Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
File:                     1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer (raw, json)
Hash identifier:          kwhYNT76nB/1E4Rm2zu//DVXSSmQA+tpD9sMafkuO74=
Subject key identifier:   1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04F735DA5E9B3636A76D4FAA8F0F18538BB189F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Jun 2023 18:02:58 +0000
Certificate not after:    Fri 31 May 2024 18:07:58 +0000
Subordinate resources:    AS: 268135
                          IP: 45.170.4.0/22
                          IP: 2804:588c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:f7:35:da:5e:9b:36:36:a7:6d:4f:aa:8f:0f:18:53:8b:b1:89:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  2 18:02:58 2023 GMT
            Not After : May 31 18:07:58 2024 GMT
        Subject: CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:48:7c:8a:7e:36:65:47:3a:36:63:cc:44:3c:
                    fe:a9:d7:00:3b:e2:7e:61:a5:42:f2:e7:e5:aa:aa:
                    fd:39:18:27:5a:2a:1f:f0:1b:a9:55:5d:48:04:d4:
                    2e:74:84:76:a7:b3:1f:8d:40:26:43:cb:64:7b:85:
                    52:86:60:00:ce:7d:46:4b:ea:68:a8:f2:51:7a:2b:
                    72:12:75:af:4e:12:48:0f:24:9b:01:28:1b:92:cb:
                    0d:25:77:0b:7b:a5:81:f8:92:c9:81:46:4f:41:c1:
                    a4:71:70:a3:ed:6b:97:b1:c7:0c:69:8d:ce:bc:0e:
                    78:4e:80:cd:92:18:d7:3f:77:2f:7d:ea:09:89:52:
                    19:89:bc:08:de:74:e5:a2:78:77:6a:c2:fa:37:2c:
                    19:5a:04:59:a2:dd:aa:3a:1f:aa:c3:7e:31:f1:1d:
                    27:cf:ae:53:92:1a:19:1a:e7:9f:a5:ba:31:02:8f:
                    5b:25:17:48:8e:3c:d0:92:39:aa:a6:61:14:1c:d0:
                    22:95:57:6a:c2:d8:82:a1:3c:5e:79:cc:73:1f:f5:
                    53:5c:7f:b3:e7:09:03:5b:22:b8:8e:ed:80:b0:75:
                    9b:28:73:63:ab:af:a2:ad:ce:85:58:02:f6:5e:89:
                    32:86:5e:b3:b7:f4:82:90:eb:93:cf:d1:4f:f7:5f:
                    f5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.4.0/22
                IPv6:
                  2804:588c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268135

    Signature Algorithm: sha256WithRSAEncryption
         40:90:78:ed:40:42:0e:df:b1:9e:ee:7b:a6:44:ba:74:80:c6:
         10:72:64:d6:e1:3a:77:fb:d7:f2:28:1c:3e:8e:f5:ce:b2:55:
         45:3c:04:af:7f:55:71:ae:7b:17:fd:9d:bb:d4:2f:72:a3:78:
         20:dc:10:7d:72:c3:cc:af:3d:3d:76:8a:ae:9c:28:77:51:b2:
         48:1d:d4:3e:36:5d:53:7f:9e:81:b5:34:ee:84:9b:d4:01:ba:
         b6:06:26:fa:0c:c5:1f:90:a3:cd:90:bb:50:0f:a4:cb:d8:74:
         c8:3e:69:26:ad:17:23:cc:af:78:93:3a:f3:cb:75:38:aa:e5:
         cf:64:73:2b:fd:dd:4e:8b:8b:f4:ca:8d:40:dc:5b:c1:8c:2e:
         be:90:80:6a:6b:52:5b:41:c4:28:f4:fd:b5:06:cf:85:fd:14:
         8b:84:0f:22:cc:aa:be:98:53:c9:77:e0:58:dd:da:3e:80:f1:
         41:2a:3a:6f:23:16:f1:ff:2d:c8:2c:17:74:cc:93:41:72:95:
         d5:5f:0c:ea:17:e1:20:6a:4d:77:6a:b2:18:16:2f:4e:7f:5c:
         ae:7d:ac:3b:88:6c:a1:c9:50:c5:61:23:6a:74:c4:dd:1e:32:
         9c:b7:a8:66:1d:b3:1f:e2:cc:b7:11:15:70:8e:e4:89:28:07:
         9a:7c:69:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org