Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/015FF7B2420F79D7E3FB324944FAA5AB28892563.cer
File:                     015FF7B2420F79D7E3FB324944FAA5AB28892563.cer (raw, json)
Hash identifier:          KWVpX7LajE+2iijrsYXH0RdYLFBd67V4By3RMc5FtC8=
Subject key identifier:   01:5F:F7:B2:42:0F:79:D7:E3:FB:32:49:44:FA:A5:AB:28:89:25:63
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51DFCD8567B07A24F1ABF2DF3217ACA44E5E1287
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/015FF7B2420F79D7E3FB324944FAA5AB28892563.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 23:14:00 +0000
Certificate not after:    Thu 11 Jul 2024 23:19:00 +0000
Subordinate resources:    AS: 269109
                          IP: 45.179.68.0/22
                          IP: 2804:5f90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:df:cd:85:67:b0:7a:24:f1:ab:f2:df:32:17:ac:a4:4e:5e:12:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 23:14:00 2023 GMT
            Not After : Jul 11 23:19:00 2024 GMT
        Subject: CN=015FF7B2420F79D7E3FB324944FAA5AB28892563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9c:3c:89:ff:06:01:11:f2:5e:65:88:d2:9d:
                    fe:b0:f3:5b:b5:90:cb:9b:ad:ba:ea:fa:35:35:ad:
                    7f:a6:1f:b1:70:75:53:3e:6f:4d:57:d2:47:e5:10:
                    d7:17:e7:51:4c:8b:b4:9f:a5:b0:ab:c8:04:34:98:
                    30:0a:2b:d8:e5:7b:00:0f:2c:44:a2:78:0f:a5:ce:
                    92:36:2d:76:32:a3:8e:5c:3a:ff:20:0f:00:29:4d:
                    72:31:9c:8c:c7:7a:79:50:7b:40:38:39:d5:7f:28:
                    0b:f8:5a:93:cb:9c:68:77:1c:b3:d3:ea:46:9f:8c:
                    48:b5:b3:66:18:52:be:14:31:27:28:d7:88:21:8e:
                    7a:ce:49:2f:bb:cf:99:15:31:30:13:d0:2b:8b:f6:
                    08:dd:5f:12:46:45:9e:e7:3a:9a:e2:55:55:d2:39:
                    ab:6f:5e:8d:2b:c8:ff:b7:55:0d:13:27:e8:2b:c2:
                    a0:ee:10:e6:2b:6f:65:87:d5:ba:11:54:4f:f8:55:
                    1c:ae:69:64:5f:ad:ad:db:b7:65:cc:6a:b4:b6:66:
                    f4:ca:8a:f2:45:f7:0c:9f:18:e4:df:c4:8c:ea:c6:
                    4e:bc:3b:b5:51:07:f2:a2:2e:3d:c7:a7:bd:9c:be:
                    cc:42:64:50:c7:89:10:be:a3:89:7d:9e:06:e2:62:
                    82:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:5F:F7:B2:42:0F:79:D7:E3:FB:32:49:44:FA:A5:AB:28:89:25:63
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/015FF7B2420F79D7E3FB324944FAA5AB28892563.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.68.0/22
                IPv6:
                  2804:5f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269109

    Signature Algorithm: sha256WithRSAEncryption
         42:a0:fe:a3:fd:2b:81:92:ea:d7:b3:a3:20:cb:55:d7:d2:ae:
         0e:8d:34:82:9b:40:5c:ba:ea:7e:bc:6e:0d:3d:2a:30:2a:f8:
         f7:43:4e:27:e6:fd:7c:c0:a8:84:e0:84:61:b4:46:67:5b:32:
         65:c3:1f:5e:97:ab:66:32:72:cd:f4:59:6a:f0:44:eb:c9:a2:
         fe:25:45:61:4c:52:74:14:52:b2:a8:8b:5a:c9:2b:8f:ba:25:
         7b:d0:0c:37:b2:9a:b6:a5:2c:2e:85:49:2d:9a:86:38:54:00:
         ea:b7:f9:51:30:7a:ef:06:b1:e6:fe:67:47:18:6c:21:88:79:
         dd:bb:6a:87:35:df:cb:cb:5c:ee:97:cf:46:17:fa:d4:ba:30:
         87:d7:db:87:95:de:af:07:35:24:5d:0e:a5:04:08:5c:09:ad:
         e5:8d:21:0d:7d:1d:9c:14:54:d3:af:7a:6a:c0:0d:b8:6d:b9:
         2d:17:6f:10:8e:e1:ab:d4:db:1f:11:16:14:21:7c:e7:bd:0f:
         57:e7:f6:59:4d:15:bc:fe:24:48:a5:35:f6:bb:fb:b7:db:c3:
         9c:56:40:46:66:03:08:06:f7:56:34:37:4b:4e:62:42:f4:06:
         b7:26:aa:93:22:b5:36:40:7b:2a:06:4f:d9:95:bf:0b:6f:0a:
         9c:49:8c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org