Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.cer
File:                     CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.cer (raw, json)
Hash identifier:          cgJA79GPA99Fbye0tLvkj3/6hcACvNI1PQZ+yJWSYkc=
Subject key identifier:   CA:69:6F:B5:9B:AE:49:26:96:4E:7F:1F:AB:B3:F5:C6:A9:3F:44:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0164496E90FD21E5C1829A8526DC347CA9B230C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:15:10 +0000
Certificate not after:    Thu 03 Apr 2025 19:20:10 +0000
Subordinate resources:    AS: 270485
                          IP: 24.152.68.0/22
                          IP: 2804:6cb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:64:49:6e:90:fd:21:e5:c1:82:9a:85:26:dc:34:7c:a9:b2:30:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  4 19:15:10 2024 GMT
            Not After : Apr  3 19:20:10 2025 GMT
        Subject: CN=CA696FB59BAE4926964E7F1FABB3F5C6A93F443B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:45:03:a9:6b:d2:f7:05:20:d0:34:ff:f8:31:
                    55:9f:e3:43:27:8a:5c:8c:5f:bc:a8:c4:e1:5e:a8:
                    ca:84:be:fb:f5:1d:9b:12:21:14:5c:0f:be:c4:dd:
                    d9:e3:90:31:80:24:b4:05:9a:f0:83:be:ae:e5:ee:
                    41:1a:f1:0a:c9:c7:fa:80:b5:62:b1:15:e1:6a:ae:
                    34:a9:ac:55:e0:c6:08:2a:fc:30:55:27:2a:33:0c:
                    6a:3a:17:88:d8:2a:fb:e8:f3:56:a3:12:6f:94:a9:
                    dd:a4:2f:e9:c5:25:63:85:3a:05:0d:f9:a5:8c:d3:
                    b9:76:1a:46:cd:9a:c7:46:4d:b1:3c:15:10:b0:1b:
                    8d:5e:53:66:eb:1d:5f:6e:3e:f8:71:a1:c2:2e:2a:
                    d8:3c:56:a7:78:01:21:d2:62:00:95:3b:23:29:45:
                    ca:c3:05:9f:c8:59:b5:bd:f3:85:7d:a7:03:f2:8e:
                    c7:c1:b3:9a:d6:cf:0c:d6:43:db:ec:1d:23:7d:59:
                    d6:8d:ed:0d:ef:13:90:38:a5:d6:0d:93:93:a2:07:
                    95:45:3e:59:5e:cf:27:7c:07:1b:dc:d3:fb:cb:ce:
                    a4:78:12:c0:09:06:15:8c:d2:91:67:76:2e:34:b3:
                    b6:ee:c0:2d:e7:73:b0:48:1e:05:a3:bd:d5:34:80:
                    52:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:69:6F:B5:9B:AE:49:26:96:4E:7F:1F:AB:B3:F5:C6:A9:3F:44:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3R6ko45HGS3Xckt7ZagR4hZzEmeDAkDJsnK2eZEBrKdS/0/CA696FB59BAE4926964E7F1FABB3F5C6A93F443B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.68.0/22
                IPv6:
                  2804:6cb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270485

    Signature Algorithm: sha256WithRSAEncryption
         05:24:53:55:37:3d:a8:33:f0:6e:f8:6e:e2:32:3c:65:cd:15:
         c0:27:c1:ba:ac:da:ac:45:65:b4:74:3d:fc:78:6f:47:30:1c:
         24:da:88:66:09:90:a3:8a:92:49:74:97:4c:7f:1f:cf:a5:1a:
         f7:8a:69:dd:2d:7d:9a:53:0d:35:83:a6:88:b1:25:b9:f8:2e:
         e9:ce:06:cd:9d:ca:c7:4b:2e:38:e4:c7:67:fb:f4:92:9b:24:
         d0:8e:ec:c9:a6:e7:b0:6c:1d:24:66:ba:b7:3b:85:29:74:61:
         69:51:7a:a0:7a:fa:20:24:44:cd:89:42:ac:08:2d:c9:fb:bb:
         e4:e1:53:38:b6:33:8f:f0:9a:c2:58:5a:f6:60:e0:f6:6a:5d:
         58:fd:10:a3:2b:30:f3:15:fe:17:e3:02:8b:f9:ca:28:ea:07:
         a1:f7:6e:45:ea:10:06:80:a7:e5:bd:ef:25:a5:41:ff:bf:d4:
         9d:bf:18:91:b3:0b:83:58:1e:fc:d2:52:4c:ab:55:c1:91:0a:
         99:e9:c4:27:64:a5:c4:9c:9e:b5:24:6a:40:c3:e1:54:99:e1:
         9d:26:9d:57:c2:95:d5:50:38:33:96:75:16:4f:02:bf:54:43:
         52:65:af:5a:2f:76:21:03:c3:60:09:fd:fd:ba:cc:77:fd:8c:
         a1:51:82:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org