Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer
File:                     11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer (raw, json)
Hash identifier:          fYKRlZV82zXEe3WAbJLm2qJG8PeyyQ9Bfb6bTubrwbk=
Subject key identifier:   11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       02FB05BB90B7D2415C182F6E8FED1695C87A3AC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Sep 2023 13:31:38 +0000
Certificate not after:    Thu 19 Sep 2024 13:36:38 +0000
Subordinate resources:    AS: 263604
                          IP: 143.202.112.0/22
                          IP: 177.71.88.0/22
                          IP: 2804:fcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fb:05:bb:90:b7:d2:41:5c:18:2f:6e:8f:ed:16:95:c8:7a:3a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 21 13:31:38 2023 GMT
            Not After : Sep 19 13:36:38 2024 GMT
        Subject: CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ac:f9:99:61:4d:b1:c1:63:01:de:90:79:d2:
                    c1:4b:5f:56:06:1f:e2:e8:d1:f2:cd:a6:e9:dc:60:
                    42:8c:dd:f3:3c:a9:e2:e6:83:ba:27:57:b0:01:16:
                    ee:e0:a1:59:03:e3:e3:00:9d:8d:89:50:5e:00:b1:
                    fc:60:30:dc:07:4b:6f:c2:a6:3a:fe:6c:b0:14:99:
                    ab:b2:dc:bc:0d:fb:76:d7:e5:f5:1a:fe:56:59:bd:
                    ba:07:a1:fb:c4:cb:a7:b0:71:e9:84:94:0b:e6:ce:
                    3d:c9:b4:00:d8:70:0c:6a:45:d6:5d:42:aa:a0:ae:
                    53:a0:ea:e0:1a:16:c8:2e:6f:3e:87:2e:05:09:92:
                    c8:d4:0b:be:de:a5:a7:aa:14:7b:7e:01:bc:c6:7c:
                    50:14:9f:e3:01:75:94:a6:8c:9a:72:15:ea:34:04:
                    eb:2c:fb:25:0a:a5:a9:fa:98:7c:44:e3:d4:c5:53:
                    18:a6:24:4a:44:5b:ec:5b:2c:15:12:2c:3f:45:01:
                    bb:20:00:c0:57:81:e7:c3:76:37:7e:8e:a9:64:14:
                    28:93:33:58:89:27:3a:b8:4e:48:c0:55:12:1e:0a:
                    9a:c1:06:85:4a:0c:4a:66:6b:3c:01:91:60:8f:46:
                    4f:eb:ef:34:74:f2:6b:7a:be:79:da:fc:d5:29:a7:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.112.0/22
                  177.71.88.0/22
                IPv6:
                  2804:fcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263604

    Signature Algorithm: sha256WithRSAEncryption
         94:33:97:2b:7e:2d:6e:bb:ce:53:74:8f:62:40:de:2c:90:b3:
         ee:74:97:44:00:64:7a:b0:b4:5b:c1:4f:76:f0:ca:be:f3:7e:
         99:bb:4f:55:76:ab:26:75:96:a1:38:d6:e8:74:8f:6e:10:a5:
         b5:3c:67:a1:5b:6d:5b:3c:5d:9f:4f:c9:a0:2e:1e:86:44:6e:
         54:49:90:89:bc:6f:b3:87:39:77:b1:70:ee:ac:05:bf:56:30:
         06:24:83:67:0c:c1:92:f7:62:6f:e2:c2:c4:0f:39:44:7d:8e:
         6b:be:21:7f:4f:42:aa:93:d4:51:37:e0:4f:43:b4:af:e1:08:
         7c:ce:ce:38:cf:aa:a3:b3:a1:88:0c:5f:3d:c2:5f:a0:65:c6:
         fe:3f:63:45:32:24:ca:8b:1b:6f:51:be:7e:c2:2c:bb:d4:de:
         bc:3a:4e:91:57:a7:f7:75:aa:e4:5b:b9:ce:27:3c:29:fe:50:
         01:4e:fc:3c:8e:8d:4e:f4:63:31:ec:8b:7b:ff:87:f8:16:47:
         4a:43:fa:f1:81:ab:d3:9f:f8:11:2f:0b:41:e8:ee:87:c5:d5:
         9b:bf:47:d0:3e:af:3f:1a:54:4f:c1:74:1c:91:a0:a7:90:34:
         a5:57:87:27:6b:ff:42:29:c2:39:09:d9:70:1e:a7:f1:5b:6a:
         c9:f3:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org