Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/02341C6C4233FB8E508D00047CD0B047A91DEAFE.cer
File:                     02341C6C4233FB8E508D00047CD0B047A91DEAFE.cer (raw, json)
Hash identifier:          +gVP7/aEVNovJ074/9lti59Yb+4Hc90sAPb+MgSuw6k=
Subject key identifier:   02:34:1C:6C:42:33:FB:8E:50:8D:00:04:7C:D0:B0:47:A9:1D:EA:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27CF938359F478BDB61BDC6B9923D9E1080FD3BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/02341C6C4233FB8E508D00047CD0B047A91DEAFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Apr 2023 23:44:35 +0000
Certificate not after:    Fri 26 Apr 2024 23:49:35 +0000
Subordinate resources:    AS: 265919
                          IP: 131.196.196.0/22
                          IP: 2804:3fd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cf:93:83:59:f4:78:bd:b6:1b:dc:6b:99:23:d9:e1:08:0f:d3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 28 23:44:35 2023 GMT
            Not After : Apr 26 23:49:35 2024 GMT
        Subject: CN=02341C6C4233FB8E508D00047CD0B047A91DEAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2a:21:22:04:e3:9b:30:06:10:da:27:41:02:
                    d1:1c:3b:4d:69:ba:e2:43:70:df:22:94:dd:85:89:
                    bc:fb:3c:f0:99:a4:5d:ab:d8:d6:d4:10:83:ba:00:
                    27:11:c9:34:fd:d7:20:d1:a7:ed:a0:ac:d1:a1:8a:
                    17:56:d0:b5:a6:28:1b:8a:e1:42:d9:b1:96:cf:dc:
                    f3:fe:90:28:1c:34:e8:76:2b:ae:24:72:05:ff:53:
                    b6:23:0f:d4:92:49:12:41:86:45:bf:4a:fd:b2:42:
                    d4:5d:60:79:81:11:8e:3a:9e:b3:48:65:ae:c4:b7:
                    a5:ed:a0:b9:c5:32:33:bc:29:e6:4b:30:80:4f:14:
                    c4:53:d6:e5:9a:0a:81:4d:0a:86:74:f5:d7:52:bf:
                    70:77:a1:d9:04:13:2d:f6:3a:e3:5f:2f:23:8d:75:
                    94:86:bd:92:cc:5f:88:41:7f:7a:a2:e6:cf:cb:19:
                    a4:52:68:6b:81:18:05:1a:35:d4:1b:e3:e7:ad:67:
                    bd:bd:4f:67:45:9f:ff:01:61:08:49:f8:f3:ac:a7:
                    03:5e:ae:4c:1d:1f:d9:eb:67:26:73:6f:6d:52:28:
                    e6:e1:ca:cd:dc:b3:1b:24:01:6f:5c:a8:1b:30:8f:
                    2b:f9:18:39:59:5d:0a:d0:3e:11:e9:a5:60:d4:fd:
                    af:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:34:1C:6C:42:33:FB:8E:50:8D:00:04:7C:D0:B0:47:A9:1D:EA:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/02341C6C4233FB8E508D00047CD0B047A91DEAFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.196.0/22
                IPv6:
                  2804:3fd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265919

    Signature Algorithm: sha256WithRSAEncryption
         9a:3f:c3:45:59:d8:c2:4f:6d:dd:03:4f:f5:5e:8b:88:32:6a:
         72:f6:4b:17:e3:80:a1:6a:95:de:df:87:74:65:28:d8:3f:da:
         6b:5c:1a:04:25:2a:b6:40:fc:b3:64:71:48:4d:7a:cf:7c:8f:
         24:b8:70:3c:5a:89:de:0a:da:b7:c7:e9:f4:e5:b9:ea:dd:2a:
         23:db:92:77:c6:30:b6:d7:82:a6:47:ef:c1:3e:de:7a:05:f8:
         27:ee:91:79:c2:1c:29:34:7f:44:7c:6b:3b:51:ee:fe:e1:51:
         8a:98:8d:98:25:3a:93:fa:e2:f6:84:ee:6f:40:b4:81:8e:24:
         35:5e:dd:d3:ff:99:bd:f1:4e:9f:f0:88:08:d5:56:1d:75:27:
         c3:46:9c:b8:f0:e4:59:a8:42:8b:30:bb:ec:ca:59:4e:38:9a:
         a9:c6:50:7d:14:13:2d:f7:73:e2:c9:bb:5a:e8:61:f5:65:0b:
         ec:14:5d:93:3c:96:cf:d1:7c:9a:ff:35:de:fb:35:e2:81:af:
         e0:ee:ee:82:61:08:cf:b5:69:bd:b3:f2:95:6e:57:7a:6e:7e:
         be:72:53:ac:4e:59:42:05:c4:e0:00:cd:32:49:f0:72:33:fe:
         d1:8f:7a:78:8f:ed:97:8b:31:1c:a8:f6:3c:e6:a3:04:b2:2e:
         8d:9b:1a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org