Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/018DC1EA01C7C083785A6DEFCFBFE6E7C4F232A7.cer
File:                     018DC1EA01C7C083785A6DEFCFBFE6E7C4F232A7.cer (raw, json)
Hash identifier:          cK+NDnrsYWR3bBt7rnI43x++qtiFjjri2wPrMKBoIJc=
Subject key identifier:   01:8D:C1:EA:01:C7:C0:83:78:5A:6D:EF:CF:BF:E6:E7:C4:F2:32:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1AA032CCA3F196A41D34B2B35F33BDB359DC2D42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/018DC1EA01C7C083785A6DEFCFBFE6E7C4F232A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Nov 2022 12:49:25 +0000
Certificate not after:    Wed 29 Nov 2023 12:54:25 +0000
Subordinate resources:    AS: 267475
                          IP: 192.141.192.0/22
                          IP: 2804:4210::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a0:32:cc:a3:f1:96:a4:1d:34:b2:b3:5f:33:bd:b3:59:dc:2d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 30 12:49:25 2022 GMT
            Not After : Nov 29 12:54:25 2023 GMT
        Subject: CN=018DC1EA01C7C083785A6DEFCFBFE6E7C4F232A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:4a:70:d4:e1:85:40:2a:61:c6:57:5a:d4:
                    15:8a:3a:a5:13:9b:9b:c3:90:91:e3:9d:80:d0:02:
                    6c:b9:ad:de:b3:e3:21:77:b7:bd:ee:0a:4f:85:35:
                    ff:1b:6a:88:82:31:2a:19:e8:05:f9:32:49:4b:fe:
                    bd:90:22:95:05:69:fa:b2:a4:75:fc:95:e0:75:dd:
                    68:38:e4:bd:24:66:76:77:ce:db:c2:b6:70:85:f1:
                    32:fe:44:e4:a0:ee:54:a2:58:5c:11:b0:4d:f9:26:
                    b7:d2:ed:b5:cb:ed:fd:23:14:f7:e1:d6:cb:c5:b0:
                    51:ee:9d:14:a7:ea:75:f8:02:09:1c:6c:5a:60:e4:
                    80:84:b6:4f:d4:19:fa:de:4f:93:4f:b3:16:10:a9:
                    c8:75:40:86:ba:d3:69:f2:f3:2b:cf:81:c4:8d:71:
                    59:fe:25:21:da:a7:56:43:f0:ec:59:4a:c3:ff:7b:
                    4b:ef:07:5f:93:63:0a:b1:0c:90:e9:fb:eb:7d:6b:
                    9e:14:b0:46:b8:dd:ff:62:dd:60:e8:02:0d:ce:07:
                    4a:ee:35:c8:b7:9c:f8:cb:86:ae:97:a4:80:d1:b1:
                    c9:1f:59:ce:a8:7c:8b:1e:bb:7d:75:fa:59:4c:0e:
                    26:62:55:41:a0:bb:d2:5b:76:06:f8:65:e5:7d:51:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:8D:C1:EA:01:C7:C0:83:78:5A:6D:EF:CF:BF:E6:E7:C4:F2:32:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7BdUY17MpNAnZ9YgRF6kEuTuJLwF7QbZorFj4XseZQV7/0/018DC1EA01C7C083785A6DEFCFBFE6E7C4F232A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.192.0/22
                IPv6:
                  2804:4210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267475

    Signature Algorithm: sha256WithRSAEncryption
         a5:15:3e:c1:12:60:d6:22:32:a4:f9:3f:6d:d6:e1:29:85:06:
         16:3d:49:a0:a6:1d:4f:62:81:c6:d2:2a:83:df:b6:ea:7e:6f:
         86:3f:d3:bb:f3:96:88:d7:4f:4a:4b:c9:21:9a:09:06:66:a3:
         42:d8:98:40:08:08:00:6d:4b:99:86:ee:dc:03:cc:62:0e:95:
         2f:35:17:ea:a8:55:bc:d0:b8:99:55:40:e4:22:e4:69:dd:3d:
         5f:b9:86:e6:b0:cb:e7:a3:2d:d6:e2:b5:92:01:5a:9a:95:1d:
         28:c4:bb:b2:06:96:11:d0:06:f7:6e:05:9b:f7:e7:a4:db:4b:
         1e:2c:03:3d:78:3c:c1:98:41:59:7c:d1:25:7e:f1:97:72:3a:
         4b:c7:85:b0:96:07:73:5b:e5:80:d6:cb:e0:99:57:a8:f0:37:
         07:26:54:6b:6c:6a:b8:c3:2e:af:3c:68:c1:58:54:b7:96:48:
         89:53:79:a6:27:91:8c:60:43:7c:2f:8e:5d:32:db:88:f4:3a:
         66:19:46:69:69:92:47:c7:5c:fa:4b:be:49:d7:55:8a:88:34:
         bd:6a:bb:03:20:cc:f1:cf:02:69:1d:17:a3:3e:cc:30:b4:37:
         05:73:1d:34:f5:54:56:c2:3c:7b:35:64:38:9a:f0:6b:11:79:
         42:1e:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org