Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer
File:                     ADAED9008F24F5B61987180BB1C1D68810BA17CC.cer (raw, json)
Hash identifier:          lFnrgKCbjsm7Er1ndvejBNsindEtvP+BWobA01yZh5Q=
Subject key identifier:   AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       275BC4925DA3C50E5AAB3CCE7BE75ACE8875DBD0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 14:55:09 +0000
Certificate not after:    Thu 07 Nov 2024 15:00:09 +0000
Subordinate resources:    AS: 262611
                          IP: 168.228.168.0/22
                          IP: 177.85.176.0/21
                          IP: 2804:2fc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5b:c4:92:5d:a3:c5:0e:5a:ab:3c:ce:7b:e7:5a:ce:88:75:db:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 14:55:09 2023 GMT
            Not After : Nov  7 15:00:09 2024 GMT
        Subject: CN=ADAED9008F24F5B61987180BB1C1D68810BA17CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:9c:5c:05:23:d5:bf:ce:0c:bb:6f:de:5d:
                    9f:3a:cc:39:55:0b:be:5b:af:53:88:45:78:cb:98:
                    fc:76:54:a4:37:b6:c0:c7:8c:db:b8:49:9e:66:aa:
                    0c:1f:4a:66:9a:85:5a:19:7f:85:a1:bf:aa:b2:b7:
                    c9:93:8a:93:74:9f:6b:44:75:25:dd:8e:b6:2e:a3:
                    f4:f7:d6:23:59:de:1b:cb:28:6e:92:5c:18:1e:02:
                    f0:c5:cf:70:4a:f7:71:21:4b:b8:c9:c4:66:e6:b9:
                    f5:c5:4c:03:b7:a4:f7:0a:05:0b:d1:43:8b:db:ae:
                    a7:1a:50:59:3d:97:d4:6b:78:6c:b2:e9:d3:55:ff:
                    aa:53:1d:f7:03:95:b1:eb:27:31:8c:eb:9e:37:cc:
                    6c:c5:1f:5c:d4:27:c1:54:12:f5:10:73:6c:85:87:
                    8b:fb:6f:f6:06:8c:a9:29:90:26:45:18:4f:b2:dc:
                    21:0a:0d:77:7b:5a:12:3e:79:91:fa:e4:4e:2b:a0:
                    71:b9:96:a6:75:6b:ec:87:87:70:81:b7:f9:0b:77:
                    63:b3:b3:53:25:06:e4:e2:59:a0:ea:a9:29:f7:51:
                    f4:40:ba:c1:c2:fd:2f:5c:7d:02:91:be:b1:13:7e:
                    b4:d2:ea:ad:96:5f:02:39:b3:d2:e5:f3:37:11:39:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:AE:D9:00:8F:24:F5:B6:19:87:18:0B:B1:C1:D6:88:10:BA:17:CC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ArT8vrDjqy4bWaMCtFP24CFU5hMzWhHRkjvgxZyQBQkp/0/ADAED9008F24F5B61987180BB1C1D68810BA17CC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.168.0/22
                  177.85.176.0/21
                IPv6:
                  2804:2fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262611

    Signature Algorithm: sha256WithRSAEncryption
         22:40:70:93:3c:d4:f2:b6:ac:38:69:be:d2:1f:11:bb:f3:a4:
         cf:a1:04:1d:bb:d1:b9:9f:73:99:81:08:3b:cd:a7:52:ef:2a:
         71:37:8d:7b:b3:04:9c:81:9e:e8:7f:c6:8f:59:84:bd:a9:5e:
         77:7f:15:14:18:b0:19:95:d9:cd:73:08:99:e3:65:d1:5f:a8:
         7e:fa:f5:b3:97:30:60:7b:21:0e:70:fe:f7:c0:74:38:99:24:
         2d:b7:ff:b3:88:64:1d:74:41:bc:15:6c:e2:26:b7:f6:b8:e9:
         7c:a9:83:cf:19:30:dd:f2:57:4e:6e:26:e2:5a:6a:97:0a:2b:
         13:27:11:ae:60:d5:db:4b:0d:7e:fc:53:93:e9:48:77:42:78:
         cb:8b:5c:26:a7:a7:be:f9:c6:ea:aa:e8:ab:d5:db:4e:8e:c6:
         6a:5b:d4:94:62:1b:0c:9a:4e:17:1e:0e:d7:69:e4:ef:b7:97:
         d5:f9:db:ff:b4:34:d4:ac:ef:b3:38:4c:dc:42:52:ac:06:e1:
         3a:17:34:31:43:9b:4e:7d:7e:79:be:7e:9e:47:fc:e2:9b:41:
         07:d6:90:b3:16:f3:ee:cb:be:ba:5b:ef:6b:69:33:d7:c7:c9:
         d0:21:93:54:a4:ed:a0:45:35:e2:95:60:40:c1:2b:3b:fd:67:
         07:06:ba:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org