Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D08E998E45DEDF758C6FC949F0779ACF97402CB5.cer
File:                     D08E998E45DEDF758C6FC949F0779ACF97402CB5.cer (raw, json)
Hash identifier:          CDBbkDzQ1kV1BLWQ0BsSuwOrdf5We0x1aw6Ry/zG5QM=
Subject key identifier:   D0:8E:99:8E:45:DE:DF:75:8C:6F:C9:49:F0:77:9A:CF:97:40:2C:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1253CCE62C2B3861E4CE40206C301A0A4ABC4C8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/D08E998E45DEDF758C6FC949F0779ACF97402CB5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 19:49:53 +0000
Certificate not after:    Mon 17 Feb 2025 19:54:53 +0000
Subordinate resources:    AS: 269234
                          IP: 45.182.76.0/22
                          IP: 2804:6170::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:53:cc:e6:2c:2b:38:61:e4:ce:40:20:6c:30:1a:0a:4a:bc:4c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 19:49:53 2024 GMT
            Not After : Feb 17 19:54:53 2025 GMT
        Subject: CN=D08E998E45DEDF758C6FC949F0779ACF97402CB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ec:4c:7e:b8:ae:f4:aa:f5:b2:c3:06:42:a8:
                    de:ba:43:f2:96:ee:b9:53:53:df:9d:77:0f:55:9d:
                    9a:cf:6e:43:5c:86:99:c4:b2:05:78:11:9f:c6:65:
                    4f:52:fe:97:ac:89:0a:be:40:cf:cd:0f:96:cf:6a:
                    ac:60:ec:5e:ba:c5:4f:c8:33:f6:5f:8c:7d:77:39:
                    66:91:32:12:4d:1c:98:0f:13:f7:8c:a8:e4:a5:68:
                    d7:e1:49:be:ef:e8:d4:d0:86:c5:2e:18:b9:e0:23:
                    16:02:27:36:23:68:ed:90:66:67:62:74:ed:f9:0e:
                    f1:23:54:10:52:48:b7:09:04:5f:87:d1:07:d1:c1:
                    0c:04:70:9a:48:e9:42:42:fc:6f:4d:33:b2:44:fd:
                    c2:06:a0:eb:38:b0:29:c7:c0:ca:f2:1d:be:16:34:
                    a3:00:c3:3d:76:e2:82:de:fd:c9:e3:90:70:57:e4:
                    dc:fb:9c:75:8b:25:46:b5:b4:1b:9d:6b:4d:dd:2d:
                    7a:b2:2a:ab:b3:59:56:bc:ea:cd:a6:e6:6d:10:d6:
                    02:56:bc:29:be:37:93:d2:86:ef:dc:2e:95:bf:c1:
                    4d:cd:89:19:dc:72:9a:2f:fb:6a:e0:91:68:df:4c:
                    40:8c:2e:29:1e:49:da:73:be:ba:40:0b:92:c2:77:
                    f1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:8E:99:8E:45:DE:DF:75:8C:6F:C9:49:F0:77:9A:CF:97:40:2C:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/D08E998E45DEDF758C6FC949F0779ACF97402CB5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.76.0/22
                IPv6:
                  2804:6170::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269234

    Signature Algorithm: sha256WithRSAEncryption
         a6:3c:19:89:b2:fd:79:96:85:32:5e:45:cb:80:92:11:67:d1:
         c9:aa:b0:81:84:14:31:5e:60:fd:26:67:b2:59:63:b1:a0:ff:
         8e:45:c3:92:f7:4c:87:d2:50:84:51:a3:44:49:43:38:1f:bf:
         fe:85:b4:d8:47:2a:58:51:56:97:9c:44:82:22:51:de:ce:9f:
         aa:23:43:45:bc:b6:cb:c5:0a:a1:fe:5c:67:d5:ad:83:cd:c6:
         3c:50:cc:d3:53:ca:a2:b5:a3:17:21:51:90:19:c9:cf:34:95:
         ce:25:7d:f7:12:ce:ac:ba:cc:77:92:c7:54:1d:9d:dc:5f:54:
         33:48:99:a5:76:9e:c0:4f:3d:ec:af:48:4a:24:b1:5d:c0:61:
         cf:a6:21:14:2e:43:2a:81:5a:ee:4b:02:0d:cb:d4:68:f8:70:
         f3:4a:f2:ce:37:a0:d9:01:a3:f4:0b:c3:8b:3d:43:c9:e9:67:
         e1:d5:bb:97:d0:34:53:9d:bb:e1:39:98:71:1e:07:fb:c9:4e:
         70:b1:7c:d2:f7:4d:47:f4:5c:b0:a0:5e:64:c2:a8:e8:e1:45:
         57:be:e0:16:3c:50:cb:f7:8c:ea:2c:e8:48:42:61:1c:ba:ec:
         b1:24:e2:4e:a7:53:37:44:b2:00:db:e5:90:f5:62:63:ac:fa:
         f0:a6:be:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org