Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.cer
File:                     130B968B1EDC329E460C55006CCB5A9D396FEF29.cer (raw, json)
Hash identifier:          0o0+vj1P0fmBoyEYW7X3TS7DHfmfc+SrHN5ao+yR3UM=
Subject key identifier:   13:0B:96:8B:1E:DC:32:9E:46:0C:55:00:6C:CB:5A:9D:39:6F:EF:29
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7280DF16D14079F9B65498F55951FA0FAE6748EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Nov 2023 04:49:55 +0000
Certificate not after:    Wed 06 Nov 2024 04:54:55 +0000
Subordinate resources:    AS: 264392
                          IP: 131.161.188.0/22
                          IP: 2804:1dc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:80:df:16:d1:40:79:f9:b6:54:98:f5:59:51:fa:0f:ae:67:48:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 04:49:55 2023 GMT
            Not After : Nov  6 04:54:55 2024 GMT
        Subject: CN=130B968B1EDC329E460C55006CCB5A9D396FEF29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:2b:d4:d2:d2:68:92:f9:75:81:e1:96:fe:
                    cb:e6:c4:3b:5e:70:fd:d5:0f:27:c0:25:72:60:6c:
                    d0:9c:97:a0:00:ca:e6:90:5e:cd:7b:d6:14:6d:7c:
                    c9:a5:e8:94:64:1e:dc:99:ef:d2:79:1d:1c:86:16:
                    ed:31:7f:c1:c8:49:06:6e:4a:87:74:f4:39:99:6f:
                    34:33:66:f3:79:5e:66:20:7b:ce:91:ca:d1:d9:8d:
                    56:17:cb:9b:69:7e:ab:45:36:93:06:48:8b:80:ad:
                    79:09:e3:bf:92:80:c7:4a:e3:e7:3b:a4:07:75:90:
                    64:b0:03:0b:de:d5:f7:a0:f8:94:00:96:0f:46:bc:
                    1d:f6:f9:a1:ef:56:0b:4f:7e:16:cd:c4:d4:2d:19:
                    27:8d:f5:51:2b:2d:6c:b2:03:5f:9f:bb:47:99:66:
                    8f:88:3a:2b:3a:16:f7:33:de:9c:e9:f2:55:5b:b8:
                    f7:8c:ec:3c:18:7c:1d:97:f3:f1:8d:7e:26:57:a7:
                    4f:6f:e3:a2:56:cb:eb:5f:69:8f:57:6e:f5:e2:7a:
                    9e:e4:af:ed:f3:2d:11:de:23:be:03:ac:da:91:99:
                    c4:be:97:93:24:d4:e1:b2:91:00:a1:13:2e:dd:11:
                    10:ce:5e:4c:94:b1:78:ed:c4:55:c1:58:91:a9:13:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:0B:96:8B:1E:DC:32:9E:46:0C:55:00:6C:CB:5A:9D:39:6F:EF:29
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7unTVBznm2HuHMpWg8hSERgqidfLje83NXGvZwd66zDF/0/130B968B1EDC329E460C55006CCB5A9D396FEF29.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.188.0/22
                IPv6:
                  2804:1dc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264392

    Signature Algorithm: sha256WithRSAEncryption
         15:09:53:eb:40:a9:2d:29:14:77:86:3a:cd:c8:2b:7c:bf:b9:
         4e:5e:c9:5f:af:23:2b:83:f7:52:d6:c9:1e:ba:75:88:40:b8:
         2b:3a:fb:e6:a1:f9:47:0e:f2:fd:99:c1:06:d9:a4:cd:a1:c2:
         64:37:ae:36:7e:db:fc:2a:1a:9f:8d:7f:e6:10:f8:6c:ce:18:
         38:4e:4f:dd:ce:ee:e8:7e:75:09:7a:0a:ac:38:6a:5a:76:2b:
         21:32:ca:55:56:e8:43:e7:e7:72:ac:55:d7:bf:b6:33:9a:2c:
         92:ef:ee:ad:3d:24:22:c0:da:f4:0e:b6:6d:0e:81:d6:c8:9a:
         c4:ac:74:a0:c2:a9:a0:65:0b:37:2b:7d:97:80:6f:1f:7f:91:
         bd:86:1e:f1:90:95:2f:37:4e:f6:11:f6:71:50:50:5d:cd:67:
         1e:51:f4:77:73:b1:96:80:d0:3b:ef:d8:18:fc:4a:06:1c:a7:
         e9:b9:8c:90:08:a6:bd:88:aa:aa:cf:9f:cd:b2:ca:b3:c7:76:
         e9:a6:ec:25:d4:ce:d1:dc:2c:77:7f:6d:bb:e3:41:34:43:5f:
         bd:c9:58:da:14:6a:92:0e:63:16:d2:aa:76:73:2f:b7:c4:69:
         2d:e9:38:80:a4:9c:ab:99:67:2c:08:a4:dc:fd:b9:7e:a1:8f:
         87:0d:6c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org