Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/01DF0AF769A4EA9A0AC3400D592025A2B8132742.cer
File:                     01DF0AF769A4EA9A0AC3400D592025A2B8132742.cer (raw, json)
Hash identifier:          FpZAEa++hXTrymhjd0WxA9/UZwb/Ptc13xUIkTG94Ws=
Subject key identifier:   01:DF:0A:F7:69:A4:EA:9A:0A:C3:40:0D:59:20:25:A2:B8:13:27:42
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6860458DC248954404A10343BC40F560B6A86FBB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/01DF0AF769A4EA9A0AC3400D592025A2B8132742.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 15 Feb 2023 12:44:47 +0000
Certificate not after:    Wed 14 Feb 2024 12:49:47 +0000
Subordinate resources:    AS: 262828
                          IP: 177.155.192.0/21
                          IP: 186.251.96.0/21
                          IP: 2804:2a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:60:45:8d:c2:48:95:44:04:a1:03:43:bc:40:f5:60:b6:a8:6f:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 12:44:47 2023 GMT
            Not After : Feb 14 12:49:47 2024 GMT
        Subject: CN=01DF0AF769A4EA9A0AC3400D592025A2B8132742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:33:2a:15:33:23:e6:e0:ea:41:d2:7b:af:
                    57:dc:e0:13:3b:90:93:4d:85:bf:1f:7b:49:c4:68:
                    88:d5:25:8c:43:1d:b7:3b:f1:58:f9:ef:d2:a2:74:
                    10:40:e4:dc:a8:c6:c5:d8:83:cd:b0:6c:b2:df:ef:
                    53:bb:93:ed:11:2b:81:37:35:38:c5:7d:64:4a:94:
                    e0:90:74:1e:0c:88:c1:58:01:96:03:71:3b:f4:9d:
                    d7:29:42:bc:b8:0b:3c:42:bd:08:49:9b:10:78:6a:
                    63:ea:e1:8c:18:74:f5:aa:c5:0b:b3:e8:ad:5c:33:
                    34:eb:ad:f6:ab:b3:e5:1d:05:69:f1:d4:c7:ce:b9:
                    55:9c:db:e6:9d:b0:b3:8f:8b:3b:56:c2:b7:56:c5:
                    09:ed:54:ec:2f:26:5d:66:1c:7b:5e:5b:5c:cd:a8:
                    e8:5a:bc:d9:20:2e:e0:38:9f:a8:70:77:48:fc:16:
                    a8:d5:82:d9:96:5e:6a:fc:32:9a:f1:48:58:6a:80:
                    13:6c:02:39:35:3e:83:35:8c:ca:f3:2e:62:10:de:
                    99:de:a9:39:af:5b:92:df:66:ad:34:30:3b:00:e9:
                    70:e5:8e:af:2a:71:93:d6:0a:79:91:16:0a:c1:70:
                    46:55:d2:95:4e:52:e9:b5:50:40:34:2c:eb:8e:38:
                    f0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:DF:0A:F7:69:A4:EA:9A:0A:C3:40:0D:59:20:25:A2:B8:13:27:42
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/01DF0AF769A4EA9A0AC3400D592025A2B8132742.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.192.0/21
                  186.251.96.0/21
                IPv6:
                  2804:2a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262828

    Signature Algorithm: sha256WithRSAEncryption
         43:1b:a6:86:14:d8:65:f2:80:9f:e0:c5:e9:7c:c7:d8:12:3e:
         c5:14:a5:f2:0b:89:a0:06:44:0e:51:25:b2:2a:ad:67:0d:26:
         02:d6:9e:6b:5a:c7:20:21:8e:42:f5:6c:62:06:a5:58:22:a2:
         3a:b3:94:e5:ed:6a:68:59:8b:22:0a:b7:af:27:bd:c2:31:8b:
         3b:4f:aa:21:99:d3:a9:59:4c:ad:ba:dd:3b:0d:b7:44:fb:7e:
         66:6b:e5:0e:64:90:17:b8:52:af:17:6c:02:33:51:a3:d8:c7:
         ac:7a:3c:6d:ac:b2:77:76:fe:b8:df:9f:d6:63:af:d2:da:d5:
         7c:82:b4:4f:e8:ac:dc:19:2d:bd:31:f7:53:c6:19:01:83:e5:
         9d:cd:ff:3a:ff:2d:d2:54:65:c5:2d:35:65:a4:63:99:76:23:
         00:a3:3d:45:d3:13:5b:a4:e1:d0:93:18:0b:4b:27:52:f7:21:
         70:d2:fc:1e:82:f3:7d:65:dc:1f:a1:17:33:2e:c7:df:4e:b4:
         b5:70:e3:1d:94:fe:3e:9e:b1:c0:d2:c3:7e:9b:70:a3:d6:c4:
         4b:01:78:95:e2:1c:7b:43:05:f9:1f:2c:8e:01:76:c7:86:ca:
         43:15:1e:d5:50:be:62:a8:a1:d8:46:b3:92:5a:49:5e:6a:0d:
         5a:1f:21:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org