Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ADD8ED2BBD9FC0DA502DAEB92AC8DBDC99A11D51.cer
File:                     ADD8ED2BBD9FC0DA502DAEB92AC8DBDC99A11D51.cer (raw, json)
Hash identifier:          JoHg83ovEHyt2ffNcqWe4SiWUW7+IQFZ6hHI/krrBIM=
Subject key identifier:   AD:D8:ED:2B:BD:9F:C0:DA:50:2D:AE:B9:2A:C8:DB:DC:99:A1:1D:51
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7FDA59D85F65F7FB57317998748AB05740269760
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/ADD8ED2BBD9FC0DA502DAEB92AC8DBDC99A11D51.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 16 Oct 2022 10:40:07 +0000
Certificate not after:    Sun 15 Oct 2023 10:45:07 +0000
Subordinate resources:    AS: 268623
                          IP: 45.164.120.0/22
                          IP: 2804:5404::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:da:59:d8:5f:65:f7:fb:57:31:79:98:74:8a:b0:57:40:26:97:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 16 10:40:07 2022 GMT
            Not After : Oct 15 10:45:07 2023 GMT
        Subject: CN=ADD8ED2BBD9FC0DA502DAEB92AC8DBDC99A11D51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fd:ca:49:fa:9f:89:97:17:a5:10:b3:2b:e0:
                    cd:b4:a3:56:e8:f9:fb:61:52:29:cd:0d:42:27:8f:
                    89:4d:80:a1:74:17:70:86:77:e3:ee:63:f5:8f:06:
                    1b:65:9d:59:22:9a:0e:0d:44:2e:f5:aa:90:20:d1:
                    cc:61:9c:09:37:e1:b3:9c:4f:f1:2e:52:0f:20:4d:
                    26:ac:97:83:f6:d0:fe:94:54:35:91:c4:9c:7f:ef:
                    a8:88:5e:40:09:be:96:25:15:af:c1:f5:dd:e9:98:
                    ca:16:14:25:1b:56:87:ca:9c:c8:5a:c3:59:f9:e0:
                    96:d0:97:0d:e6:27:13:2b:32:10:b9:99:1b:f4:f5:
                    15:97:3b:1b:72:50:b7:87:d6:58:50:2d:59:e1:7b:
                    32:a2:fd:ff:fa:49:8e:54:dd:8a:f8:9b:52:9d:55:
                    ef:b4:dd:90:dd:72:d1:52:f4:ec:7e:9d:f5:50:a8:
                    92:71:31:eb:b0:ec:40:19:23:e0:de:ae:c2:6d:6c:
                    ee:63:6b:75:85:24:1b:8d:e5:60:f3:c9:5a:7a:fb:
                    49:ee:f8:a7:9a:41:7a:f6:bd:2b:b4:18:78:17:4d:
                    b9:d9:c3:2d:f9:23:d6:ba:c8:22:db:ee:3d:ad:5c:
                    85:8b:16:5b:6e:d5:9f:56:9b:50:c9:c5:de:90:ca:
                    77:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:D8:ED:2B:BD:9F:C0:DA:50:2D:AE:B9:2A:C8:DB:DC:99:A1:1D:51
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8jP4zKawH4gkmow44kuioFphqVAJ361LQp6jyycvLFco/0/ADD8ED2BBD9FC0DA502DAEB92AC8DBDC99A11D51.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.120.0/22
                IPv6:
                  2804:5404::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268623

    Signature Algorithm: sha256WithRSAEncryption
         b8:4d:3e:b6:9a:8c:e9:96:a7:c5:ec:62:04:3f:6f:b6:dc:8d:
         09:3d:aa:05:e5:70:6b:f3:8c:50:0d:74:dd:47:55:f1:12:73:
         6a:e0:67:2c:9e:6b:16:52:90:c7:b7:49:4b:26:66:55:24:f1:
         c3:59:39:3e:d3:20:cb:81:47:a1:8e:54:5c:39:e9:8d:1a:18:
         f9:25:3d:6f:7f:66:e4:ba:7a:58:3e:d1:82:ab:86:73:86:6e:
         6c:63:07:be:7c:e8:a4:b9:09:ef:c7:c6:24:94:f4:d6:75:dc:
         d2:ae:06:eb:0b:20:af:24:4c:7f:a3:64:06:ce:93:50:08:31:
         94:40:61:5c:5e:8c:f4:58:45:d9:46:a0:45:4d:8a:87:58:c3:
         27:81:09:9d:6d:70:a3:fc:42:60:a7:ba:88:3d:73:48:ef:98:
         51:e0:13:ad:a9:62:fb:6c:57:ca:d0:a8:83:6e:0d:d8:6c:d1:
         9d:51:92:52:e5:95:32:85:ee:9b:67:9c:e1:a9:b8:fc:2f:c0:
         55:02:c3:01:c1:18:41:ac:b9:16:61:ef:66:7f:96:97:1d:14:
         88:6f:7a:cc:13:bd:1b:c5:fe:1f:fc:28:35:cd:3f:1b:27:d1:
         e6:c6:c8:2d:27:50:35:05:a0:f8:41:e1:db:47:eb:18:7b:b2:
         3b:57:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org