Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AD788192EB28093737DE304FE942917605211E2D.cer
File:                     AD788192EB28093737DE304FE942917605211E2D.cer (raw, json)
Hash identifier:          6xsfB1FPQPZAziTjdiBO0HlSoQuuZVkQThMmg965kt0=
Subject key identifier:   AD:78:81:92:EB:28:09:37:37:DE:30:4F:E9:42:91:76:05:21:1E:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       308FDD073770040A20208F51F85AC252E983B9E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/AD788192EB28093737DE304FE942917605211E2D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Dec 2023 18:11:14 +0000
Certificate not after:    Fri 06 Dec 2024 18:16:14 +0000
Subordinate resources:    AS: 268935
                          IP: 45.176.64.0/22
                          IP: 2804:5cdc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8f:dd:07:37:70:04:0a:20:20:8f:51:f8:5a:c2:52:e9:83:b9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  8 18:11:14 2023 GMT
            Not After : Dec  6 18:16:14 2024 GMT
        Subject: CN=AD788192EB28093737DE304FE942917605211E2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2b:7e:9c:4b:14:4b:21:fb:5b:f7:17:b8:f4:
                    02:2a:43:3a:a0:68:5e:74:bf:7d:89:20:cb:49:d8:
                    fa:00:5d:6a:5d:83:51:59:f6:5f:15:6f:fa:e7:87:
                    d0:a0:7c:f9:46:ca:01:c2:1b:4e:0b:cc:ac:0b:71:
                    7e:ce:2e:b2:e5:92:9a:fc:af:ed:1e:bb:44:2a:29:
                    08:26:72:97:c7:5a:60:2d:f5:88:82:c7:c5:5c:13:
                    1e:51:20:0d:2d:8c:f2:8a:c5:eb:82:18:c8:4a:2f:
                    de:13:a3:7a:a3:7b:78:2c:ac:e5:1a:e6:c6:04:10:
                    1e:6c:96:bf:5d:55:ae:ad:04:fb:d1:f6:54:9c:11:
                    43:e7:85:ce:72:66:3d:bf:9e:65:34:a1:92:f4:10:
                    80:37:dd:f1:9b:52:09:86:db:87:a2:83:7e:b0:7e:
                    3e:4b:a5:eb:30:8c:53:fb:4b:9c:1c:9f:d6:1e:b7:
                    09:49:6b:61:e4:df:77:4b:a8:d5:01:ee:ef:02:cb:
                    6c:05:5a:b1:ab:b1:d7:b7:a0:61:1f:79:b4:54:31:
                    c0:17:ff:79:d5:65:22:9e:19:20:e9:2b:7c:e8:21:
                    6c:c3:ff:1b:5b:23:de:c9:e1:31:02:c4:a2:a9:cd:
                    ff:83:52:37:9e:62:af:98:e0:c0:fb:4a:23:31:c4:
                    7c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:78:81:92:EB:28:09:37:37:DE:30:4F:E9:42:91:76:05:21:1E:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tiHo2CiAn1raQbQtgTzRjrY1BA3DQrp9koLhWDhTeWc/0/AD788192EB28093737DE304FE942917605211E2D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.64.0/22
                IPv6:
                  2804:5cdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268935

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:a1:fc:f8:ce:06:98:49:21:ed:b5:69:e8:fc:96:c2:7e:
         63:e6:a7:2b:cf:a8:0b:68:ca:e5:3a:ff:ba:9f:93:70:ab:5d:
         a9:aa:eb:bf:4c:e6:f3:46:1d:0f:84:69:a2:40:4b:fb:1b:88:
         7b:22:eb:25:50:fd:1a:18:c2:24:2f:79:a0:50:89:5a:79:ab:
         c8:11:21:7e:5e:9a:89:3d:20:6b:ed:4e:dc:5f:5a:4a:2b:b5:
         35:a6:3e:86:4d:3a:63:fb:52:4e:6e:a6:c2:b0:f7:bb:27:5a:
         5b:29:3c:76:c8:50:16:72:4e:22:0a:c7:c3:b1:92:f0:6c:85:
         3a:05:9f:06:c0:c3:78:46:36:3b:47:c8:74:23:4a:6a:84:68:
         0d:f5:43:db:88:50:42:60:8a:9d:65:af:b9:58:4f:2e:56:f5:
         aa:03:49:8c:7c:ab:ed:7a:f9:f1:52:3d:af:50:32:3d:8f:1d:
         bb:54:23:ce:3a:78:3a:83:fb:94:2a:35:9d:5c:e6:2c:1d:1a:
         65:5d:73:4b:9f:a3:2b:7c:cd:6a:0a:8a:b4:85:19:95:0c:64:
         a5:c2:5f:d5:ae:ae:9e:e5:7d:49:04:a8:62:a8:e6:6f:c3:3e:
         8d:2a:34:26:da:8d:17:0b:ae:a8:39:8d:0a:b3:ff:ac:b3:7d:
         8a:de:f3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org