Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E469888B2C83027B16B1A17DD692089035AE7F9C.cer
File:                     E469888B2C83027B16B1A17DD692089035AE7F9C.cer (raw, json)
Hash identifier:          UOByMH31Uy/8Q9hG5tl11OlIP3/yNW9zMqu2ZPnyrKE=
Subject key identifier:   E4:69:88:8B:2C:83:02:7B:16:B1:A1:7D:D6:92:08:90:35:AE:7F:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       44D6A95FF1AD10F1D5C76ED40C365B049C833463
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FYpRkVthyT1Mfdp7mFkqUr8D9f3qZH4r2ddgfe5GfY3z/0/E469888B2C83027B16B1A17DD692089035AE7F9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FYpRkVthyT1Mfdp7mFkqUr8D9f3qZH4r2ddgfe5GfY3z/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Dec 2022 19:30:41 +0000
Certificate not after:    Fri 15 Dec 2023 19:35:41 +0000
Subordinate resources:    AS: 264964
                          IP: 170.0.88.0/22
                          IP: 2804:309c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d6:a9:5f:f1:ad:10:f1:d5:c7:6e:d4:0c:36:5b:04:9c:83:34:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 16 19:30:41 2022 GMT
            Not After : Dec 15 19:35:41 2023 GMT
        Subject: CN=E469888B2C83027B16B1A17DD692089035AE7F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:08:9a:c8:3f:0d:8f:93:45:b2:5a:4d:bf:5f:
                    9d:ed:48:5d:d0:37:4d:b8:c0:32:6d:0f:73:cd:9f:
                    80:0b:2e:01:68:6b:52:3b:42:71:6c:28:3f:62:1c:
                    da:91:5b:51:f4:fc:3d:82:be:e1:9a:7d:d1:b8:ee:
                    05:ad:66:6d:a2:b7:9f:20:0b:01:d7:64:56:5a:29:
                    72:cb:c7:78:ad:33:ce:51:7e:80:9e:5c:0c:23:e2:
                    58:58:6b:5e:2e:00:58:b8:55:a1:c0:a2:a1:44:08:
                    56:b0:f2:6e:d3:62:80:95:42:56:63:47:68:83:66:
                    7f:d0:cd:62:02:be:1e:01:28:ac:b3:64:3a:df:97:
                    49:f8:75:e4:49:81:ad:73:53:fb:41:96:e4:84:b2:
                    f9:98:2b:a6:ef:2b:ec:07:be:62:dd:68:3a:46:67:
                    d7:a7:16:eb:23:96:dd:24:2d:c7:64:d3:29:a0:da:
                    b4:d3:f8:bf:0e:08:5d:f7:52:ce:2a:bf:6d:a4:45:
                    99:88:35:5b:13:7a:72:c3:c3:7c:22:42:fd:48:e4:
                    0d:90:1f:2d:7d:78:ef:2a:e1:e3:c7:99:a4:d8:be:
                    76:8d:4e:66:48:b1:cf:67:01:fa:c1:24:9d:80:b6:
                    28:6e:51:78:41:63:9e:d4:51:ef:7f:a1:84:0f:e3:
                    cb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E4:69:88:8B:2C:83:02:7B:16:B1:A1:7D:D6:92:08:90:35:AE:7F:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FYpRkVthyT1Mfdp7mFkqUr8D9f3qZH4r2ddgfe5GfY3z/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FYpRkVthyT1Mfdp7mFkqUr8D9f3qZH4r2ddgfe5GfY3z/0/E469888B2C83027B16B1A17DD692089035AE7F9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.88.0/22
                IPv6:
                  2804:309c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264964

    Signature Algorithm: sha256WithRSAEncryption
         6a:23:19:66:4c:4c:88:5c:df:bf:4b:7f:e3:f0:e6:64:b4:3b:
         51:c0:9c:af:51:fc:d9:68:70:11:5a:c7:a6:d5:db:2b:1d:df:
         bb:de:ee:13:d6:85:db:6c:cb:45:72:dd:a5:b4:56:5a:bc:d8:
         89:6b:9b:db:fa:14:77:b6:e7:ff:54:96:6c:4f:ee:f0:77:ab:
         f6:8d:1a:ef:d0:87:b9:ed:f2:b1:e0:53:1f:76:eb:15:f3:1f:
         41:87:57:e4:9b:a4:2d:e8:8f:06:34:a8:4a:00:44:ea:98:35:
         e9:4d:d0:1f:7a:a2:b1:eb:49:f0:05:bc:5f:5a:5d:2d:4e:aa:
         3b:83:d4:84:e7:56:fa:aa:1c:14:bd:ce:c5:e7:2e:55:c8:f5:
         04:8e:a7:a3:5d:93:0b:b6:9f:3a:ce:e9:b4:e2:95:bf:15:92:
         34:ab:30:81:8c:26:e1:6b:5f:da:be:ab:79:b0:e8:d0:bc:de:
         42:2a:3d:77:b7:27:64:05:e9:a9:14:52:90:66:97:b8:f6:42:
         6f:d9:9f:35:7b:af:ae:82:f0:ae:90:c1:b1:8f:27:44:91:38:
         c3:31:0c:1f:e3:ba:d3:be:4d:be:de:23:f2:d8:55:51:06:e9:
         a4:df:38:13:b7:f4:5c:d5:ed:12:35:03:b1:d2:94:e1:12:5d:
         be:76:4b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org