Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer
File:                     CF829EB0B35DA29B497042D7E790F0EEC35512E4.cer (raw, json)
Hash identifier:          EOEwRBT0fOJTJ15I/mOBfecADBzHIMbhnDNraBs5AMc=
Subject key identifier:   CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0AADBE46587832D1C3D1B2D41EC067EEDC06D121
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 19:32:09 +0000
Certificate not after:    Mon 16 Dec 2024 19:37:09 +0000
Subordinate resources:    AS: 268746
                          IP: 45.171.228.0/22
                          IP: 2804:5a10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:ad:be:46:58:78:32:d1:c3:d1:b2:d4:1e:c0:67:ee:dc:06:d1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 19:32:09 2023 GMT
            Not After : Dec 16 19:37:09 2024 GMT
        Subject: CN=CF829EB0B35DA29B497042D7E790F0EEC35512E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:90:25:f3:b7:fa:f3:b2:10:bc:b4:fd:d2:df:
                    9d:a8:68:49:40:c7:83:b1:50:af:b5:ee:a0:fc:28:
                    e7:c4:8b:1c:d9:74:4c:bb:69:a7:72:00:36:87:ff:
                    24:b1:f4:2c:c4:bb:7e:28:8e:dc:c0:61:59:7e:2c:
                    fb:b8:4f:c0:35:fc:89:45:74:71:27:84:21:72:78:
                    00:57:48:44:34:dc:4a:f8:c8:7b:87:6a:ee:e6:09:
                    43:f3:22:9a:59:ba:0e:4d:d8:67:f4:1e:dd:4e:40:
                    b4:80:04:fd:67:6f:fd:98:fd:83:fc:8b:b9:5c:7e:
                    36:ba:10:eb:90:dc:40:08:e6:15:08:0f:c7:82:27:
                    c8:dd:25:4b:ac:05:9d:5d:ce:8a:f5:bf:1b:98:e4:
                    af:6c:c7:ca:06:e4:bd:e0:b3:63:3c:3c:54:4f:4b:
                    aa:15:4b:0b:39:85:d6:39:8e:51:5a:d8:70:06:50:
                    f5:09:aa:2c:7f:3e:d8:39:fd:38:d3:69:b5:c4:00:
                    ff:0f:82:6e:fc:51:e8:d1:46:5f:7c:dd:83:03:81:
                    0d:85:66:22:17:88:d6:60:22:79:8f:98:5b:3b:3c:
                    8d:18:ed:06:e5:f3:b2:04:52:40:8a:72:cd:41:05:
                    db:36:45:15:97:3b:7c:f7:a0:45:34:75:a2:9b:bd:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:82:9E:B0:B3:5D:A2:9B:49:70:42:D7:E7:90:F0:EE:C3:55:12:E4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/CF829EB0B35DA29B497042D7E790F0EEC35512E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.228.0/22
                IPv6:
                  2804:5a10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268746

    Signature Algorithm: sha256WithRSAEncryption
         7a:34:dd:6e:af:87:f8:dd:86:0c:e8:1b:d2:4b:05:4d:65:ad:
         b5:2b:2f:83:57:70:21:c1:9f:75:28:5c:1c:d0:46:e5:06:17:
         e1:6d:ee:21:fc:57:9c:94:88:c4:c0:c5:9f:b6:b4:76:53:77:
         2e:b0:82:9a:4e:8f:91:e1:bf:7f:33:96:7b:9b:cc:9c:14:a1:
         6d:1a:7c:17:e6:ac:8f:54:1d:34:28:b9:bd:d9:fc:fb:bb:ac:
         26:78:c7:f9:07:92:1b:c4:f8:0d:fc:f5:df:82:4c:9a:87:24:
         c0:69:fa:d7:68:b0:b9:2d:fd:c8:81:b0:b8:ab:de:20:e0:1a:
         7c:32:bc:0b:33:fc:25:2f:be:ad:81:7a:b4:20:f3:51:6a:1e:
         71:31:7c:99:6a:6d:40:c2:79:ec:46:bd:fa:98:90:71:d6:79:
         e5:1b:64:15:ed:eb:69:72:10:a2:b8:91:40:b2:c0:a2:5f:0a:
         26:c0:37:64:b8:ea:2c:92:01:4a:68:10:83:4d:b8:73:2e:aa:
         ae:ab:71:68:56:35:40:f8:a3:07:23:1f:c3:7b:5e:69:e9:58:
         00:88:3f:89:77:b3:c6:42:cc:f8:5f:6f:a6:9d:19:6a:b3:11:
         b6:81:eb:0f:6a:c2:34:b7:26:fb:8a:7e:20:f2:62:e5:ff:96:
         82:b9:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org