Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.cer
File:                     11ACCE96940DE0E26CC79CC9DE02FF434F33C267.cer (raw, json)
Hash identifier:          +C7fYGEOnS7AmVPEn7SgT/iOG/XABddtbvfGaM0R2zg=
Subject key identifier:   11:AC:CE:96:94:0D:E0:E2:6C:C7:9C:C9:DE:02:FF:43:4F:33:C2:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58261DE9492D8C81CA6CD604F22FB05A2DB8ACB6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 14:35:09 +0000
Certificate not after:    Tue 03 Sep 2024 14:40:09 +0000
Subordinate resources:    AS: 263326
                          IP: 191.7.176.0/21
                          IP: 2804:1458::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:26:1d:e9:49:2d:8c:81:ca:6c:d6:04:f2:2f:b0:5a:2d:b8:ac:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  5 14:35:09 2023 GMT
            Not After : Sep  3 14:40:09 2024 GMT
        Subject: CN=11ACCE96940DE0E26CC79CC9DE02FF434F33C267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:01:2a:ff:04:42:b2:f4:0d:6f:b7:05:05:b8:
                    cf:52:6d:86:08:3a:e5:a9:5f:08:0b:55:50:4a:b5:
                    ba:17:09:59:e4:42:71:5c:7b:8c:19:f8:6a:3a:01:
                    57:a4:c9:aa:a3:34:58:1d:2e:e3:e5:bd:14:03:e7:
                    ce:3d:ca:40:ff:55:04:0d:05:37:d4:e6:c1:cf:ca:
                    26:e0:80:d0:f4:93:2b:f8:9a:de:74:9d:32:bd:cb:
                    1a:e1:47:81:41:8b:1d:f0:bc:94:5d:34:ef:1e:b5:
                    d0:15:93:95:bb:32:d5:11:28:25:17:a3:f7:84:a8:
                    11:aa:a6:14:da:0d:1b:6b:a1:e4:32:c0:fd:59:56:
                    f6:50:33:69:33:97:f8:85:39:9d:61:cb:0b:cc:08:
                    97:4a:4a:4b:c8:9c:07:cc:1f:9d:34:8e:f2:76:ac:
                    52:2a:81:fe:0c:c3:5c:18:b8:80:4b:61:f2:9c:fa:
                    4b:94:5d:01:67:39:3d:3f:de:da:e9:9c:55:1a:70:
                    a0:3f:ee:91:6d:50:02:92:3b:4b:8f:d3:84:52:56:
                    05:2e:5c:23:e7:83:08:cc:59:0e:b4:82:3b:27:77:
                    2a:d9:e2:99:1e:7d:33:e4:68:ed:a3:1e:37:6d:67:
                    8e:ca:f3:72:0d:3d:55:9c:fd:e6:63:30:8f:00:75:
                    80:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:AC:CE:96:94:0D:E0:E2:6C:C7:9C:C9:DE:02:FF:43:4F:33:C2:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FfVdfsqbtC7mHkJEYx3HEnj763ie1E1WKtptgMFupUJi/0/11ACCE96940DE0E26CC79CC9DE02FF434F33C267.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.7.176.0/21
                IPv6:
                  2804:1458::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263326

    Signature Algorithm: sha256WithRSAEncryption
         3c:b7:8d:66:d0:9e:94:46:3c:e8:9a:c2:24:c2:9b:59:df:d7:
         d5:ae:79:25:d9:a0:93:4b:03:84:2e:b9:61:7e:ce:60:8f:20:
         37:0b:82:61:06:76:37:dc:f0:aa:c1:a1:a5:71:2b:a1:42:c3:
         8d:27:9d:a6:76:a3:b0:f6:e4:68:12:37:7e:dc:c1:fd:04:c6:
         2d:aa:66:c5:07:ad:f9:f1:1e:91:c1:c2:d0:fd:c9:16:a7:47:
         79:26:48:55:c1:76:c8:62:13:eb:cf:96:e7:70:78:6a:86:ff:
         b3:6c:21:a0:41:55:c1:8b:6f:5b:cf:12:7c:48:86:3c:b0:ee:
         24:a5:49:a6:9d:90:f4:d1:44:08:8c:de:43:97:41:13:99:3d:
         cb:3b:86:9b:28:2e:58:ef:c1:e2:03:4a:f5:57:91:02:7d:b3:
         95:7b:a0:19:6a:5a:91:72:a7:ba:ee:25:52:9b:8e:86:f9:e9:
         f0:04:4a:22:c2:e0:75:3f:05:36:48:94:21:69:ca:37:56:d9:
         41:d5:91:b4:3e:ea:9b:b7:fb:70:b6:49:69:14:20:14:c8:cb:
         ba:7a:12:f4:68:fc:97:bd:ac:40:0f:5f:d4:ad:6d:e1:08:03:
         00:44:11:23:ed:61:8c:9f:ae:80:39:ff:8b:05:a3:55:34:87:
         98:77:58:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org