Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/11DE1C63E7D9AD434813D69B1DD1F3A877C26667.cer
File:                     11DE1C63E7D9AD434813D69B1DD1F3A877C26667.cer (raw, json)
Hash identifier:          cTwpgrBDdsb2sIdjtcANvc8PCtpTM19dk/xbOENm/Js=
Subject key identifier:   11:DE:1C:63:E7:D9:AD:43:48:13:D6:9B:1D:D1:F3:A8:77:C2:66:67
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3BC47149773CD9796C16DAFC35475A9808509B55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/11DE1C63E7D9AD434813D69B1DD1F3A877C26667.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Sep 2023 19:15:34 +0000
Certificate not after:    Thu 26 Sep 2024 19:20:34 +0000
Subordinate resources:    AS: 269083
                          IP: 45.179.76.0/22
                          IP: 2804:5f34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c4:71:49:77:3c:d9:79:6c:16:da:fc:35:47:5a:98:08:50:9b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 28 19:15:34 2023 GMT
            Not After : Sep 26 19:20:34 2024 GMT
        Subject: CN=11DE1C63E7D9AD434813D69B1DD1F3A877C26667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:64:84:ea:f2:63:c9:4b:09:22:59:dd:ee:
                    a0:56:5e:ab:47:e9:d0:c2:34:ca:39:1d:ab:a2:a3:
                    71:00:7c:51:6d:00:7e:0e:c3:50:5a:3a:08:6c:1b:
                    ff:ba:4b:b3:b3:48:66:c3:96:dd:af:a4:95:69:46:
                    21:bf:3b:c7:cd:46:82:5e:02:7b:eb:89:c8:4f:a6:
                    75:51:1c:cc:2c:8d:e2:15:0e:33:9a:05:1b:ae:35:
                    a2:ce:20:29:6c:6b:aa:4f:a5:df:aa:7a:ff:62:a7:
                    c2:56:5e:de:fc:a3:76:ec:f6:86:84:cd:a4:08:01:
                    b0:b0:52:42:b6:f9:0a:41:1e:dc:71:f1:d7:97:af:
                    7d:26:15:93:e2:f9:00:02:74:68:f1:15:ec:e6:80:
                    77:a0:2e:9e:e3:22:b9:90:ce:2b:96:72:f1:5b:2a:
                    16:c8:5d:e6:d9:de:62:81:db:8a:7c:06:00:b1:21:
                    36:d9:e2:60:24:54:fe:ae:17:45:37:9a:b6:0e:9f:
                    fa:de:ab:3b:fd:15:49:79:53:2a:8c:55:ca:03:ff:
                    e0:ef:00:ec:e6:a9:81:98:e5:cf:e8:82:6b:34:67:
                    bc:a2:35:26:c9:1e:47:ab:d1:51:c6:74:06:7a:e2:
                    6a:bc:80:dc:66:a7:a8:99:ed:ee:a8:9d:53:6c:cf:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:DE:1C:63:E7:D9:AD:43:48:13:D6:9B:1D:D1:F3:A8:77:C2:66:67
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2FfDagtaRuxg5V6pEqddDf6tnWpsQ8jk91UNMdhAH84e/0/11DE1C63E7D9AD434813D69B1DD1F3A877C26667.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.76.0/22
                IPv6:
                  2804:5f34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269083

    Signature Algorithm: sha256WithRSAEncryption
         5a:d9:3e:ae:00:a2:8c:64:9f:7f:0c:ad:22:9e:10:ac:ce:78:
         a2:7a:c3:5b:a0:c5:4f:c9:84:11:4b:24:01:a1:9c:24:8c:f2:
         90:a5:5e:04:94:1b:6e:27:00:ee:9e:4c:5f:f4:5b:2f:bf:1b:
         f6:e8:b3:d8:fb:ea:b5:9f:71:39:cd:42:38:ab:6d:88:85:3e:
         c0:3f:b2:e4:08:5a:b9:8a:db:6b:9c:02:dc:f7:bb:2f:04:b5:
         f1:11:04:5d:57:4c:0d:40:19:8d:54:56:c1:ad:57:d4:79:37:
         d2:67:d8:c8:0e:9e:69:cf:f1:74:a3:fe:fa:f5:ef:e1:24:e6:
         06:00:10:f7:e1:ae:17:dc:02:b3:15:80:6d:35:76:e7:40:0d:
         5c:43:a6:68:34:b5:b6:c3:5a:0c:69:1c:b7:0a:a9:26:4b:a6:
         aa:81:02:37:a8:ad:15:10:03:55:d9:86:8e:0d:86:1e:68:8f:
         de:c6:68:b6:94:a2:e8:52:58:2d:b9:11:bc:b3:fb:fb:2f:a6:
         88:bb:0b:64:22:5a:16:ea:2f:7b:67:55:31:3d:1c:e0:91:2e:
         74:01:cf:15:e3:a1:14:a5:ba:1f:d9:e9:73:66:a6:74:ef:34:
         04:23:e9:d8:27:64:9f:2b:d6:46:59:96:8a:15:35:9e:e6:54:
         0b:29:98:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org