Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CD373054F4E940F0F376E77705D6B8AF5E8A5659.cer
File:                     CD373054F4E940F0F376E77705D6B8AF5E8A5659.cer (raw, json)
Hash identifier:          SnBlxRvCcPhItovV+pK16zX4rlT9qgLVjGf+0c4EQoo=
Subject key identifier:   CD:37:30:54:F4:E9:40:F0:F3:76:E7:77:05:D6:B8:AF:5E:8A:56:59
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7161BA980146777140AB402EF516DA69C9E1A9A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/CD373054F4E940F0F376E77705D6B8AF5E8A5659.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 13:14:30 +0000
Certificate not after:    Fri 04 Oct 2024 13:19:30 +0000
Subordinate resources:    AS: 268818
                          IP: 45.173.176.0/22
                          IP: 2804:5b18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:61:ba:98:01:46:77:71:40:ab:40:2e:f5:16:da:69:c9:e1:a9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  6 13:14:30 2023 GMT
            Not After : Oct  4 13:19:30 2024 GMT
        Subject: CN=CD373054F4E940F0F376E77705D6B8AF5E8A5659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cf:fd:b8:1f:f9:29:6a:89:a6:72:4a:aa:3a:
                    12:d1:8e:60:a6:ef:0f:d5:5f:6c:cb:3a:24:87:5e:
                    44:b5:1f:cc:4c:54:97:44:3b:51:1f:f0:b2:c1:a9:
                    57:03:72:d1:37:15:e9:b7:c3:b9:98:29:5f:06:9e:
                    8b:48:01:c3:69:eb:9a:e9:e4:a6:13:5e:36:c8:a3:
                    da:8c:84:25:b3:5f:16:a2:f4:5e:79:4b:37:cc:59:
                    27:e2:72:03:62:8d:76:18:57:29:e3:63:04:b7:f1:
                    b4:7c:8a:52:37:c7:3e:63:11:21:77:af:83:b4:da:
                    55:da:12:44:82:2d:8b:d4:f5:0f:25:9e:4f:34:57:
                    16:0e:79:1e:0d:00:25:7b:bc:79:a6:4a:a4:60:4e:
                    4c:73:9d:e4:50:31:04:e6:35:69:97:f4:52:a4:fa:
                    4b:6b:f6:99:11:59:0f:20:74:f9:73:74:d9:2a:5a:
                    29:96:79:81:1b:ab:fa:0f:f5:dd:58:91:2f:31:56:
                    07:e7:74:d9:95:8e:1a:c9:08:20:11:f5:f6:70:f2:
                    32:ec:f4:1a:38:d9:69:8d:ae:06:1c:76:f2:25:c0:
                    93:7a:55:ab:f5:24:17:23:07:de:2a:03:5f:9c:b9:
                    0d:b4:17:8c:74:c3:2c:56:d5:ea:0a:94:39:6e:c1:
                    2e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:37:30:54:F4:E9:40:F0:F3:76:E7:77:05:D6:B8:AF:5E:8A:56:59
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AsD25Bi2Qr1Vm1MX542GBtegLqKa6S6KMhWRSQ9tshdd/0/CD373054F4E940F0F376E77705D6B8AF5E8A5659.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.176.0/22
                IPv6:
                  2804:5b18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268818

    Signature Algorithm: sha256WithRSAEncryption
         59:e2:d9:c8:80:ee:e2:9c:ce:d1:9d:e6:70:f8:86:dd:7c:dd:
         9b:2b:66:be:c2:a5:a4:87:83:c1:21:ec:9f:1e:48:6e:4b:94:
         b4:6c:cb:68:c1:12:db:6f:82:1f:e1:9f:59:0d:47:c4:5f:06:
         80:2c:fe:b5:70:b7:50:07:15:93:f1:a7:ba:41:db:18:c6:a5:
         91:d6:a3:70:ea:e1:f6:d7:77:85:ed:3d:bd:3b:f6:51:d8:03:
         26:14:88:a5:58:5d:d0:f5:a7:33:57:5c:1f:53:d2:f6:d6:41:
         dc:af:a1:7a:5e:89:ab:c5:87:31:3d:95:a6:c5:51:05:33:46:
         78:d2:ff:5b:e1:bb:18:05:dd:3a:58:ae:a8:89:14:05:5e:c9:
         68:85:d2:e3:87:30:bb:22:60:df:48:23:36:d6:ea:28:45:99:
         4f:e3:5f:5b:fb:30:be:5e:0f:9c:01:85:3f:82:f5:17:61:58:
         e0:5d:21:7a:ed:eb:26:3c:bf:a8:8a:45:11:b0:8f:72:c1:71:
         6b:ea:ff:27:34:c2:44:c7:22:43:ae:f9:c8:e1:14:76:ff:54:
         50:55:8d:6f:02:b7:7e:01:ed:1f:b9:8e:96:72:47:53:bc:a5:
         77:a2:d8:4b:98:fa:ab:e3:30:66:3b:af:a7:f8:8a:2f:00:69:
         89:17:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org