Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ADE422DDDDCA4BE538D94666695572095FCEDC5B.cer
File:                     ADE422DDDDCA4BE538D94666695572095FCEDC5B.cer (raw, json)
Hash identifier:          yDQya1GsYbNXY2xOkqswiRY0JCkXA3+JRzBV0LVHfmc=
Subject key identifier:   AD:E4:22:DD:DD:CA:4B:E5:38:D9:46:66:69:55:72:09:5F:CE:DC:5B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0809EA7A13B780B9A0B407A18AD7CDD66F06ACC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/ADE422DDDDCA4BE538D94666695572095FCEDC5B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2024 13:00:56 +0000
Certificate not after:    Thu 13 Mar 2025 13:05:56 +0000
Subordinate resources:    AS: 52898
                          IP: 168.227.156.0/22
                          IP: 177.184.64.0/20
                          IP: 2804:a9c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:09:ea:7a:13:b7:80:b9:a0:b4:07:a1:8a:d7:cd:d6:6f:06:ac:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 13:00:56 2024 GMT
            Not After : Mar 13 13:05:56 2025 GMT
        Subject: CN=ADE422DDDDCA4BE538D94666695572095FCEDC5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:15:eb:0d:fb:80:82:2d:a2:f2:7a:8a:7d:bf:
                    b5:2b:c9:80:ea:12:3b:0c:ea:20:aa:a8:99:8f:e7:
                    b4:4e:bb:27:66:24:7e:f0:0d:c1:52:13:ec:6e:b1:
                    4d:6e:52:a3:05:58:c2:00:4e:90:e6:bf:fe:e0:ef:
                    b9:69:7e:91:9d:00:16:3f:84:13:c8:44:2c:aa:17:
                    2e:9d:3a:a1:c5:c6:25:ca:e6:ed:64:f3:16:2a:16:
                    c3:74:fa:1f:e4:11:ee:57:62:92:cf:03:1a:cc:9d:
                    28:98:f2:8d:a1:5e:18:1d:17:82:99:97:e2:8f:97:
                    fc:08:78:c8:8b:8f:24:bc:86:95:51:17:06:9c:c4:
                    58:8e:3f:0f:d5:9f:85:e1:55:fc:af:44:0a:89:b2:
                    61:0c:04:73:50:3c:7c:52:86:d5:e1:9a:a3:cf:45:
                    91:25:84:c6:0a:11:f6:61:70:b0:f4:1d:3d:8e:2c:
                    f0:45:d7:ed:f8:c8:12:09:de:7c:98:d2:88:58:38:
                    aa:7b:ea:76:de:51:7c:f6:a2:ee:48:54:15:d9:e4:
                    16:0b:2c:b1:f4:e7:15:d8:d8:46:fe:54:1f:ac:41:
                    42:9b:7c:c5:12:b4:90:1a:d3:af:43:73:06:45:c2:
                    60:0b:9e:14:c6:ec:a2:d9:28:ac:4b:c8:d1:fd:56:
                    51:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:E4:22:DD:DD:CA:4B:E5:38:D9:46:66:69:55:72:09:5F:CE:DC:5B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/ADE422DDDDCA4BE538D94666695572095FCEDC5B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.156.0/22
                  177.184.64.0/20
                IPv6:
                  2804:a9c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52898

    Signature Algorithm: sha256WithRSAEncryption
         5d:af:cd:f7:42:0b:84:ba:fe:3f:9c:9f:ae:b6:19:b6:30:60:
         29:7e:9d:e7:47:54:83:91:ab:e5:e3:13:d7:b1:9c:4e:9d:c8:
         bf:d0:1b:14:a2:3d:7d:f9:5a:27:d4:ba:d9:ac:57:55:26:7d:
         48:0d:1f:c9:4a:b5:46:ff:90:10:0a:6f:7b:aa:fc:bf:88:e3:
         85:2c:01:be:a0:f4:6d:6d:3e:0a:ed:ca:ce:e1:41:13:9b:3b:
         92:ba:dc:eb:62:96:7a:16:bb:5e:aa:1a:14:9c:4a:9a:8a:ef:
         5a:72:5d:f6:d1:3d:9d:d6:2d:2e:b0:84:49:d5:f2:28:c5:c9:
         ba:4f:20:41:ac:39:6f:f0:10:09:da:23:f9:93:82:60:13:90:
         b2:1a:47:fb:99:be:e1:ec:ae:b8:5a:3e:24:1a:96:19:a3:13:
         10:a1:5c:44:50:2d:4c:15:33:f6:9f:66:bc:ba:90:69:a2:c6:
         8d:79:11:e3:8d:35:3d:ab:8a:69:1a:08:56:2f:35:23:23:28:
         4b:0b:e3:a8:b7:44:b3:74:1f:b2:10:31:68:53:cf:20:ce:9a:
         3b:56:8b:d7:4f:c3:73:67:80:ff:52:c7:0e:2a:cd:52:d6:8c:
         bf:bb:4d:5e:65:4e:9c:f0:13:b1:7b:83:c2:3f:c7:9a:3f:c6:
         88:8e:ee:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org