Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C50CA4FF7E2D11574F46D0D7274665DAA95B21B5.cer
File:                     C50CA4FF7E2D11574F46D0D7274665DAA95B21B5.cer (raw, json)
Hash identifier:          n3g/Gd8S+XRcjCAqd+VEUoyME02+fusQ063mcfdS0AQ=
Subject key identifier:   C5:0C:A4:FF:7E:2D:11:57:4F:46:D0:D7:27:46:65:DA:A9:5B:21:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2EA6210B14D1A00BB20E650F7BF2A18B609F0488
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/1/C50CA4FF7E2D11574F46D0D7274665DAA95B21B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 20:49:46 +0000
Certificate not after:    Tue 25 Feb 2025 20:54:46 +0000
Subordinate resources:    AS: 269015
                          IP: 45.178.20.0/22
                          IP: 2804:5e28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a6:21:0b:14:d1:a0:0b:b2:0e:65:0f:7b:f2:a1:8b:60:9f:04:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 27 20:49:46 2024 GMT
            Not After : Feb 25 20:54:46 2025 GMT
        Subject: CN=C50CA4FF7E2D11574F46D0D7274665DAA95B21B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:db:a7:a9:86:53:ec:f5:a3:5b:ec:ab:c6:
                    a4:cc:31:85:60:db:f5:78:20:f4:86:04:96:4c:2d:
                    dd:2d:0c:95:fc:ff:99:30:5f:71:69:2b:b5:5d:b9:
                    be:e6:b4:93:08:a7:9a:bc:4f:e7:a2:2c:19:29:8d:
                    6d:40:08:e4:e6:d8:d2:87:2b:d0:0c:8e:02:c2:d1:
                    36:a4:8a:30:d7:19:cf:71:5d:7b:17:45:0f:25:d9:
                    de:2b:8c:68:08:95:8b:d8:a4:fb:19:ce:aa:08:21:
                    0f:f7:ba:58:e7:8a:ed:50:8d:eb:e4:cc:fb:89:dc:
                    89:7f:3b:ef:bc:40:3d:01:40:4d:43:3a:55:df:77:
                    82:23:af:b2:77:7b:c6:ac:8f:95:eb:ce:e3:73:84:
                    57:04:fc:5c:2b:87:ba:85:25:2b:41:45:b3:e3:4d:
                    1e:b2:32:4a:0a:e1:53:9f:88:b9:96:8a:9b:8f:c0:
                    12:eb:aa:63:5b:73:71:67:0d:e9:b2:a3:78:54:ff:
                    04:15:fb:c2:13:3a:03:4e:dc:4c:d6:91:2a:1d:b2:
                    a7:01:99:cd:28:2b:fb:e6:df:6f:96:98:72:86:31:
                    ca:b8:28:ba:1d:2a:5e:95:27:ae:5d:6f:e6:90:5c:
                    ee:0f:17:8d:54:2a:a2:bf:c8:7f:b4:c9:d1:df:7e:
                    7d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C5:0C:A4:FF:7E:2D:11:57:4F:46:D0:D7:27:46:65:DA:A9:5B:21:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4QEdUwLT41Yu64VZWZGyYwekhFbm5cUrKC6QZhkreEgp/1/C50CA4FF7E2D11574F46D0D7274665DAA95B21B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.20.0/22
                IPv6:
                  2804:5e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269015

    Signature Algorithm: sha256WithRSAEncryption
         93:ea:4e:89:76:35:80:e0:6a:c4:58:9d:c2:b4:8d:dc:3b:90:
         a0:fa:7c:6c:01:d2:7a:ec:c7:66:30:0a:92:ef:c0:ba:08:96:
         79:af:07:e4:63:ed:f0:d1:9d:f0:e3:6f:20:d4:cd:ad:4b:38:
         c6:d7:99:45:bb:f9:42:55:3a:ef:af:75:99:db:c1:50:53:70:
         48:17:9d:0a:fa:42:60:e6:94:1d:51:3f:af:d7:87:f7:02:67:
         e0:22:dd:57:9e:13:4b:78:d6:8b:34:a4:4e:66:31:f1:35:65:
         d5:5a:3e:93:cb:68:3e:09:16:ce:65:e4:c0:7a:b5:b1:fe:0c:
         a9:59:00:61:5f:47:55:25:a7:03:20:91:0d:30:03:67:05:c0:
         1f:31:76:22:cb:82:a1:da:b7:d8:98:c6:27:0c:d4:ab:bf:5b:
         a7:ca:ec:78:32:fa:c9:87:50:bb:46:89:41:c0:9f:ed:30:94:
         2b:a6:89:e7:c6:6f:24:56:1c:92:40:b5:0d:0b:38:e7:6f:05:
         03:3a:36:61:8b:a0:98:27:13:b7:59:69:79:77:75:e6:d8:96:
         49:5e:e5:c9:a8:0b:0e:fb:75:1a:36:ce:53:3b:5b:64:1e:fc:
         9f:cc:8c:7f:2c:e2:22:83:a1:7c:cc:74:9b:b6:07:3d:83:81:
         30:34:88:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org