Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B.cer
File:                     D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B.cer (raw, json)
Hash identifier:          /olEmH0GsWvLV5S3WU2OUreKNNSWA9pttEXNtj3V0U4=
Subject key identifier:   D2:E1:35:A5:99:F2:7C:CA:4F:F8:80:7C:1B:A4:7D:B8:B9:C2:7F:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78F213091EBC9A36BCFAF9E3753D613FE6EDE3D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Nov 2023 14:33:58 +0000
Certificate not after:    Wed 06 Nov 2024 14:38:58 +0000
Subordinate resources:    AS: 268243
                          IP: 45.236.200.0/22
                          IP: 2804:4e28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:f2:13:09:1e:bc:9a:36:bc:fa:f9:e3:75:3d:61:3f:e6:ed:e3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 14:33:58 2023 GMT
            Not After : Nov  6 14:38:58 2024 GMT
        Subject: CN=D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:06:5d:64:37:fb:67:4d:7e:49:4e:5d:a7:9f:
                    f7:ca:4a:57:fc:c3:d8:38:0d:7b:a1:55:10:93:34:
                    42:61:69:71:c7:00:38:ca:7c:33:3f:f3:64:bf:04:
                    b9:8d:b2:17:c1:f6:63:d9:c5:b3:15:44:6c:25:3d:
                    b5:af:2b:90:43:2b:5c:57:11:5e:c6:79:3c:e1:32:
                    5f:23:93:f5:40:a7:29:1e:a8:6d:ac:a8:5e:d3:48:
                    76:e7:05:2a:e8:45:1c:8c:b8:5b:f3:be:ff:5c:dc:
                    b9:38:79:2b:04:25:15:cf:73:cb:51:61:1b:c4:bf:
                    f2:2a:33:8a:dd:18:1f:51:34:9a:af:e1:93:2e:a0:
                    6e:82:dc:20:eb:25:c4:f0:ce:6b:dd:ee:f2:97:52:
                    e0:bd:e2:13:64:a9:e4:05:a4:9b:2d:ee:ff:88:ac:
                    5f:16:de:3f:14:e9:f3:bf:31:92:78:09:f3:15:1d:
                    fc:71:fe:e6:37:fa:69:63:4e:de:28:a3:fc:4a:af:
                    04:67:53:18:53:dd:0f:09:17:1d:dd:9a:c6:fd:60:
                    25:ef:13:ba:5f:70:25:1a:0d:a6:ce:de:46:23:d6:
                    f5:5c:94:32:1d:cf:4d:5c:42:92:7c:11:5f:9e:a6:
                    44:ca:b4:f0:f6:dd:bc:6b:03:2c:01:f7:f6:19:75:
                    e8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:E1:35:A5:99:F2:7C:CA:4F:F8:80:7C:1B:A4:7D:B8:B9:C2:7F:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/APCBk5qLG5gUfXZXw7XR6R4PUswuzPBFp6GG28VEbj7S/0/D2E135A599F27CCA4FF8807C1BA47DB8B9C27F3B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.200.0/22
                IPv6:
                  2804:4e28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268243

    Signature Algorithm: sha256WithRSAEncryption
         0c:93:62:f4:de:fd:55:7a:07:d6:f4:77:7c:51:4a:81:40:30:
         e5:d2:eb:61:e7:3c:f1:30:ca:9a:e1:42:1e:0b:ae:02:4b:fe:
         ed:ac:a5:ec:ae:5c:d3:a2:eb:79:60:22:cf:46:c6:0a:18:e5:
         9b:e7:0e:c2:85:13:52:1d:c4:dd:4e:24:05:e5:73:47:68:02:
         cb:e6:c6:7a:58:bc:66:c7:10:a7:69:82:d6:74:da:08:92:6f:
         0b:9a:31:95:18:18:2d:5a:24:51:c8:8d:81:56:2f:6d:b5:6a:
         7d:04:4d:7e:3b:a7:47:c2:4d:ba:8d:4a:cf:0f:bb:ac:ac:73:
         1d:c1:1e:46:c3:98:75:1a:a1:37:a1:86:f3:02:2e:19:18:4f:
         79:b9:63:1f:a0:8b:8a:54:28:07:1e:1b:11:f2:04:c5:b6:38:
         07:ae:9f:f1:d7:12:6f:3f:c2:0d:fe:bc:d3:6e:49:d9:38:24:
         c6:9c:ae:f0:64:17:f4:73:00:f9:c6:8f:5a:7e:90:72:3b:5a:
         ba:62:d3:5f:d3:ff:8a:63:43:2c:4d:f2:52:23:06:28:f9:8c:
         32:86:06:c8:cb:24:d6:7b:ba:68:bb:4d:9e:fe:ee:f4:d1:b9:
         b9:a8:a3:62:e4:40:fb:0e:30:93:56:ba:e1:60:c0:62:a2:3d:
         59:31:4c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org