Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CAE906BD747BC046D2684EAA26E0208AF0274CE2.cer
File:                     CAE906BD747BC046D2684EAA26E0208AF0274CE2.cer (raw, json)
Hash identifier:          wx4iuD7M9aj+k0kiaw3G62hHw5v4HxwiYS04NBoXBaU=
Subject key identifier:   CA:E9:06:BD:74:7B:C0:46:D2:68:4E:AA:26:E0:20:8A:F0:27:4C:E2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D3193B2F36A1B403CB461C8BF98A064E839E29A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/CAE906BD747BC046D2684EAA26E0208AF0274CE2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 23:47:50 +0000
Certificate not after:    Tue 12 Nov 2024 23:52:50 +0000
Subordinate resources:    AS: 52617
                          IP: 45.161.92.0/22
                          IP: 160.238.164.0/22
                          IP: 177.124.100.0/22
                          IP: 2804:d64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:31:93:b2:f3:6a:1b:40:3c:b4:61:c8:bf:98:a0:64:e8:39:e2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 14 23:47:50 2023 GMT
            Not After : Nov 12 23:52:50 2024 GMT
        Subject: CN=CAE906BD747BC046D2684EAA26E0208AF0274CE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e2:05:5b:4b:a6:dd:a7:e5:29:5f:c7:ac:e9:
                    f3:83:4b:76:89:24:43:66:5c:26:82:32:11:5d:bd:
                    5c:56:f2:39:ad:dd:ef:4c:b6:ad:cb:30:e8:fc:3c:
                    de:26:d5:4f:e1:b6:d8:56:51:05:17:71:f3:7c:ed:
                    62:eb:54:2c:2e:fb:25:df:de:b4:08:13:80:27:b5:
                    12:c2:a9:16:62:d6:e6:3a:69:21:d0:8e:8f:7c:03:
                    21:b6:06:f2:e0:24:83:ae:52:39:6f:f2:26:65:23:
                    84:23:48:31:ef:0b:20:18:34:59:ba:14:30:f9:17:
                    01:2a:ff:5a:7d:e5:53:e0:e6:10:84:d9:3f:7e:da:
                    e5:07:62:b5:e7:65:ae:a1:ce:70:7b:fb:0f:c0:fe:
                    57:34:69:e8:e8:0e:54:33:b4:af:0a:5c:23:7e:2f:
                    09:b8:87:67:af:2e:80:ef:72:c2:e6:37:f2:d4:49:
                    98:9c:c0:e7:06:37:c7:85:d4:10:d5:af:00:cf:74:
                    1a:0e:af:55:0f:fd:70:aa:29:1d:9b:6a:86:b1:3e:
                    14:87:27:55:6d:9c:92:b0:3b:6c:35:7a:47:83:1c:
                    b8:00:30:f2:13:a6:67:d3:96:fe:7f:20:45:3e:97:
                    bd:9d:b3:33:3b:81:65:96:47:6b:c8:d8:03:47:3e:
                    9a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:E9:06:BD:74:7B:C0:46:D2:68:4E:AA:26:E0:20:8A:F0:27:4C:E2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C5YLDwGmgXch9t7bs779BSNatQA9gLLyga5g5kt9Xc6M/0/CAE906BD747BC046D2684EAA26E0208AF0274CE2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.92.0/22
                  160.238.164.0/22
                  177.124.100.0/22
                IPv6:
                  2804:d64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52617

    Signature Algorithm: sha256WithRSAEncryption
         44:a1:d2:66:40:37:7b:10:11:96:11:17:4a:09:1b:69:32:0b:
         e6:b4:3d:12:07:22:86:e0:71:20:f5:d2:fb:61:93:32:be:b8:
         9e:4b:26:4c:f8:08:73:49:6b:f4:24:b7:f3:e6:61:63:cb:d2:
         3c:47:d8:02:f8:c5:51:d5:09:cd:54:04:c9:50:65:66:6a:c2:
         ee:5a:ba:25:18:e8:5b:c8:5a:61:d2:4e:67:d3:68:1e:5e:1e:
         67:80:36:a2:aa:8e:f7:b4:fc:78:ff:41:72:af:23:77:2b:cf:
         36:9d:03:4d:b3:8e:b3:1c:46:7f:79:62:e7:c1:f6:e8:fd:96:
         ca:37:96:0b:1c:40:39:59:e4:44:29:df:3a:f7:fc:98:4d:d7:
         1b:df:9f:28:cf:c9:f4:7c:17:b5:5f:8e:88:99:77:aa:c9:d6:
         37:00:64:0b:7d:00:ce:42:5d:ca:6a:96:03:37:1c:25:2f:3e:
         52:00:f7:e9:a8:22:5d:75:24:9e:48:09:04:f7:77:57:ca:34:
         32:79:fb:fc:18:33:c4:9a:85:fe:68:63:71:5d:92:36:15:e3:
         af:b6:cf:16:8d:1e:96:f6:97:00:aa:09:f9:da:59:36:16:40:
         84:bb:bb:80:a2:b1:b1:fe:80:91:8f:8a:81:b6:2e:7e:96:7a:
         9f:e5:49:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org