Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/13A5EAF78E79BD43FD7B4074AA688398B5272B37.cer
File:                     13A5EAF78E79BD43FD7B4074AA688398B5272B37.cer (raw, json)
Hash identifier:          EdzhvfPdnBYULfWAQUsp82i3asslEZ6qKLx9jJxIMz8=
Subject key identifier:   13:A5:EA:F7:8E:79:BD:43:FD:7B:40:74:AA:68:83:98:B5:27:2B:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F1301A2568673C82D68D5F9B45D9F571EE82474
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/13A5EAF78E79BD43FD7B4074AA688398B5272B37.mft
caRepository:             rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Dec 2023 15:25:09 +0000
Certificate not after:    Fri 13 Dec 2024 15:30:09 +0000
Subordinate resources:    AS: 263390
                          IP: 177.222.176.0/20
                          IP: 2804:157c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:13:01:a2:56:86:73:c8:2d:68:d5:f9:b4:5d:9f:57:1e:e8:24:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 15:25:09 2023 GMT
            Not After : Dec 13 15:30:09 2024 GMT
        Subject: CN=13A5EAF78E79BD43FD7B4074AA688398B5272B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7e:0e:23:4e:d3:0b:04:e9:59:7b:68:d7:06:
                    53:89:c8:95:a1:81:fa:b5:db:20:df:01:1e:48:52:
                    c6:b3:2b:92:dd:8f:47:32:ef:59:ac:fb:00:00:90:
                    d7:50:ae:40:67:11:ee:81:8e:61:d6:6f:51:35:40:
                    eb:0d:6e:b1:25:b4:b3:50:4b:66:ad:10:84:57:8f:
                    5e:cb:86:bf:3b:37:c2:32:8a:6c:fb:4f:72:66:39:
                    8f:82:94:a9:de:eb:1b:3f:14:e9:7b:62:5f:eb:b7:
                    22:5d:92:bb:3c:33:a4:ef:32:98:03:13:78:d0:5c:
                    4d:5b:f1:34:05:56:8b:7f:8e:db:67:b3:5f:9c:ea:
                    a4:ad:bc:e2:99:64:03:d8:78:80:05:59:62:0d:2a:
                    3d:69:a3:0d:e7:9a:6e:b1:46:04:d8:8c:29:0d:d6:
                    f9:c6:81:f7:59:43:3f:ba:65:0e:13:5c:12:22:cd:
                    a0:02:67:1d:d6:50:a8:6e:63:50:8a:52:b8:50:83:
                    b7:4a:84:94:b2:1b:24:b0:9c:f4:b8:9d:ca:3a:a4:
                    0e:30:6b:26:72:34:35:8e:40:01:df:d1:6a:6d:b2:
                    80:f5:4c:4e:3a:2d:3b:88:70:9a:f4:52:f6:e2:da:
                    13:37:25:0f:8b:b5:e6:d9:a7:e5:94:eb:5b:a2:b4:
                    8c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:A5:EA:F7:8E:79:BD:43:FD:7B:40:74:AA:68:83:98:B5:27:2B:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/grwLJneaer6puWPkwg916YnJ9K9rfJ5PeWiAHUxCKeb/0/13A5EAF78E79BD43FD7B4074AA688398B5272B37.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.222.176.0/20
                IPv6:
                  2804:157c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263390

    Signature Algorithm: sha256WithRSAEncryption
         87:c1:0e:6c:52:5c:5a:4c:12:54:aa:db:17:76:53:8d:6f:9f:
         26:be:2e:af:9a:a7:20:1d:a2:50:80:b9:4a:a9:cf:bc:dd:ae:
         d2:61:d5:17:28:aa:fa:37:28:86:64:23:7c:04:95:cc:d8:bf:
         31:05:59:c8:ff:2a:ce:06:a7:cd:1b:c9:64:3e:78:a2:ff:2c:
         9f:57:f3:1a:fa:d5:64:f3:a4:b5:3e:59:7c:45:4c:e0:15:cb:
         e2:88:0e:fd:56:5c:58:9b:42:0a:0d:2b:54:82:d2:7d:d7:6f:
         61:f7:fe:b6:da:f4:d9:72:6d:b9:4e:99:2c:2e:99:70:ef:29:
         73:70:cc:41:b0:3b:59:19:60:a4:96:3d:5b:6c:28:3d:80:2d:
         28:f9:be:5f:f0:29:72:90:9e:0c:53:cb:fa:a6:49:91:b4:02:
         15:3a:dd:2b:ed:e1:b7:9a:2d:08:4d:33:48:29:5d:0b:27:a7:
         fa:e1:bf:45:9e:42:05:9c:b2:fe:e9:c9:66:32:1e:06:62:f8:
         26:99:d0:c9:fc:ff:21:57:cd:1d:12:21:74:77:cc:cd:b9:c7:
         d0:1b:54:04:01:00:31:18:2f:7b:ac:db:2c:ee:70:c6:44:61:
         dd:3c:fd:4e:b0:62:95:fb:28:75:58:df:10:ea:65:9b:27:45:
         ab:f0:f3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org