Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D345EB7198D1D6F10204B388FAC99014B8298C08.cer
File:                     D345EB7198D1D6F10204B388FAC99014B8298C08.cer (raw, json)
Hash identifier:          hkyx1ixQanF0gDf7EYX1KLsgsPDXH7ne47I1b1qNjgs=
Subject key identifier:   D3:45:EB:71:98:D1:D6:F1:02:04:B3:88:FA:C9:90:14:B8:29:8C:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6880D7D4700F28E1F5BEBA35106F46FC26035A40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4XQQYnh6XRWxjGSrTgHTeArXmZe9YLudY4M6DG6gdSUN/0/D345EB7198D1D6F10204B388FAC99014B8298C08.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4XQQYnh6XRWxjGSrTgHTeArXmZe9YLudY4M6DG6gdSUN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Jan 2024 19:38:41 +0000
Certificate not after:    Wed 22 Jan 2025 19:43:41 +0000
Subordinate resources:    AS: 268129
                          IP: 45.169.68.0/22
                          IP: 2804:5870::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:80:d7:d4:70:0f:28:e1:f5:be:ba:35:10:6f:46:fc:26:03:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 24 19:38:41 2024 GMT
            Not After : Jan 22 19:43:41 2025 GMT
        Subject: CN=D345EB7198D1D6F10204B388FAC99014B8298C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:e8:dd:46:b5:13:87:9a:0a:d6:4c:6e:b0:f6:
                    f7:61:f2:00:fd:47:3c:da:00:0a:7b:cf:38:5f:07:
                    82:b6:8e:86:c2:5f:b8:bb:b0:8f:96:ad:dd:c0:d3:
                    aa:28:d6:01:01:63:cd:2c:a9:b3:41:82:9a:bb:d4:
                    5d:e0:7c:84:b9:9c:5b:cb:b7:2e:60:c7:45:9c:a7:
                    2c:40:a1:63:bd:fd:7f:8d:19:67:db:22:17:42:90:
                    8c:d0:7c:9c:5e:9d:2d:70:d7:47:40:57:1c:e3:89:
                    6f:d7:91:af:91:b8:6f:48:dd:3e:24:59:07:e5:6e:
                    2b:8f:db:1e:33:fa:41:2c:81:a5:46:93:61:44:73:
                    4e:25:e2:3b:ae:44:d1:62:cd:70:c7:1a:a2:44:7a:
                    35:21:f5:d8:39:31:ca:4b:a8:33:47:7a:d4:fe:23:
                    91:af:3b:4b:f3:11:dd:78:f7:23:61:b0:78:29:15:
                    22:b3:4d:b4:45:35:4d:cc:d5:27:1e:6c:41:c8:d4:
                    e1:81:57:04:7c:c3:51:e5:c3:00:1f:b1:bf:6f:18:
                    e1:5a:61:c7:87:44:6e:4d:b7:bb:e4:72:9c:9d:e4:
                    a7:0a:13:51:df:73:ac:2a:06:b7:20:97:8e:64:2c:
                    d3:58:5a:7c:44:be:6c:d3:ce:ec:3e:71:d3:7d:ae:
                    5c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D3:45:EB:71:98:D1:D6:F1:02:04:B3:88:FA:C9:90:14:B8:29:8C:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4XQQYnh6XRWxjGSrTgHTeArXmZe9YLudY4M6DG6gdSUN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4XQQYnh6XRWxjGSrTgHTeArXmZe9YLudY4M6DG6gdSUN/0/D345EB7198D1D6F10204B388FAC99014B8298C08.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.68.0/22
                IPv6:
                  2804:5870::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268129

    Signature Algorithm: sha256WithRSAEncryption
         25:13:cf:3b:43:2d:08:d1:f1:df:3a:cd:dc:2d:84:61:98:e1:
         11:75:dc:12:16:eb:80:53:1c:1a:0b:cd:04:db:fa:95:d4:74:
         19:31:a4:a2:10:3c:96:80:b5:53:c2:0f:cd:1b:3c:0a:0c:71:
         8e:37:ba:44:20:62:36:5a:4c:77:c2:3b:94:61:4d:a5:9a:bc:
         ac:78:11:cd:5d:40:55:a3:ea:5f:a9:05:c5:a1:53:17:18:0c:
         63:81:93:bb:af:7b:dc:cb:2a:26:96:c1:e2:01:42:03:c5:22:
         3d:74:af:9f:eb:ee:84:1a:ca:e4:90:1f:6e:38:11:a7:45:cc:
         56:7b:4c:73:46:60:88:4d:91:30:85:88:cc:e1:43:30:b3:ba:
         41:8e:bf:89:79:a1:ac:d1:ed:90:ee:e1:55:e9:60:dc:05:47:
         c1:30:56:25:ec:82:72:6c:85:98:35:7d:12:34:ea:61:95:71:
         fc:9d:69:e1:72:c1:01:de:49:c4:1d:a1:87:a8:27:36:82:f3:
         b5:c7:16:e2:52:7e:39:07:e5:f0:45:c1:b6:18:79:41:c0:88:
         08:95:64:d5:fe:e9:a5:16:a1:42:77:93:24:b9:0b:4c:f5:8e:
         5d:54:44:d7:3c:ef:dd:68:1b:8f:f5:fd:5b:4d:f9:a6:77:cc:
         b5:2f:1a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org