Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.cer
File:                     D402AAFBAE178D53D194E6E1C2D54048BE15B08E.cer (raw, json)
Hash identifier:          kI5pmnSoO8FXWVW3PViowZ4ZwO1VbXLHs6Utt4x9gH8=
Subject key identifier:   D4:02:AA:FB:AE:17:8D:53:D1:94:E6:E1:C2:D5:40:48:BE:15:B0:8E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       33A450B252226EA5BD1A6423FCBE8E4021B16BCC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 17:26:54 +0000
Certificate not after:    Tue 18 Feb 2025 17:31:54 +0000
Subordinate resources:    AS: 269175
                          IP: 45.181.92.0/22
                          IP: 2804:1f4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a4:50:b2:52:22:6e:a5:bd:1a:64:23:fc:be:8e:40:21:b1:6b:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 20 17:26:54 2024 GMT
            Not After : Feb 18 17:31:54 2025 GMT
        Subject: CN=D402AAFBAE178D53D194E6E1C2D54048BE15B08E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cc:45:0d:bb:df:da:83:6d:05:c5:07:bb:e6:
                    1f:e3:7a:8e:08:83:fb:72:ca:35:55:36:d6:ea:c4:
                    a9:d7:4e:ba:6e:38:bf:dc:79:e1:f5:07:f6:b6:c2:
                    8a:88:af:d7:06:f0:95:40:b6:1a:ee:bf:2f:f6:4b:
                    29:af:26:63:09:b8:17:57:27:2d:17:4c:c4:01:66:
                    74:19:66:d1:3b:10:d4:60:9b:24:79:35:58:72:87:
                    5d:3d:14:6a:36:08:a5:ae:60:30:72:8d:b4:e4:d2:
                    78:88:9a:46:be:16:5c:58:e1:22:4d:e6:68:b1:0e:
                    c7:f3:5a:71:6c:67:81:c2:58:5e:8a:eb:83:1c:c7:
                    0d:f4:cf:19:04:fc:0a:f4:33:8f:38:75:44:06:4a:
                    01:a4:14:2c:26:e3:f4:21:0a:83:cd:43:8d:18:0a:
                    9b:2d:94:9d:a3:36:eb:dc:b1:7b:7f:c3:4a:2c:13:
                    af:b0:8e:1a:b2:4e:7a:08:f0:71:4b:33:c4:cd:a0:
                    aa:81:e5:29:da:23:34:44:ec:97:00:6d:bb:34:94:
                    8b:93:99:c1:55:ef:94:50:0f:d3:14:92:7e:2b:38:
                    66:50:0b:2c:1d:9a:e9:66:0e:36:e9:14:0c:bb:1f:
                    df:85:22:f6:48:00:a1:40:17:ba:ec:03:58:e4:84:
                    ad:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:02:AA:FB:AE:17:8D:53:D1:94:E6:E1:C2:D5:40:48:BE:15:B0:8E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.92.0/22
                IPv6:
                  2804:1f4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269175

    Signature Algorithm: sha256WithRSAEncryption
         6d:40:42:83:1a:34:86:45:a3:47:4b:78:c0:81:91:c3:5a:d7:
         53:b0:38:e0:7f:3e:03:fc:fc:6c:f7:3d:22:6c:75:27:72:d3:
         a5:1f:c5:0e:90:45:cc:ac:63:c8:cd:fe:b4:98:e6:d2:11:01:
         d6:57:da:21:2c:17:e0:8d:88:a7:fb:30:23:02:37:e4:b7:a8:
         d6:89:ad:ee:b3:ad:65:66:d9:b3:e3:1b:cf:f9:64:a7:16:d6:
         16:12:5a:5c:27:5b:85:06:02:94:c9:42:af:b2:57:05:6c:0e:
         b1:3e:89:ad:6b:83:06:4e:ef:42:b2:f7:cd:53:ed:f1:19:25:
         5b:ff:6e:00:39:98:ea:25:8a:24:6b:0e:ee:f0:df:a4:99:db:
         ce:a7:a5:ab:de:03:37:43:6a:5f:cf:6d:1a:cd:51:68:87:92:
         fe:fd:03:16:a4:34:4e:7c:ea:2d:2f:3a:b3:97:54:4a:41:94:
         39:4b:66:ef:db:3e:07:90:c3:3d:54:0f:1e:98:ff:bf:b8:de:
         07:90:13:f5:d2:52:ca:35:b3:95:0c:e8:11:b4:78:8d:7d:4b:
         f9:97:34:33:ce:1d:67:69:69:cb:af:d8:78:a2:a4:0f:f0:f8:
         79:e5:b4:a0:79:b2:6e:5b:16:95:2d:44:cd:a4:ba:4e:a9:f8:
         df:b0:48:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org