Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/74869BE33EABA28B9D63EED4592740833EA9826B.cer
File:                     74869BE33EABA28B9D63EED4592740833EA9826B.cer (raw, json)
Hash identifier:          +4g0evyq1c/JiOsjckE9VL6/IND+H4IEqe0ULdlG7YA=
Subject key identifier:   74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0DDBCA626A4BCAEAEDDD57990D0D9198F4B012D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:26 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:26 +0000
Subordinate resources:    AS: 52685
                          IP: 177.73.24.0/21
                          IP: 177.136.208.0/21
                          IP: 2804:c38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:db:ca:62:6a:4b:ca:ea:ed:dd:57:99:0d:0d:91:98:f4:b0:12:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:26 2024 GMT
            Not After : Mar 31 11:03:26 2025 GMT
        Subject: CN=74869BE33EABA28B9D63EED4592740833EA9826B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:39:c8:d1:9e:52:72:2b:55:74:2a:e1:51:1d:
                    1e:f8:b1:1b:2b:36:cc:83:29:94:d0:20:0d:dc:90:
                    e6:d0:ea:44:68:65:64:4a:ad:1e:a3:cf:61:1d:fb:
                    a8:69:bb:b9:e2:e0:fa:ba:b7:70:61:f5:2a:02:b2:
                    16:61:0d:81:cc:b9:fe:65:01:b4:02:39:da:16:64:
                    f6:02:e9:6c:11:25:90:e9:b0:23:6b:b5:51:25:90:
                    86:da:1c:6e:6d:38:44:c2:5f:81:bf:2e:c0:85:bc:
                    b8:6e:c7:49:fb:ee:92:75:e4:ba:e5:1e:fb:b4:b0:
                    eb:11:47:af:f7:0d:bb:15:17:91:b5:1b:b9:e5:f5:
                    ab:5c:c0:b8:22:a0:4b:6a:6a:ae:a7:43:0d:8b:bb:
                    9d:e3:86:89:34:00:0b:d4:58:ad:ef:fe:46:54:55:
                    e6:52:10:66:79:44:f2:48:91:e1:98:3f:ef:4c:38:
                    7e:01:9f:62:2f:f2:86:43:d7:a9:e5:75:3e:8b:6e:
                    a0:2b:ae:c4:bf:45:be:95:bb:ee:a9:72:01:e0:fb:
                    ba:64:f7:43:70:7e:5f:93:a9:f1:6d:30:78:db:08:
                    db:fd:7e:ad:f4:e8:77:80:da:74:9d:b4:f6:57:bf:
                    09:43:c3:94:e2:d7:13:68:3d:d4:d0:7c:2f:54:13:
                    28:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:86:9B:E3:3E:AB:A2:8B:9D:63:EE:D4:59:27:40:83:3E:A9:82:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/681DJFq6xXWyA7nWN5FGg8NwEsfXnmXKjKgzmSATPsLt/0/74869BE33EABA28B9D63EED4592740833EA9826B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.24.0/21
                  177.136.208.0/21
                IPv6:
                  2804:c38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52685

    Signature Algorithm: sha256WithRSAEncryption
         ad:89:ec:b2:cb:ef:c2:b3:88:82:3c:32:93:e3:5b:0f:09:1d:
         7c:d6:1b:06:95:2e:b3:e5:03:7d:75:96:65:2e:d4:b1:76:88:
         d2:fc:43:67:00:74:8e:a4:2f:97:eb:b2:2c:9e:86:d6:fb:ed:
         e0:ae:13:cb:9c:ad:aa:7c:54:1d:52:4a:55:f1:f8:a8:c8:7f:
         93:dd:b5:17:d2:6a:81:da:f5:89:7c:ee:2e:e8:0f:f9:7b:e2:
         dc:62:1a:08:a0:e6:3c:7d:7e:5e:15:7f:23:3c:8d:e4:af:77:
         a3:aa:13:7d:c9:0f:51:70:af:48:a0:b7:ef:eb:ab:95:15:f7:
         62:b5:80:95:3a:20:ee:5b:19:db:f4:8f:20:4a:63:02:3b:e9:
         16:56:ad:79:c8:1d:33:57:f3:47:48:6a:d5:f0:95:c0:e2:de:
         24:ca:67:58:b8:1d:99:4a:3a:81:19:d4:40:ed:5a:cb:37:c0:
         a2:2f:40:32:64:98:ab:d9:c9:77:28:12:d6:6f:42:0c:5c:b0:
         c9:6c:64:11:f0:9b:11:9e:a0:8a:ba:9e:8a:e2:45:f3:d5:19:
         99:6d:39:f0:36:fc:06:69:8e:0b:6e:e9:91:65:7a:4c:3d:bc:
         39:65:1a:93:29:fa:2e:74:56:5a:00:24:b8:90:9f:10:6b:18:
         6e:63:36:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org