Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/15CD31C95837175C2DBB3682303E725F3CB40FF2.cer
File:                     15CD31C95837175C2DBB3682303E725F3CB40FF2.cer (raw, json)
Hash identifier:          vIlQCxlAMPktWuzZgKZuU6Iw2RR056AWhDDdC1TumkA=
Subject key identifier:   15:CD:31:C9:58:37:17:5C:2D:BB:36:82:30:3E:72:5F:3C:B4:0F:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       14747CC5EF0D6899A7AA90D3244BB06EB4EB1470
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/0/15CD31C95837175C2DBB3682303E725F3CB40FF2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 13:11:46 +0000
Certificate not after:    Thu 20 Jul 2023 13:16:46 +0000
Subordinate resources:    AS: 271005
                          IP: 190.124.52.0/22
                          IP: 2804:74d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:74:7c:c5:ef:0d:68:99:a7:aa:90:d3:24:4b:b0:6e:b4:eb:14:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 13:11:46 2022 GMT
            Not After : Jul 20 13:16:46 2023 GMT
        Subject: CN=15CD31C95837175C2DBB3682303E725F3CB40FF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:50:ca:af:15:ac:0f:81:67:09:da:72:45:6d:
                    2b:ff:cc:7a:bd:9a:5c:33:fc:d0:26:a2:b8:b3:17:
                    0e:e6:77:21:74:ce:fb:5e:58:34:35:ed:cd:e6:a1:
                    12:58:fe:22:d0:c3:d3:07:d4:c3:5f:e2:e3:6e:f3:
                    44:21:2d:c6:ba:74:4e:e8:1c:67:fb:3d:15:f5:11:
                    b5:16:23:b0:9b:9f:a0:ca:7e:8a:9f:4a:6f:c4:ac:
                    f2:4f:ed:eb:c4:7c:14:be:7d:44:42:c7:be:bd:a6:
                    63:df:af:ba:e5:80:a0:68:db:f5:31:be:ac:8c:54:
                    43:b3:f2:ea:ba:9f:52:38:e3:79:27:2b:77:84:53:
                    56:2b:b3:39:de:cb:c8:48:bb:6d:bc:12:ee:80:23:
                    4d:7a:c5:bb:6b:bd:7a:1e:51:7c:48:68:07:ee:e6:
                    9d:2c:eb:61:32:d1:3a:b2:cd:e7:eb:79:5c:7a:53:
                    c3:a3:f0:82:66:2b:07:d9:45:da:64:72:dc:34:5e:
                    d1:ec:ae:cd:86:8c:f3:d0:9e:70:ad:22:12:32:c5:
                    a9:5a:83:da:3a:0f:8e:b8:51:11:0b:03:bd:33:e8:
                    47:8f:08:c7:6e:64:99:00:c7:25:b5:3a:95:0e:99:
                    c0:60:2f:6e:00:dd:e6:f6:84:b3:61:d7:8c:25:e5:
                    a4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:CD:31:C9:58:37:17:5C:2D:BB:36:82:30:3E:72:5F:3C:B4:0F:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/0/15CD31C95837175C2DBB3682303E725F3CB40FF2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.52.0/22
                IPv6:
                  2804:74d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271005

    Signature Algorithm: sha256WithRSAEncryption
         0a:95:d5:fb:82:14:87:70:ab:b4:7c:9b:6f:39:26:86:d1:4b:
         10:ed:29:23:42:40:7a:4c:80:5a:35:2d:c7:ff:4a:14:77:0a:
         87:06:60:e7:a9:1b:19:9c:af:e6:78:04:9c:f9:27:1e:b8:68:
         de:ca:c2:42:dd:8f:57:44:c0:9e:3f:dc:c2:6d:2d:52:f1:98:
         68:1a:00:e6:1e:3a:dd:a8:22:75:4e:33:4f:db:f5:13:cd:38:
         a2:c0:f6:54:37:b8:ed:b8:0c:f4:d7:f5:dd:21:66:93:d3:9d:
         31:e3:fa:4d:0a:05:fd:b7:6f:89:ed:95:7a:02:73:4e:ea:07:
         ce:4c:6f:af:b0:72:b3:a5:cd:6b:21:7b:37:30:18:77:5a:71:
         bd:44:49:67:6e:c4:3f:9d:ad:9e:4c:82:0d:ba:98:d8:9b:de:
         e6:2a:ed:35:f7:ea:f9:48:a6:51:c9:e6:9a:72:1d:14:0e:c4:
         2f:b1:4f:27:40:99:f5:61:8c:04:ac:17:86:87:eb:76:57:be:
         c5:01:f9:22:de:5c:a9:c3:be:ed:f3:5e:ee:36:8b:c5:33:41:
         26:3e:d5:9e:c9:2d:1f:6f:30:22:7a:ed:2b:f0:2c:aa:35:26:
         6c:5e:ac:45:e0:ff:2d:9c:10:a6:bf:fd:78:3a:45:f9:e0:9c:
         76:2c:03:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org