Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C297D032290ADB0DA80D712D1C9C8B5414068CBA.cer
File:                     C297D032290ADB0DA80D712D1C9C8B5414068CBA.cer (raw, json)
Hash identifier:          vosyIz5mHI9USvS132Ysi/KH/jboyEy6qLEaYVKs+zI=
Subject key identifier:   C2:97:D0:32:29:0A:DB:0D:A8:0D:71:2D:1C:9C:8B:54:14:06:8C:BA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       77BBBEDA5AB57C7CC27E9CE5BE9E551CEF2D9CA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/C297D032290ADB0DA80D712D1C9C8B5414068CBA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 02:03:20 +0000
Certificate not after:    Mon 16 Dec 2024 02:08:20 +0000
Subordinate resources:    AS: 263395
                          IP: 168.194.136.0/22
                          IP: 177.125.124.0/22
                          IP: 2804:1590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:bb:be:da:5a:b5:7c:7c:c2:7e:9c:e5:be:9e:55:1c:ef:2d:9c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 02:03:20 2023 GMT
            Not After : Dec 16 02:08:20 2024 GMT
        Subject: CN=C297D032290ADB0DA80D712D1C9C8B5414068CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:96:bd:92:2e:21:97:6a:4b:2b:c5:88:71:
                    1c:dc:5e:ab:6d:86:12:b3:54:00:32:a5:3e:c1:c6:
                    dc:b2:d0:8b:b0:a0:87:ba:37:a9:44:a8:d9:12:b1:
                    5d:fa:a1:d4:5a:10:bf:be:5d:d6:44:f2:70:0d:e2:
                    48:3c:fc:b6:d8:20:81:5c:82:01:f1:61:fb:13:92:
                    c1:4b:05:ab:6f:c1:5f:12:ca:7d:83:db:7a:18:11:
                    cf:06:78:ee:7a:82:14:3c:75:ae:b2:f0:26:23:8e:
                    c7:b9:d0:3a:e6:80:97:84:89:2d:b1:21:20:7d:6a:
                    de:ac:9d:1e:70:d8:1b:0a:17:16:7e:ea:b9:ac:79:
                    81:65:57:2f:4c:92:82:1c:dd:3d:03:ef:a8:b0:e2:
                    9c:25:d4:bc:d8:e2:d4:14:ee:d0:cd:72:9d:bf:f6:
                    3e:8d:b7:a7:9e:a7:5c:79:40:d3:3c:98:73:09:fa:
                    fb:e9:af:7e:40:82:22:67:35:a8:72:5f:85:9d:4d:
                    cf:9b:dc:29:f9:8e:23:7f:63:9b:af:40:3a:cf:fe:
                    69:a6:d8:95:70:a3:4a:98:ab:5f:79:e1:1c:f7:01:
                    19:71:57:39:34:32:82:ad:fc:70:fd:f6:6a:b8:91:
                    ec:b0:f4:68:26:37:e6:5c:23:e2:07:b3:d7:48:e0:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:97:D0:32:29:0A:DB:0D:A8:0D:71:2D:1C:9C:8B:54:14:06:8C:BA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FFoFqBx7xSvSrj32ZF2zJtBqCLitEEGD2x49VqdQ5Sn4/0/C297D032290ADB0DA80D712D1C9C8B5414068CBA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.136.0/22
                  177.125.124.0/22
                IPv6:
                  2804:1590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263395

    Signature Algorithm: sha256WithRSAEncryption
         34:72:30:ce:e5:d6:71:4d:70:a2:d3:f8:5f:b4:e7:33:01:e7:
         25:f7:84:6d:1b:81:ab:b5:91:6d:ac:24:a9:08:ad:78:4f:4a:
         19:0d:46:c8:fb:66:b2:40:bf:d6:a6:bc:a4:24:24:10:93:c2:
         23:15:34:e1:eb:1e:43:a5:4e:4c:01:bf:79:f8:e8:54:8c:4e:
         8f:5c:d4:4f:69:2a:03:8d:b8:c3:44:bf:52:26:5e:1c:2e:5c:
         5c:a9:52:1f:5f:8e:5a:9f:2d:58:48:f0:30:0b:67:cc:43:b2:
         e3:32:5c:30:8a:9c:ec:5f:27:a3:c6:19:4e:11:59:1e:0a:b1:
         5b:74:93:5a:2f:69:25:e0:73:77:81:55:e5:74:2f:58:9d:a8:
         49:73:a6:b8:72:a6:92:ba:b9:6c:79:71:2a:3a:68:94:f1:3c:
         9e:77:a8:47:b1:23:be:6f:c0:8a:76:28:51:f8:68:0e:0b:8e:
         ff:01:fd:ec:0b:a0:bc:7f:76:c1:6b:0a:f5:0c:0c:01:c4:e8:
         50:e0:bc:d2:15:5f:7e:42:c6:7c:c6:3d:27:3f:c6:76:37:79:
         5c:9c:ad:65:c5:dd:3a:d6:28:7e:3b:43:47:cf:75:4b:d4:87:
         c5:ff:e6:f0:cd:80:94:04:3d:81:33:4a:43:6c:f2:fb:2a:15:
         0e:b0:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org