Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D892296CC5D537587815493CE7B655C9469444D7.cer
File:                     D892296CC5D537587815493CE7B655C9469444D7.cer (raw, json)
Hash identifier:          vhllA+HUEsapWWL8iY47Z5Gk9kcwK70Y1ylzME1SYBY=
Subject key identifier:   D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41510CB6E5609A114A7A8909C215554313E446BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/D892296CC5D537587815493CE7B655C9469444D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 16 Dec 2023 09:25:49 +0000
Certificate not after:    Sat 14 Dec 2024 09:30:49 +0000
Subordinate resources:    AS: 270652
                          IP: 190.11.208.0/22
                          IP: 2804:6f50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:51:0c:b6:e5:60:9a:11:4a:7a:89:09:c2:15:55:43:13:e4:46:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 16 09:25:49 2023 GMT
            Not After : Dec 14 09:30:49 2024 GMT
        Subject: CN=D892296CC5D537587815493CE7B655C9469444D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:3e:1d:96:4e:4e:dc:74:ca:07:e2:c8:a1:
                    d3:97:63:0d:2d:85:71:2e:40:a6:32:25:29:ae:f3:
                    91:e5:51:26:ae:23:dc:4e:a9:7a:87:4e:af:0b:53:
                    fa:c5:d3:23:09:3f:0e:81:b3:ec:9f:0e:63:1d:fd:
                    56:cb:1f:94:d2:9c:54:9f:c9:d3:d1:35:2c:53:c7:
                    ca:3e:75:fe:5f:da:58:ee:00:a8:46:0d:09:cd:20:
                    19:13:89:96:b1:bd:f0:5c:ac:43:e1:dc:ba:42:58:
                    c9:58:b8:ac:5c:c7:f5:32:af:67:7e:f4:c5:1e:ba:
                    8d:d3:c3:d1:74:38:92:7f:ea:a0:10:67:8f:82:26:
                    48:30:9c:92:6a:f2:e3:fd:b3:84:25:ff:98:1c:b3:
                    69:c9:af:8b:68:a0:ca:5f:57:51:90:a1:ea:35:16:
                    2d:f8:98:9e:a1:c7:95:6a:c6:c1:78:8a:3b:cc:86:
                    7f:93:1d:e2:61:11:bb:4a:e3:00:c7:c4:a8:a1:6e:
                    7e:99:d7:67:83:63:07:d6:35:25:0d:a3:23:84:da:
                    3d:e8:ec:de:ac:a4:0f:bc:dc:1a:6d:85:1a:05:2e:
                    d7:93:18:a0:d7:c8:f1:6d:8f:b0:d4:83:8f:76:d0:
                    38:b8:a5:56:b1:39:99:d7:2d:ac:9a:f6:a1:88:29:
                    e5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:92:29:6C:C5:D5:37:58:78:15:49:3C:E7:B6:55:C9:46:94:44:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6zoiLMZgnVXZUddR9hCRUckVikLhP8ehEU5hxReLY7nC/0/D892296CC5D537587815493CE7B655C9469444D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.11.208.0/22
                IPv6:
                  2804:6f50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270652

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:22:6c:83:2c:c9:98:ff:42:6c:1b:fe:a2:83:b5:3a:58:
         59:74:57:eb:5c:b0:9e:43:73:99:f2:54:4b:25:a8:40:d7:7e:
         5a:d8:27:b0:c0:61:b7:b2:ec:b5:8b:34:ce:d0:64:63:19:0f:
         52:23:df:6d:e4:44:25:98:9f:61:1d:f8:6a:6b:9a:26:ba:4e:
         fc:1f:6f:f3:16:40:5d:74:7e:b9:1c:fe:84:57:3e:e2:ff:ef:
         4b:b6:d1:65:9a:6c:fd:b5:8d:90:45:ec:94:e2:bf:6d:b3:3f:
         fd:3b:25:a5:df:3d:97:3a:bc:3e:07:b8:06:0b:89:ca:29:e8:
         23:51:1f:bd:37:6e:2a:14:ff:02:0f:51:90:6b:77:6a:d8:66:
         bf:59:e3:82:98:74:72:10:14:3e:1d:74:8f:7b:5d:1f:3f:6c:
         71:96:a6:87:33:b2:db:ac:87:8d:fb:a4:78:37:c7:35:0a:e4:
         db:e0:71:4b:95:d2:74:29:d0:58:8e:37:47:d2:d1:35:68:c0:
         a8:28:6b:d6:71:de:7f:70:c6:07:12:f0:65:a4:67:36:fc:f1:
         5c:d1:97:df:b3:4c:88:37:dc:ea:84:6c:92:cf:5e:4a:9f:a9:
         d4:ab:e9:0a:72:5b:da:1e:e6:9e:50:5f:ff:af:e7:96:dd:a4:
         61:2a:1c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org