Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D2266E0FB9BEDAE14DBBBE69A00661312D1F568B.cer
File:                     D2266E0FB9BEDAE14DBBBE69A00661312D1F568B.cer (raw, json)
Hash identifier:          s6ONGFGZ97EIdHqwvy9acVASCNxvzJCfp5gSPRIgPAM=
Subject key identifier:   D2:26:6E:0F:B9:BE:DA:E1:4D:BB:BE:69:A0:06:61:31:2D:1F:56:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       307256DBE9E2E5640B4E04B11197DAE76B0A9D67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/D2266E0FB9BEDAE14DBBBE69A00661312D1F568B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jan 2024 14:39:07 +0000
Certificate not after:    Mon 13 Jan 2025 14:44:07 +0000
Subordinate resources:    AS: 265314
                          IP: 168.90.52.0/22
                          IP: 2804:2df4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:72:56:db:e9:e2:e5:64:0b:4e:04:b1:11:97:da:e7:6b:0a:9d:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 15 14:39:07 2024 GMT
            Not After : Jan 13 14:44:07 2025 GMT
        Subject: CN=D2266E0FB9BEDAE14DBBBE69A00661312D1F568B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:5d:f3:fe:e8:b4:0d:b3:d1:48:e5:49:e0:
                    71:e6:bc:79:a8:63:1e:eb:6e:1e:dc:21:86:c9:41:
                    ef:7f:9f:1b:9c:26:9f:40:29:7c:13:d9:45:9b:17:
                    8e:a9:b5:8d:66:c8:31:3a:96:ee:1b:12:46:c7:31:
                    74:73:ce:01:00:9e:b1:59:85:38:1d:fd:d5:19:1a:
                    96:f2:27:66:e3:cd:bc:16:41:e7:c2:16:f3:d6:13:
                    f2:92:12:52:92:d4:28:de:2e:ad:7a:49:70:59:7f:
                    b9:49:73:25:ee:ef:85:f8:7e:1b:77:3b:a9:69:fa:
                    96:fb:3f:34:6f:9a:4e:39:10:4c:1b:0a:5e:f3:6e:
                    5a:70:db:1a:98:65:d1:e5:19:ee:dc:70:43:32:af:
                    7b:4b:84:e9:42:43:03:2e:02:63:ab:7c:15:39:59:
                    47:c0:51:5a:ff:ec:1d:8a:57:2f:ea:40:8a:f8:60:
                    81:12:84:9c:1d:f5:86:40:42:a5:64:51:28:3a:a6:
                    66:5e:2d:bd:83:c4:1f:0f:38:34:71:b9:97:0a:31:
                    1d:f6:82:68:e7:80:e2:05:50:23:8f:bb:9f:a5:8c:
                    4b:03:4e:06:a6:42:69:7d:17:61:aa:be:85:55:88:
                    05:ce:49:9b:ed:35:62:55:3f:b9:3b:38:18:4b:f1:
                    4f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:26:6E:0F:B9:BE:DA:E1:4D:BB:BE:69:A0:06:61:31:2D:1F:56:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7T7tW6PQwJk1UF4EVc8ZvsHGqiHfJydzxFviQiarMFo/0/D2266E0FB9BEDAE14DBBBE69A00661312D1F568B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.52.0/22
                IPv6:
                  2804:2df4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265314

    Signature Algorithm: sha256WithRSAEncryption
         87:f9:1c:92:ae:92:3b:d3:b6:b2:a1:bc:40:d2:50:a2:ba:77:
         a9:a5:31:3b:ca:98:30:08:43:6b:5d:78:56:70:41:1f:25:fe:
         04:5b:02:b9:3e:db:f2:4e:45:37:2d:68:0e:67:1f:16:9d:f1:
         c0:81:a9:a7:e7:ec:65:b1:9b:56:66:a7:77:80:08:a6:1a:46:
         9b:c7:d1:a8:d4:64:f7:47:ca:a6:0e:5e:86:45:7c:de:de:6a:
         3c:17:62:04:9b:6b:9b:47:ae:db:e2:d2:40:20:55:a6:92:e8:
         14:a4:6e:67:f3:de:80:36:45:00:e4:40:02:68:c7:4e:a4:d9:
         09:7b:30:f7:b8:2e:5e:d4:44:fc:2e:d3:87:a6:b3:2a:ca:e1:
         7d:b2:66:b0:a6:fc:14:1e:5b:27:98:8d:45:83:2f:00:d7:22:
         62:c1:bf:9b:e9:c2:0b:a3:a8:4c:26:62:e7:35:79:78:73:2b:
         43:13:c5:7a:8a:6e:65:39:42:60:01:97:b7:5f:20:a5:9c:6b:
         53:09:f0:cd:c2:ba:0a:1e:69:f7:8d:44:58:a9:81:97:c3:67:
         da:56:fb:2d:0f:d5:04:2b:49:08:02:6e:c6:d0:ff:40:87:f7:
         1a:87:9e:8a:3c:33:b1:55:9d:a4:8e:6b:bc:e2:6e:4c:e7:d4:
         03:6f:53:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org