Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4174471032BF86AA31A24302BF994269A134800A.cer
File:                     4174471032BF86AA31A24302BF994269A134800A.cer (raw, json)
Hash identifier:          G7sGnIkgoJmheWc6tx+wDwrBPcHLtdT5MKnEMa+WrL8=
Subject key identifier:   41:74:47:10:32:BF:86:AA:31:A2:43:02:BF:99:42:69:A1:34:80:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       107EF48DC69C9CE9F7528D76BDD31E2630DFE57B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/4174471032BF86AA31A24302BF994269A134800A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jul 2023 14:47:42 +0000
Certificate not after:    Tue 16 Jul 2024 14:52:42 +0000
Subordinate resources:    AS: 53209
                          IP: 177.11.136.0/21
                          IP: 186.233.176.0/21
                          IP: 2804:295c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7e:f4:8d:c6:9c:9c:e9:f7:52:8d:76:bd:d3:1e:26:30:df:e5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 18 14:47:42 2023 GMT
            Not After : Jul 16 14:52:42 2024 GMT
        Subject: CN=4174471032BF86AA31A24302BF994269A134800A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:99:9f:aa:d1:5e:e6:00:3d:76:84:6c:97:
                    4a:ef:1b:1c:da:90:c3:3b:c7:92:bf:6a:fd:92:9d:
                    5d:07:ec:f5:de:04:82:c7:89:57:2a:ec:b2:f7:23:
                    9b:d6:fb:bd:d9:7b:01:af:ef:05:18:07:ea:ed:69:
                    fa:c1:f4:35:4e:e2:3c:8f:c2:97:d9:42:6a:78:9b:
                    bd:4e:d9:5c:17:aa:8f:20:cf:e0:33:56:0f:7a:9c:
                    68:a4:3e:28:cf:fe:9d:03:3f:ae:6a:3e:f2:2b:8b:
                    7f:3a:fa:89:c3:b2:4a:99:2f:2b:ac:31:b1:aa:bb:
                    ad:51:da:0e:02:98:55:aa:27:67:26:73:35:55:33:
                    d7:65:b7:f5:b9:9f:c3:37:57:53:88:71:97:8f:e9:
                    a0:f4:e0:8a:95:be:57:71:b7:a1:a4:b4:fb:1e:c5:
                    c3:29:61:47:b3:6a:62:b5:b6:66:2b:f1:1f:f5:98:
                    c1:c9:34:61:2e:01:94:dc:18:29:0e:60:8f:b3:94:
                    4b:90:2b:a0:eb:0c:67:eb:ef:d5:47:a0:96:fb:e6:
                    68:a9:80:c4:8e:9a:53:02:0f:c0:69:17:57:be:26:
                    99:ce:5b:35:f5:8c:85:ac:fb:a2:12:21:ee:28:94:
                    ef:0d:35:d9:74:d4:6d:50:b0:a7:dd:65:76:cd:16:
                    c1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:74:47:10:32:BF:86:AA:31:A2:43:02:BF:99:42:69:A1:34:80:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AkbjVRXVpXvEX11UtRHoBJQjp5tukBoNsnh8zxug6gYB/0/4174471032BF86AA31A24302BF994269A134800A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.136.0/21
                  186.233.176.0/21
                IPv6:
                  2804:295c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53209

    Signature Algorithm: sha256WithRSAEncryption
         49:36:60:27:50:3f:ba:3d:92:5d:a4:eb:9b:2a:3a:15:c5:1b:
         97:60:28:e9:2b:80:64:b0:59:87:fe:7f:35:62:92:60:39:9f:
         c1:4d:e1:42:d4:56:6a:34:eb:30:67:64:f5:10:8b:4b:17:e1:
         af:3a:fa:dd:c3:34:05:00:46:df:d2:57:c9:3c:e6:23:cf:83:
         5b:12:d6:06:5f:3f:14:a2:74:9a:2d:85:ba:3e:dd:ba:11:6e:
         b7:a5:22:43:56:7f:b4:6a:54:db:09:eb:8a:40:86:8d:5f:20:
         11:7a:eb:4a:f8:64:76:95:fa:b8:9f:bf:76:89:18:93:58:43:
         92:ae:11:21:8f:40:b6:32:7b:37:ad:83:bb:41:cc:b1:63:ca:
         16:0e:42:63:de:60:04:61:27:9f:cf:6a:d8:7f:c6:93:e1:6c:
         d4:ec:31:f4:11:53:6f:d4:6f:f7:93:01:3b:33:a8:e2:aa:98:
         20:ba:8b:9e:76:22:76:25:d9:8e:70:1a:f1:82:b4:6c:3c:11:
         52:8a:da:2b:fc:d0:db:48:cc:e5:1a:3f:ca:f6:e0:4c:4d:21:
         38:d2:1b:50:72:83:2f:d7:81:39:0c:f6:3b:1b:e2:49:90:26:
         d9:b3:af:a9:e6:72:28:9f:bd:c2:a7:13:7f:91:9d:9e:2a:21:
         74:42:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org