Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.cer
File:                     D85040866220B9E2081CF8E30D0BE49F82B0C554.cer (raw, json)
Hash identifier:          r7gOQiSC3M7jQnt1/1n5KzojVcCdVqOXzD83EtaT4hg=
Subject key identifier:   D8:50:40:86:62:20:B9:E2:08:1C:F8:E3:0D:0B:E4:9F:82:B0:C5:54
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E5510D9DBD64A48DD26BAC2DDF42189666682E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 21:03:26 +0000
Certificate not after:    Fri 04 Oct 2024 21:08:26 +0000
Subordinate resources:    AS: 268164
                          IP: 45.170.172.0/22
                          IP: 2804:5904::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:55:10:d9:db:d6:4a:48:dd:26:ba:c2:dd:f4:21:89:66:66:82:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  6 21:03:26 2023 GMT
            Not After : Oct  4 21:08:26 2024 GMT
        Subject: CN=D85040866220B9E2081CF8E30D0BE49F82B0C554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:ca:7b:f0:54:30:6f:7d:81:36:24:35:ac:
                    57:d7:a1:11:91:ab:bc:75:52:48:fa:4f:ea:e4:92:
                    9a:68:6c:16:3e:12:6c:4f:c3:87:c5:72:ba:f5:bb:
                    1e:98:59:f9:4d:18:5b:e4:73:df:db:79:05:2b:b4:
                    89:df:b7:9a:10:a7:ff:ee:29:a7:d2:2f:a8:af:1b:
                    5a:d4:d2:47:d4:2e:9f:ff:95:6b:e2:ef:84:7d:11:
                    28:97:80:d8:3c:cc:89:cc:88:45:ce:82:cd:e5:d4:
                    30:9c:f1:56:ba:fe:73:3c:04:b4:9c:42:71:2b:64:
                    6a:7a:22:6b:0f:2a:d7:8c:03:57:cf:42:bf:81:9d:
                    ed:36:ec:46:95:9a:3c:62:9b:df:cd:d1:94:1f:21:
                    28:af:1c:36:9c:3a:ba:c8:7a:51:11:87:0f:6c:04:
                    d7:2c:ae:37:5d:39:16:64:56:ea:a6:df:2f:0a:6d:
                    ab:d0:89:f9:40:c1:04:1f:bb:0a:52:1c:7d:53:86:
                    b1:49:32:16:7b:ad:d0:d1:9b:42:be:18:12:92:37:
                    27:d0:b7:84:60:8e:76:69:ed:ab:a5:7c:b8:5c:88:
                    ef:2c:66:36:4e:cb:4f:b6:33:b0:ac:f2:1a:44:2c:
                    5e:2b:3a:58:8e:d7:c8:75:d3:e4:8d:ca:63:94:01:
                    10:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:50:40:86:62:20:B9:E2:08:1C:F8:E3:0D:0B:E4:9F:82:B0:C5:54
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GzSpzE7ZJ4cSPpLsaJTAEWsaHdjTZMnyNnG9CTttcxPH/0/D85040866220B9E2081CF8E30D0BE49F82B0C554.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.172.0/22
                IPv6:
                  2804:5904::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268164

    Signature Algorithm: sha256WithRSAEncryption
         79:ca:d1:9d:43:d1:06:92:67:62:14:12:18:3b:70:9c:3d:23:
         81:5a:a9:e3:7b:b7:51:ff:f4:80:06:6c:60:a8:ae:9a:2b:46:
         bb:cc:16:2b:dd:24:01:63:19:50:91:ac:37:5a:e6:98:bc:f7:
         c3:91:94:12:18:cd:f2:57:10:1f:b5:c7:6e:d2:b6:76:19:f7:
         59:f3:bd:dc:67:13:4d:44:f8:ef:61:ec:5c:27:ef:00:ca:95:
         3d:6e:e8:2d:2b:1f:ff:d3:76:d0:92:2b:b8:26:d3:17:58:8e:
         11:88:da:45:7e:f8:bb:75:11:d0:8f:0a:6e:7b:fc:e7:29:0e:
         79:98:90:7a:5f:cd:48:d3:f9:64:73:13:76:30:51:74:56:4f:
         c5:a9:2b:62:64:e6:92:f8:3d:a2:10:13:0d:0f:97:8f:35:33:
         fd:ca:60:6a:e7:7a:01:66:8f:e2:f4:6d:83:f0:be:8a:8c:73:
         8c:5f:43:b8:c3:47:1d:e6:2a:3d:76:25:ee:cf:dc:5d:bd:4e:
         53:89:e3:04:90:40:d6:5d:59:90:ff:b2:f4:27:76:1d:01:62:
         19:b0:a7:d5:7f:a0:d1:b8:94:4e:71:e3:ae:ef:52:3e:e0:69:
         18:73:30:7c:b2:85:cd:8b:b2:c1:27:24:51:c0:d8:50:ce:b4:
         e8:01:00:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org