:8e:37:8f:7c:2b:b1:19:6e:7b:29:10:5b:fe:19:
                    f0:28:12:45:82:29:05:fe:16:25:03:32:f6:f5:20:
                    7d:33:25:d6:6e:9c:b5:21:7d:f4:1e:fc:70:5f:cd:
                    40:f5:c0:a4:07:41:2a:7b:77:68:29:70:94:8c:f1:
                    20:45:9a:78:11:75:f4:8e:8c:e8:e9:fa:ac:b2:99:
                    06:3e:67:d2:f7:cf:88:56:03:6e:c6:52:75:3f:a3:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:8E:98:3F:88:A2:57:C5:CB:2E:79:D8:9A:F1:7E:C0:BB:1F:D5:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DFLAXyuNxATrvTpXvjirVLZNjjRDve8gxoKR6gJKMRao/0/A98E983F88A257C5CB2E79D89AF17EC0BB1FD539.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.50.32.0/22
                IPv6:
                  2804:7330::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270901

    Signature Algorithm: sha256WithRSAEncryption
         3a:75:75:15:df:e0:81:f4:1e:9b:6b:8d:f5:83:f1:e0:d5:6f:
         a6:10:10:ef:46:17:0a:65:f6:d4:59:20:de:20:b2:bf:99:69:
         88:f5:98:61:c2:3e:3e:5d:ca:c1:ad:c8:5e:8a:f2:45:19:39:
         d1:c3:2c:95:24:ae:23:03:79:e4:6b:a1:3e:c3:7b:ff:49:70:
         5e:d9:37:a5:f5:07:1f:2c:b4:c0:e2:f8:15:30:3b:17:d2:b1:
         92:2e:bf:50:46:83:51:b8:7f:53:41:e7:f5:b1:cd:99:17:13:
         ef:d7:19:4b:a0:a7:e8:e5:d8:87:43:4c:3e:63:b7:2b:bc:4c:
         81:99:dc:0c:ab:99:11:74:3a:d9:65:d0:3d:d8:19:43:80:34:
         cc:3d:25:00:de:79:4e:85:b3:d6:c5:c0:28:a8:88:9c:55:5d:
         2a:41:8c:29:9d:92:37:9b:7b:82:00:af:09:df:5e:0a:f2:9b:
         e6:13:b1:ac:06:92:30:66:9a:20:8f:03:2d:60:8a:ac:8d:84:
         29:23:eb:16:ca:86:70:ef:9e:8a:b5:c4:0a:db:ee:67:04:71:
         cb:0e:9f:df:50:12:89:9a:1f:34:c8:09:07:87:08:59:d4:cc:
         34:88:6f:d2:10:95:86:0f:7a:ea:36:18:5f:41:7f:0e:5f:f6:
         85:a4:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org