Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/ADFD2819214AB1C69729E691916C0E6404E7B2DD.cer
File:                     ADFD2819214AB1C69729E691916C0E6404E7B2DD.cer (raw, json)
Hash identifier:          qWfUzE0LL3f1n3Um+GjWWSvFq5fWjOKV31ML1bRz8xk=
Subject key identifier:   AD:FD:28:19:21:4A:B1:C6:97:29:E6:91:91:6C:0E:64:04:E7:B2:DD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       588196DB47DDC0FA00862A1D637BFD270B649072
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/ADFD2819214AB1C69729E691916C0E6404E7B2DD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 17 Jul 2023 00:23:29 +0000
Certificate not after:    Mon 15 Jul 2024 00:28:29 +0000
Subordinate resources:    AS: 266166
                          IP: 72.44.20.0/22
                          IP: 2804:3bb4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:81:96:db:47:dd:c0:fa:00:86:2a:1d:63:7b:fd:27:0b:64:90:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 17 00:23:29 2023 GMT
            Not After : Jul 15 00:28:29 2024 GMT
        Subject: CN=ADFD2819214AB1C69729E691916C0E6404E7B2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:70:fb:6c:a4:04:35:03:64:1a:c5:da:1d:46:
                    ae:3b:b1:05:ac:a8:1a:fe:86:58:26:44:7a:80:a2:
                    b1:ee:9d:51:5a:65:62:c6:aa:32:5b:c7:df:5d:0b:
                    66:d7:51:0f:7b:b9:74:0a:36:15:bf:1c:cf:72:71:
                    d6:67:a6:94:88:c8:64:10:a7:06:b5:8c:bb:3c:e8:
                    58:db:d5:94:4c:a8:0b:74:aa:3d:74:6a:b5:0c:27:
                    94:79:cd:a1:0a:05:0f:02:46:d4:3c:f5:13:ff:cd:
                    ff:fb:ca:10:d3:67:e2:e2:e7:02:16:f3:c3:1f:63:
                    58:2b:8f:61:b2:c6:db:7c:59:a4:02:23:14:c3:41:
                    f7:6c:b0:82:a9:df:2c:02:36:50:5c:9d:39:c6:b8:
                    b5:8a:6e:a3:0e:c9:f6:91:51:25:45:90:20:0a:77:
                    26:0d:02:6a:05:b0:61:58:da:9b:87:de:18:6f:b3:
                    16:e3:84:64:75:23:0f:11:af:83:ca:11:38:9d:be:
                    5d:47:ca:b7:f7:e0:f1:20:ea:dd:22:73:22:e5:f9:
                    6c:5d:a9:87:fb:8f:98:c0:54:54:ec:ee:e4:d2:2b:
                    2b:df:5f:32:cc:70:29:56:28:03:1e:a4:de:5a:fc:
                    5a:39:ed:c5:11:60:03:54:cf:82:f7:39:15:8a:dc:
                    a8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                AD:FD:28:19:21:4A:B1:C6:97:29:E6:91:91:6C:0E:64:04:E7:B2:DD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bra7ynZxBgwvGg9EZLPZS6dp8RaRhJKUEMg2E1pXqkZc/0/ADFD2819214AB1C69729E691916C0E6404E7B2DD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.44.20.0/22
                IPv6:
                  2804:3bb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266166

    Signature Algorithm: sha256WithRSAEncryption
         70:5d:06:34:c9:84:35:14:43:8c:fb:0c:e0:6b:33:30:b7:bd:
         26:1d:d4:03:b0:f6:07:34:26:2b:57:13:46:f6:8d:08:9a:0b:
         c1:77:d6:c4:56:18:d1:7e:83:12:7a:bc:e0:34:f8:87:e2:51:
         6e:5e:be:12:09:a5:a6:bc:f1:db:03:4e:c0:07:9e:60:36:b9:
         09:73:ea:de:2c:64:f6:ac:c8:cc:41:d3:56:77:53:71:67:ee:
         78:cb:63:76:3b:fd:64:c0:b9:84:62:c0:a2:86:f4:ff:e4:7a:
         84:99:15:ff:aa:73:c5:df:f1:ac:56:4f:80:71:86:3a:2f:12:
         ef:0d:b2:46:a5:28:60:3a:be:88:96:f3:81:eb:9d:e2:44:9b:
         61:80:da:a3:bf:30:48:77:54:53:f2:b8:03:32:6a:99:05:f3:
         30:d5:e1:c1:18:3c:97:15:46:23:ef:73:55:3a:56:78:de:65:
         ad:ec:25:43:1a:86:18:d4:2a:f2:57:d7:f4:c3:d8:6b:9b:70:
         73:fb:26:af:4d:d8:aa:38:e0:a5:7f:c9:bc:52:2b:21:7c:e3:
         eb:d4:02:6e:88:3c:27:be:99:6c:7e:a6:48:a9:62:c6:92:fa:
         81:1b:a4:5d:11:35:fa:32:f5:d4:b3:0b:b1:aa:69:be:f6:0e:
         6e:28:6c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org