Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer
File:                     D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer (raw, json)
Hash identifier:          9xjNywL4UKjBycQAfx+vAHpxTRrhCqPnesT6rINncm8=
Subject key identifier:   D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       340F3E56FDDC275B5AA95317D8FF7BF7A164BEE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Sep 2023 14:45:09 +0000
Certificate not after:    Tue 17 Sep 2024 14:50:09 +0000
Subordinate resources:    AS: 268267
                          IP: 45.237.92.0/22
                          IP: 2804:4e88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0f:3e:56:fd:dc:27:5b:5a:a9:53:17:d8:ff:7b:f7:a1:64:be:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 19 14:45:09 2023 GMT
            Not After : Sep 17 14:50:09 2024 GMT
        Subject: CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d5:27:3a:52:2d:a0:7f:85:dd:3e:5e:71:4d:
                    6c:8c:75:68:20:b4:78:68:f6:3e:09:d9:f4:16:0d:
                    33:db:55:99:95:29:d1:6d:d7:6f:db:41:49:60:c3:
                    5e:21:cc:e5:28:ae:8d:6b:5b:bc:82:13:61:65:47:
                    38:c1:c1:4a:58:11:78:86:49:6b:c8:34:3d:da:61:
                    df:fe:87:09:64:4a:e7:7b:31:a1:35:2b:3c:a7:99:
                    e6:fc:78:f1:ca:6d:35:6f:0d:25:54:31:27:4e:71:
                    c7:02:87:bd:2e:71:08:83:73:6b:9c:6c:a2:23:ff:
                    47:ee:a5:1a:29:2c:55:fc:69:c1:cc:cb:b8:9a:d4:
                    2d:f7:74:fd:33:81:b0:12:5e:0d:02:35:21:ac:f3:
                    87:28:b3:bd:d6:5e:a5:8b:54:f7:e0:5a:b8:43:c5:
                    4a:da:df:94:ad:e9:09:0b:f2:09:57:5e:90:1a:d7:
                    fb:f4:97:e3:42:27:d6:98:3f:5e:c6:7c:22:c5:63:
                    19:ed:13:21:ee:6f:11:98:aa:77:b4:93:f5:94:72:
                    74:ae:a3:2f:0e:e9:87:f9:a3:d6:65:e8:84:c6:fa:
                    5b:95:43:37:4b:c1:8d:23:ca:fc:85:94:ac:5e:3f:
                    cc:81:ab:f3:d8:f5:79:6f:41:43:f9:03:83:af:26:
                    78:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.92.0/22
                IPv6:
                  2804:4e88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268267

    Signature Algorithm: sha256WithRSAEncryption
         14:b9:70:ab:c1:16:24:62:08:cf:91:a6:da:b7:7c:88:64:5d:
         92:07:92:33:65:5f:4c:fb:8a:1d:e8:e8:06:ed:26:cd:78:98:
         c9:a7:3e:39:ae:8e:d0:17:05:7d:0f:26:e0:6f:f9:70:80:db:
         44:89:83:54:47:9f:f0:0d:9f:bd:9e:1e:e2:7e:46:12:bd:fe:
         9c:81:68:96:11:8f:9a:18:c0:1b:d1:8e:66:58:a2:58:ce:da:
         e3:65:94:f1:ed:cb:82:b5:42:a0:05:e6:95:cb:79:08:93:aa:
         25:9d:d3:ca:e0:fc:64:81:05:87:d2:ff:cf:83:34:12:18:7d:
         42:dc:89:42:29:b3:46:ff:01:63:7a:f0:b7:52:99:ac:a9:ec:
         47:03:42:b4:19:01:34:47:90:c6:16:d3:72:5b:c8:a0:d0:f9:
         c9:83:e1:07:d1:8c:4e:1e:97:04:3f:40:92:aa:45:98:69:17:
         6a:1e:2c:d2:e0:2a:e8:98:a4:50:8a:ce:86:f8:45:75:f7:6d:
         d4:2b:b9:28:75:5c:0f:63:a3:74:a4:10:4d:3b:0b:3b:24:16:
         1d:0f:e0:4d:55:84:48:ea:ea:aa:a7:ef:58:3d:0c:00:e0:e2:
         b7:21:85:9f:c3:54:d1:ab:e5:7c:cc:98:6b:05:68:e2:cb:55:
         b6:18:3d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org