Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C345508521A4D25F6D9144D869E703D092920C95.cer
File:                     C345508521A4D25F6D9144D869E703D092920C95.cer (raw, json)
Hash identifier:          fH2yH/QHO5+brIaVNUQHGHZ39hEn7E1lpJSUa5Xuo5Y=
Subject key identifier:   C3:45:50:85:21:A4:D2:5F:6D:91:44:D8:69:E7:03:D0:92:92:0C:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       143845826F9806D119E122A0619AD809F5EB76F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/0/C345508521A4D25F6D9144D869E703D092920C95.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Jan 2024 18:05:08 +0000
Certificate not after:    Wed 22 Jan 2025 18:10:08 +0000
Subordinate resources:    AS: 268881
                          IP: 45.175.32.0/22
                          IP: 2804:5bfc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:38:45:82:6f:98:06:d1:19:e1:22:a0:61:9a:d8:09:f5:eb:76:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 24 18:05:08 2024 GMT
            Not After : Jan 22 18:10:08 2025 GMT
        Subject: CN=C345508521A4D25F6D9144D869E703D092920C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4e:60:9e:49:35:69:94:27:a4:0c:0d:a3:0f:
                    a9:17:ce:f4:43:a1:ac:66:22:da:64:87:d9:99:5f:
                    bf:98:f6:bc:00:6c:c2:3c:5d:83:ca:84:45:8a:18:
                    55:fb:27:25:fd:38:2a:ef:a5:7d:cc:aa:6f:2e:c4:
                    0b:e9:b7:42:d9:e9:5a:a0:d2:ce:3b:15:14:18:4c:
                    29:3a:b8:80:af:cb:32:d6:d8:3f:5d:9f:b7:15:b0:
                    2c:44:0a:3f:e4:fa:a1:ae:d9:04:54:da:43:c7:95:
                    c5:2d:ba:8a:78:43:ee:e3:b2:6e:9f:92:aa:3d:0b:
                    ce:48:56:88:18:c6:da:1e:3c:7c:35:64:5d:4b:98:
                    fa:9a:b0:02:7b:b3:dd:44:33:3d:5d:57:6d:31:c4:
                    96:6c:85:2f:13:7b:5f:82:7e:7a:21:87:cb:b3:36:
                    36:32:77:bd:eb:aa:1b:5c:ec:bc:31:9c:27:29:e3:
                    9c:b4:e5:2c:eb:81:d4:b5:8d:e8:31:38:85:44:10:
                    5e:b8:bb:c0:13:f7:6f:6c:2f:9a:12:2a:88:b4:10:
                    90:a4:e5:fe:68:50:58:82:38:31:e5:d4:bb:fb:0d:
                    69:85:4e:73:39:58:ab:c1:77:e5:6f:54:2c:c0:05:
                    07:42:0a:3f:71:6a:4d:b1:e9:82:a2:2b:d9:b8:dc:
                    ff:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C3:45:50:85:21:A4:D2:5F:6D:91:44:D8:69:E7:03:D0:92:92:0C:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9xjhrC4ZruiyKNKtL1bpfD8uFtfzevcfwDLMrLTiDncL/0/C345508521A4D25F6D9144D869E703D092920C95.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.32.0/22
                IPv6:
                  2804:5bfc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268881

    Signature Algorithm: sha256WithRSAEncryption
         22:4f:17:08:e9:f8:4b:ef:8b:46:bd:2c:78:39:32:72:bd:4f:
         62:80:73:d7:ca:62:09:91:79:55:78:ca:a4:ca:02:25:77:44:
         96:89:fd:5b:fe:b5:4c:aa:53:18:e9:7d:55:d0:f2:6f:26:71:
         c6:f9:bd:58:b2:02:5c:07:bf:8f:d2:59:ff:82:5c:15:33:34:
         69:4b:e8:dc:25:b4:54:cd:11:a3:65:35:26:2f:03:db:11:b8:
         30:ec:fd:40:4c:30:82:a1:4f:83:0e:a3:aa:95:72:da:1e:41:
         83:15:3b:83:08:c7:85:48:13:f1:60:a2:5e:9c:81:36:74:2b:
         3d:7f:e1:eb:15:84:61:a6:54:18:4b:c8:0c:c8:9a:e9:71:93:
         d9:be:68:ea:5b:c1:04:ef:21:3a:d6:01:37:ac:87:63:1f:b8:
         f3:03:75:a7:1c:b9:1a:e6:bf:79:61:66:cc:4b:b0:27:ea:20:
         54:5c:bd:a6:fd:74:f4:cf:d0:33:7b:19:64:6c:47:bd:fc:f7:
         24:63:52:a8:b0:42:5c:dc:cf:85:5c:d4:bd:b4:a4:ab:0f:35:
         bb:f7:a9:ef:60:c2:5b:75:cc:38:35:fd:26:83:6e:da:ae:a1:
         06:6e:82:00:3c:c5:fe:03:c1:c6:17:d0:d4:17:93:06:1e:b1:
         0f:a1:06:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org