Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D50F178B3B5E872F5D2BCA07D82AF2CA1F81C277.cer
File:                     D50F178B3B5E872F5D2BCA07D82AF2CA1F81C277.cer (raw, json)
Hash identifier:          lH1VZd54A/YPSYMrnSf46TgLG/vW8cms/JSG6b0ZRbg=
Subject key identifier:   D5:0F:17:8B:3B:5E:87:2F:5D:2B:CA:07:D8:2A:F2:CA:1F:81:C2:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F0C36176976A1236F11021557B4AA6AD7176C71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/D50F178B3B5E872F5D2BCA07D82AF2CA1F81C277.mft
caRepository:             rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Feb 2024 18:14:33 +0000
Certificate not after:    Fri 31 Jan 2025 18:19:33 +0000
Subordinate resources:    AS: 268013
                          IP: 45.167.152.0/22
                          IP: 2804:56a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0c:36:17:69:76:a1:23:6f:11:02:15:57:b4:aa:6a:d7:17:6c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  2 18:14:33 2024 GMT
            Not After : Jan 31 18:19:33 2025 GMT
        Subject: CN=D50F178B3B5E872F5D2BCA07D82AF2CA1F81C277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:34:dd:05:1d:d1:de:e7:b8:57:59:ca:ca:
                    c9:71:89:c8:27:53:12:83:2c:49:3e:62:f4:3a:7a:
                    bf:01:21:94:69:31:ce:4f:a7:b1:8c:fb:9d:96:98:
                    dc:a8:1f:a1:8f:e9:bb:6f:fb:ea:48:40:8b:8c:d1:
                    b5:94:82:9c:9d:b6:2c:72:9b:ad:07:e1:58:44:2d:
                    50:b8:39:56:f4:0c:6a:4b:57:3b:24:ee:ba:07:42:
                    a9:29:fc:ba:8b:6e:90:2b:6a:65:0c:37:07:ce:3d:
                    72:23:0d:d1:a0:be:32:88:37:54:fb:f2:76:24:e8:
                    52:02:8a:5f:ef:ba:7b:e1:27:c2:e6:c0:fd:01:3b:
                    fa:fb:30:ba:de:56:39:84:79:ae:f2:8a:02:79:c0:
                    42:88:8d:8d:19:86:3e:64:87:9d:45:41:d0:87:bb:
                    da:62:2c:6c:36:63:63:c2:00:cb:72:17:fa:e5:e9:
                    ed:3c:13:9f:b0:99:98:44:d9:5e:3f:32:a4:32:9a:
                    35:22:cd:d5:65:9a:4f:dc:8a:e5:5c:79:cc:fb:ca:
                    5b:e0:8f:6a:39:88:82:62:6a:3c:bf:3b:9d:34:73:
                    21:63:a1:da:c6:99:6e:28:d1:44:03:3c:6b:df:ee:
                    8a:04:0b:44:d6:13:4b:3b:02:e8:d8:81:82:f8:80:
                    39:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:0F:17:8B:3B:5E:87:2F:5D:2B:CA:07:D8:2A:F2:CA:1F:81:C2:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/D50F178B3B5E872F5D2BCA07D82AF2CA1F81C277.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.152.0/22
                IPv6:
                  2804:56a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268013

    Signature Algorithm: sha256WithRSAEncryption
         51:23:0a:18:78:5b:94:55:7d:e5:74:19:08:0b:e1:14:b8:d9:
         de:47:5e:28:ec:18:af:0c:60:54:63:0a:10:83:99:58:42:e3:
         61:41:9c:c7:ac:7a:08:5f:ce:05:00:56:80:5b:f2:f2:49:7c:
         63:b9:72:d0:f2:2f:3d:ae:cf:1e:32:a1:41:76:d6:b4:a6:59:
         f3:ed:c0:57:ae:20:d9:8d:2a:ff:28:d1:75:c1:55:aa:05:ae:
         6f:de:be:cc:bb:09:63:a2:2c:17:94:00:72:33:0d:66:13:38:
         34:b6:45:0e:6d:bc:c3:07:92:e7:e5:33:c1:6e:c9:92:2f:fd:
         79:78:22:5a:b4:50:53:60:9d:22:dc:dc:17:48:4a:d7:7b:1f:
         80:9f:18:5f:40:bb:50:d5:60:d4:46:02:2f:ff:4c:92:03:fe:
         de:a0:f6:b8:0e:2c:44:5b:d7:40:e5:41:c8:e5:07:85:c7:a7:
         79:f3:da:d5:4f:51:36:65:18:b8:7b:ef:bd:b8:ae:64:bd:40:
         ba:1e:3a:b3:88:cb:d8:38:b2:5c:82:97:73:f6:ac:d9:80:60:
         9f:5a:65:59:fe:56:85:33:21:6b:5f:66:83:d3:4d:5f:15:71:
         86:ff:06:72:65:1a:05:8b:28:c5:e3:04:13:46:cf:38:43:f1:
         1a:01:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org