Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/11179CD617E4CD6CC49CB2158A41A8B642E45C44.cer
File:                     11179CD617E4CD6CC49CB2158A41A8B642E45C44.cer (raw, json)
Hash identifier:          UCg2/W4YOvg7IjlWCECnNo5dTBbN/ObLqYbFOo5HCZE=
Subject key identifier:   11:17:9C:D6:17:E4:CD:6C:C4:9C:B2:15:8A:41:A8:B6:42:E4:5C:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6EC65A439342F7CC1F9FF005F539EB42F8D7E821
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/11179CD617E4CD6CC49CB2158A41A8B642E45C44.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 17:35:45 +0000
Certificate not after:    Wed 04 Dec 2024 17:40:45 +0000
Subordinate resources:    AS: 270804
                          IP: 200.219.60.0/22
                          IP: 2804:71ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c6:5a:43:93:42:f7:cc:1f:9f:f0:05:f5:39:eb:42:f8:d7:e8:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 17:35:45 2023 GMT
            Not After : Dec  4 17:40:45 2024 GMT
        Subject: CN=11179CD617E4CD6CC49CB2158A41A8B642E45C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ec:98:d9:75:b9:db:d4:5b:4b:fe:27:38:38:
                    00:a8:45:c9:c9:e1:87:c2:41:c9:65:ba:5b:b5:dc:
                    50:7b:15:ca:c2:ad:32:da:e3:47:81:cd:0d:9e:3f:
                    86:70:94:8b:99:93:c1:99:91:8c:1a:94:7c:4d:41:
                    06:11:b7:09:71:aa:70:a5:4f:2a:36:02:c2:0e:e0:
                    e7:29:dd:70:ab:8a:97:58:ee:49:08:e8:29:4c:6b:
                    68:0c:83:09:67:c0:e7:4f:bf:e7:96:54:aa:0a:6e:
                    22:79:77:91:10:b7:52:ee:22:a9:fe:8c:4e:7d:31:
                    d9:2c:f6:af:fe:fa:b1:2e:5d:3a:cc:6f:80:e5:c4:
                    d1:18:b7:58:66:a1:32:f8:36:8b:ff:32:63:da:b7:
                    b4:2e:9e:69:09:1c:e0:be:87:87:1f:8d:dd:42:c5:
                    c1:48:51:dd:d5:7f:1b:17:84:cb:d9:4c:bc:7d:be:
                    16:b2:d5:68:15:0a:be:02:e6:e8:5c:08:bc:e0:d5:
                    a7:dc:25:71:bd:15:a0:ae:77:94:13:9d:cf:65:33:
                    4f:be:d1:50:0e:c6:0b:e8:f8:82:0d:bc:84:2c:ea:
                    26:6a:b4:b7:0a:85:58:d8:1c:29:4d:d3:f3:35:f0:
                    7c:19:fe:12:e7:46:8a:3a:13:a2:c1:a5:19:81:1a:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:17:9C:D6:17:E4:CD:6C:C4:9C:B2:15:8A:41:A8:B6:42:E4:5C:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A12qrEUqh19G1TnteKtAXc7Rv3YdjLyXpjiqqmKykaEY/0/11179CD617E4CD6CC49CB2158A41A8B642E45C44.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.60.0/22
                IPv6:
                  2804:71ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270804

    Signature Algorithm: sha256WithRSAEncryption
         43:ad:04:4b:9e:49:fa:73:97:27:97:fa:ff:b6:37:13:22:d9:
         bf:ce:d3:78:4b:bc:2e:bf:eb:2a:3c:b1:d5:ce:6f:3d:b5:63:
         80:51:fd:fe:ca:ff:cc:e0:8d:7c:43:6c:c9:11:40:c7:49:bd:
         10:bf:d5:89:c2:57:81:a7:47:d7:25:43:3e:b0:2b:50:3b:4c:
         f0:f2:08:d5:37:71:c3:c5:1a:cd:04:dd:d0:6d:bf:7c:88:b0:
         78:34:bc:8c:73:c7:9c:e6:71:d9:56:87:6c:23:b9:77:f2:b9:
         98:ef:5f:b6:27:d6:f8:ba:3e:65:be:49:3e:e2:74:a9:85:27:
         8c:38:22:35:6a:a1:3c:3b:9e:cc:98:f0:13:e6:6a:1f:e8:0c:
         31:b4:16:50:91:d4:a0:70:67:c7:a8:0d:b7:d0:12:df:d1:8e:
         fe:5a:29:d6:30:c6:63:72:6f:75:3b:f1:22:2a:06:2e:6c:a4:
         2e:fe:c6:42:6f:62:af:ba:81:7b:df:7f:32:f1:c5:b1:d6:55:
         dc:6f:0e:f8:63:9e:f7:fb:bd:03:08:84:9d:ab:4c:2e:71:bc:
         00:ee:39:2c:41:6a:3d:59:54:7e:46:30:57:91:81:36:3f:87:
         69:99:ac:39:ac:4b:37:00:79:7e:cc:f3:a1:18:8c:be:68:36:
         9b:5a:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org