Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D704ED5A93D1B57340DF21829918581BDF630FA9.cer
File:                     D704ED5A93D1B57340DF21829918581BDF630FA9.cer (raw, json)
Hash identifier:          RJRgQeTlO9Db2WrR7fxhqBvkqTuyBD9r4kuoAOjI4CA=
Subject key identifier:   D7:04:ED:5A:93:D1:B5:73:40:DF:21:82:99:18:58:1B:DF:63:0F:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       329B30B2EE0FEDC0FDE9EC75FF21414BFFAC667C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/D704ED5A93D1B57340DF21829918581BDF630FA9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Oct 2023 14:12:25 +0000
Certificate not after:    Thu 24 Oct 2024 14:17:25 +0000
Subordinate resources:    AS: 265427
                          IP: 168.195.192.0/22
                          IP: 2804:33f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9b:30:b2:ee:0f:ed:c0:fd:e9:ec:75:ff:21:41:4b:ff:ac:66:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 26 14:12:25 2023 GMT
            Not After : Oct 24 14:17:25 2024 GMT
        Subject: CN=D704ED5A93D1B57340DF21829918581BDF630FA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:53:4a:36:b1:64:e7:46:13:b1:b4:a7:07:
                    58:d1:62:c1:92:2a:e4:5e:28:8c:38:65:03:e9:08:
                    06:b2:57:c9:9b:87:5f:fe:99:1d:98:f1:b9:a1:96:
                    91:7f:41:a4:12:3f:dc:22:da:07:ef:89:77:42:66:
                    eb:ac:8f:8f:34:2f:97:a3:d7:3d:7f:3d:85:cf:6e:
                    3f:6d:7c:c0:72:05:a2:56:ef:b7:44:2c:c6:b5:07:
                    3d:08:89:62:d4:6a:2d:23:ab:49:e7:6b:e4:4c:78:
                    f7:e5:bb:0a:32:af:a1:75:4f:1e:9f:15:da:55:ce:
                    f8:27:db:d4:37:4c:a6:5b:c7:83:e4:1f:ab:e8:0c:
                    aa:92:7d:d7:24:d3:be:79:01:0f:6e:51:e0:9b:30:
                    00:00:de:09:a0:76:26:be:6d:1d:e3:76:79:99:24:
                    d4:24:99:1f:2a:49:a1:04:a0:cb:58:e2:c5:94:6a:
                    70:1c:8b:b9:73:c0:4e:02:45:18:7e:1e:2a:8d:a8:
                    e6:4c:87:40:ae:2e:35:ce:ef:e2:63:fa:63:f7:82:
                    32:0a:8e:ac:f7:2f:f0:16:d5:fb:0e:4d:3f:74:00:
                    6e:4e:5a:57:7a:51:cb:0d:ae:2b:13:05:4a:0c:80:
                    64:9c:e8:d9:c6:d0:00:40:c2:91:78:4a:9c:1f:76:
                    8a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D7:04:ED:5A:93:D1:B5:73:40:DF:21:82:99:18:58:1B:DF:63:0F:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BhseAFMmvuoB4enLn7cBVvLbsJiUxyt2rvyGh4Bbr2Um/0/D704ED5A93D1B57340DF21829918581BDF630FA9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.192.0/22
                IPv6:
                  2804:33f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265427

    Signature Algorithm: sha256WithRSAEncryption
         63:6f:4e:fb:a9:ba:99:8f:65:4b:4d:d4:22:a2:46:33:f3:f9:
         04:49:2e:3f:c0:7a:44:84:e2:d1:45:74:a9:85:08:0f:f9:b4:
         75:6d:76:d0:a7:61:9c:9c:61:2f:fa:ee:da:63:e3:aa:04:9e:
         d1:7e:77:b0:9c:42:5b:8f:92:f1:83:8e:fa:50:0f:55:83:13:
         ac:83:45:8b:19:20:a4:0f:1f:b3:d9:a3:49:eb:0f:62:e8:6a:
         19:27:a6:5b:4a:5c:44:ef:c2:ed:c5:19:99:5d:64:9b:64:e4:
         81:35:1f:ca:29:04:09:23:c7:cb:58:4e:e4:06:73:88:d3:a3:
         84:6f:54:01:08:b0:3d:e9:ad:bf:ec:af:e8:7a:79:aa:f7:d1:
         57:2c:be:86:f6:dc:d3:f1:d2:af:64:a4:15:56:77:1c:49:27:
         72:6f:5d:26:ef:83:fd:fa:5e:ac:cf:0f:43:fb:68:0f:8b:1b:
         9e:21:e2:71:39:fb:6c:73:7f:d4:90:46:2b:65:eb:dc:1f:42:
         33:50:c8:ea:2c:18:fd:6b:4b:2f:e5:38:08:66:a4:a3:ef:b3:
         3b:75:d9:28:03:d6:57:5f:5e:9c:cc:9f:7b:92:21:01:f7:67:
         83:c9:ef:bf:15:5a:e3:5a:67:d1:d3:fc:69:ab:a1:ad:f8:4b:
         78:3e:13:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org