Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.cer
File:                     AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.cer (raw, json)
Hash identifier:          rdNGUg2ayxMxjNABiBzubaERmhMoz2fBHLXrzXXADRA=
Subject key identifier:   AD:80:2A:4B:B5:E6:F8:0C:70:23:71:19:B6:7F:9D:E3:BD:AB:9C:C2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       46EAD3CB4B88EDF816F2AEBBDB2F12E0D2CD7C10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 14:19:10 +0000
Certificate not after:    Thu 18 Apr 2024 14:24:10 +0000
Subordinate resources:    AS: 265301
                          IP: 168.121.76.0/22
                          IP: 2804:2dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ea:d3:cb:4b:88:ed:f8:16:f2:ae:bb:db:2f:12:e0:d2:cd:7c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 20 14:19:10 2023 GMT
            Not After : Apr 18 14:24:10 2024 GMT
        Subject: CN=AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:4b:fe:67:23:86:e6:b5:43:d9:2d:ba:05:
                    a5:ec:d7:e3:c2:00:8f:ac:b0:21:3b:63:b6:b9:06:
                    ab:f5:3a:c0:6f:a0:d0:be:53:47:03:2d:da:2e:22:
                    fd:f6:b3:3d:66:b9:e3:05:4d:8c:21:2a:a1:af:4c:
                    0c:c0:3a:2c:c9:89:80:95:c8:be:08:6b:b3:5f:36:
                    49:e0:93:e6:39:cb:6c:48:e4:7e:28:1a:ec:38:58:
                    16:be:42:ff:20:7b:a4:d9:f6:38:1b:1f:27:5e:63:
                    e3:2d:7e:e5:5d:4e:ba:4d:8c:d9:66:2f:b5:8f:6f:
                    c3:c3:93:b1:2b:66:9b:25:a3:15:cd:0f:a0:c3:03:
                    02:b0:40:ea:11:12:66:c3:86:d3:c7:75:7f:b1:7a:
                    db:c8:b8:86:c5:42:b4:00:26:2b:41:26:b8:b9:b0:
                    b3:4e:2f:a4:23:2c:11:20:df:3a:45:3b:fe:c3:9f:
                    97:1f:af:7a:38:b7:9a:01:7e:be:85:16:28:53:e0:
                    29:fe:d9:cc:48:57:0d:c5:4b:42:18:a2:21:73:2d:
                    8a:0e:11:7e:69:c4:38:79:03:01:46:b8:a4:6e:41:
                    4d:f1:46:ae:e9:b3:ce:61:9a:4f:d5:d5:bd:12:91:
                    54:d2:b8:da:97:02:8c:fa:9f:85:97:66:8f:c3:8b:
                    f4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:80:2A:4B:B5:E6:F8:0C:70:23:71:19:B6:7F:9D:E3:BD:AB:9C:C2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gb5sz5kvw4tbFHA4FNBkRfjoFnv4gGg8T3DYLAubKq7D/1/AD802A4BB5E6F80C70237119B67F9DE3BDAB9CC2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.76.0/22
                IPv6:
                  2804:2dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265301

    Signature Algorithm: sha256WithRSAEncryption
         7c:2c:fc:19:e7:7e:58:d8:27:ec:0b:c2:92:37:7b:33:ca:f8:
         b5:d5:3e:17:f5:32:78:9e:a7:5a:24:6f:26:66:fd:a0:4f:cd:
         de:9d:3e:b8:14:80:f6:47:97:04:ab:d9:79:e1:e5:81:9c:75:
         7d:4d:07:43:4d:7e:b7:f0:46:b9:c3:7f:b9:16:5d:35:26:e5:
         81:11:d3:c5:73:3e:b9:0c:7f:d6:20:02:7e:9f:25:e4:55:e8:
         3a:20:98:15:d5:81:da:44:5a:75:ed:ec:37:25:11:67:78:39:
         31:a6:72:6e:7c:da:e3:cf:88:40:8a:42:d6:40:7c:68:60:7a:
         85:87:2c:19:22:24:d9:82:ad:54:ec:38:50:49:0c:29:7f:3e:
         92:fc:49:9a:76:84:e2:b5:fb:96:44:12:61:d7:08:fc:a0:b7:
         d1:35:9f:2b:1c:9b:c2:32:0d:34:9b:a7:21:e0:f9:8e:b4:8c:
         67:37:17:3c:36:e7:33:0b:9b:68:bd:f8:2e:3a:55:f6:76:0c:
         a7:13:39:f3:cd:33:7d:2f:52:e7:6a:b8:a4:0e:97:c2:8d:a3:
         3a:ab:8c:08:c5:7f:05:ca:f7:80:e7:76:a9:bb:e7:b5:b1:8a:
         9e:42:38:7f:d0:aa:87:5a:36:f7:7f:d4:e1:30:b6:75:01:7c:
         fa:64:77:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org