Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D5404D3C46CA2684173E7ADB871E79F544D8EBBC.cer
File:                     D5404D3C46CA2684173E7ADB871E79F544D8EBBC.cer (raw, json)
Hash identifier:          M51DN3lWjNXLSWeZQT0lcIS5eMHNR4vpfZsPfoCvhNc=
Subject key identifier:   D5:40:4D:3C:46:CA:26:84:17:3E:7A:DB:87:1E:79:F5:44:D8:EB:BC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3D591947430F2936B8C7D0E8463183059C78CB73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/D5404D3C46CA2684173E7ADB871E79F544D8EBBC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Oct 2023 12:20:45 +0000
Certificate not after:    Thu 24 Oct 2024 12:25:45 +0000
Subordinate resources:    AS: 269574
                          IP: 45.189.88.0/22
                          IP: 2804:66a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:59:19:47:43:0f:29:36:b8:c7:d0:e8:46:31:83:05:9c:78:cb:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 26 12:20:45 2023 GMT
            Not After : Oct 24 12:25:45 2024 GMT
        Subject: CN=D5404D3C46CA2684173E7ADB871E79F544D8EBBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:01:aa:c0:f3:c6:b9:9d:3a:3c:f3:38:d6:bb:
                    b8:47:aa:ed:c1:98:9b:86:8c:76:d5:9b:52:97:66:
                    06:12:de:56:e8:b8:e8:b4:3f:60:fa:c5:13:37:49:
                    f4:59:1a:d3:ee:13:9f:c7:2a:b6:81:a8:28:ad:4f:
                    d0:6b:4d:e2:6e:95:93:2c:f2:99:07:5e:e2:c5:fc:
                    1a:b6:43:87:cc:39:01:a0:1c:9e:16:9a:d9:df:93:
                    47:a3:5d:5e:5d:36:e1:6a:e5:53:11:b7:53:9e:08:
                    dc:f6:37:78:c3:43:28:a2:d4:83:7b:5c:a5:32:30:
                    32:d4:3b:62:e4:eb:19:cf:85:7d:c2:2d:29:54:b5:
                    0a:00:d8:d5:10:c8:08:84:76:a0:23:95:15:2b:d4:
                    45:4f:d2:de:21:fd:85:16:47:37:13:9d:fd:30:79:
                    7a:c3:8e:1c:3e:7e:e2:4f:a3:cd:14:c8:3a:4c:78:
                    30:61:3d:d9:dc:78:f9:3a:f4:cc:49:4f:3c:dc:66:
                    99:94:77:f9:f8:31:0f:57:a2:b5:af:a0:c2:b0:61:
                    73:90:54:46:75:09:8c:3a:8c:d4:55:8e:86:7d:fc:
                    78:89:a5:90:52:51:02:a3:46:16:bd:ee:35:24:83:
                    67:1f:dc:e7:a1:00:a6:a7:3b:21:b7:03:b8:9e:22:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:40:4D:3C:46:CA:26:84:17:3E:7A:DB:87:1E:79:F5:44:D8:EB:BC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GgBqNAxXxmaCnM7eP6zGzeC1Djw41za8TNJ6H55fR4BP/0/D5404D3C46CA2684173E7ADB871E79F544D8EBBC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.88.0/22
                IPv6:
                  2804:66a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269574

    Signature Algorithm: sha256WithRSAEncryption
         91:10:ac:ed:8c:92:29:87:36:a9:ab:5b:ad:51:38:2e:b0:12:
         54:67:41:4e:8b:c9:41:80:3f:99:5c:cc:49:7b:cc:a8:a4:7e:
         ff:48:87:2b:ba:d4:17:cb:74:49:20:e7:d1:33:0b:9e:0e:cf:
         0e:c1:ca:1c:2a:03:8c:fd:91:9a:17:28:34:65:7d:9a:c6:fe:
         25:35:53:fa:3c:54:7a:3f:39:0c:5b:ce:1e:09:49:1d:83:41:
         13:ee:67:b2:d6:f2:14:55:30:4a:ad:23:f9:8c:ae:eb:87:21:
         50:2d:c3:cb:87:89:e8:5b:ae:52:ad:ed:aa:01:ca:e4:f2:e3:
         10:2a:29:10:7b:26:3d:f5:4e:88:26:11:41:67:b0:07:ca:b9:
         60:56:34:a0:94:71:a6:34:53:8a:f5:06:d0:db:e0:03:4c:ed:
         2b:ce:e3:9e:57:da:99:48:0e:20:e3:f7:73:72:37:a7:8b:93:
         92:be:32:f9:c7:f3:14:10:9d:ec:f6:82:d4:32:de:ba:7e:63:
         d6:1c:19:cb:f8:b5:8e:f2:13:e9:16:20:ff:84:7a:bd:89:b4:
         07:48:b5:1c:ae:da:54:9b:18:60:b3:ec:34:0b:a9:04:21:4b:
         68:05:5e:a6:da:6b:29:2d:ae:68:62:7d:fc:65:2d:eb:ec:05:
         fc:19:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org