Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.cer
File:                     15889C5162837021C59BA680CF94CDC5D5DB8D43.cer (raw, json)
Hash identifier:          0VJvf61eLDW0h81OMOICYgW8+Am0ap59IlYYhau80xI=
Subject key identifier:   15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       79BA15F4FCBFED43769C33B178426DB7DA721B6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 14:48:09 +0000
Certificate not after:    Tue 09 Jul 2024 14:53:09 +0000
Subordinate resources:    AS: 270553
                          IP: 189.85.108.0/22
                          IP: 2804:6dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ba:15:f4:fc:bf:ed:43:76:9c:33:b1:78:42:6d:b7:da:72:1b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 11 14:48:09 2023 GMT
            Not After : Jul  9 14:53:09 2024 GMT
        Subject: CN=15889C5162837021C59BA680CF94CDC5D5DB8D43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:f7:3d:69:bd:62:a9:35:5b:fd:f9:da:5d:
                    96:72:13:b5:02:27:d3:91:fb:4a:fe:af:a2:d8:0c:
                    dd:8e:17:e9:c2:ac:36:ea:f3:9d:ef:7f:d6:59:8b:
                    1f:16:9b:80:a2:d0:82:ca:62:0c:a6:4d:c2:e2:ee:
                    d6:2a:c5:42:51:c2:0b:4d:27:6e:0f:c7:26:4f:86:
                    c7:b8:7c:50:af:45:24:03:dc:9c:49:bd:ab:4c:c4:
                    fe:eb:17:50:82:0e:28:f7:65:37:99:e6:5c:d6:d8:
                    31:d9:5c:29:40:58:89:4f:97:f8:a3:03:22:29:fb:
                    3e:b0:84:2b:42:6b:dd:d7:84:73:53:85:ca:a0:68:
                    09:73:06:6e:2d:7e:12:e5:6f:ee:24:65:ce:0e:21:
                    3e:e7:7e:c6:fa:3f:01:74:08:bc:9b:13:c9:8d:c5:
                    f0:5e:0b:90:c2:c2:19:7d:1b:f9:86:d5:6b:f3:f6:
                    3b:09:09:e4:90:d7:5a:97:75:51:4b:92:71:cc:df:
                    77:02:56:92:36:64:80:07:7a:26:63:3c:2f:73:66:
                    10:da:76:da:6a:ec:d0:2f:cf:4c:d8:52:36:c8:3c:
                    fe:8c:63:e3:e1:3f:a7:82:37:0f:2f:e3:52:4e:4a:
                    28:d8:82:a5:36:57:fe:5d:79:11:c5:94:25:2f:42:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:88:9C:51:62:83:70:21:C5:9B:A6:80:CF:94:CD:C5:D5:DB:8D:43
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gva1RNWLQZKX2mKGX3ABNzDf2GUEmHtudn8iaAwPJ59b/0/15889C5162837021C59BA680CF94CDC5D5DB8D43.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.108.0/22
                IPv6:
                  2804:6dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270553

    Signature Algorithm: sha256WithRSAEncryption
         58:63:77:d9:02:04:58:83:63:83:40:8a:db:e7:14:35:61:e1:
         fc:30:07:3d:b7:65:31:84:e4:a0:a1:b4:3f:05:c7:e1:5c:46:
         b6:35:bb:b6:39:42:b6:70:b8:b0:6a:d4:88:ec:3c:f4:76:09:
         57:a2:90:3b:4f:e8:08:c4:f3:a7:0b:ed:32:59:bb:e2:b4:6a:
         b8:61:70:84:d2:49:b9:7f:a0:d9:60:bc:09:01:1a:2b:a5:67:
         82:8d:33:6f:d3:d3:7a:c6:3a:55:d1:0c:5b:6a:26:c4:54:09:
         aa:7a:91:82:48:63:32:42:87:5b:e4:56:fc:86:0c:ec:a6:50:
         64:db:07:9e:17:0b:d2:f7:b2:a7:f4:af:80:2f:e6:ee:87:29:
         47:a5:8d:7f:8e:0c:6d:f9:a8:c3:5b:83:14:54:e7:61:6d:de:
         ad:30:09:11:0c:29:b3:78:15:3f:23:cd:38:ca:2c:8d:f6:d5:
         24:85:aa:40:ac:e0:26:f6:ff:df:e3:bf:8b:26:8a:ff:4e:80:
         78:29:cf:47:d4:1d:ea:9b:0c:84:5d:73:7d:7f:65:f0:4d:fe:
         b3:60:36:8d:32:38:f1:08:32:c7:82:40:00:db:3b:84:74:21:
         5a:78:ff:0c:c6:f4:06:24:88:2a:bb:5b:f0:60:82:f2:3f:13:
         37:85:34:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org