Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/15EE92A141E9B6AC1BC1D829478907F11E1E4077.cer
File:                     15EE92A141E9B6AC1BC1D829478907F11E1E4077.cer (raw, json)
Hash identifier:          kZ5gmDaNTQaRJZ1z1uBZaUi1Sh8sHaGgpwMnHHlhHjs=
Subject key identifier:   15:EE:92:A1:41:E9:B6:AC:1B:C1:D8:29:47:89:07:F1:1E:1E:40:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       289CC317EFD53364A96B9202DC38DA3F0FCF4D88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/15EE92A141E9B6AC1BC1D829478907F11E1E4077.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 14:48:56 +0000
Certificate not after:    Mon 17 Mar 2025 14:53:56 +0000
Subordinate resources:    AS: 263997
                          IP: 143.0.52.0/22
                          IP: 2804:2918::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:9c:c3:17:ef:d5:33:64:a9:6b:92:02:dc:38:da:3f:0f:cf:4d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 14:48:56 2024 GMT
            Not After : Mar 17 14:53:56 2025 GMT
        Subject: CN=15EE92A141E9B6AC1BC1D829478907F11E1E4077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fe:ac:79:31:57:06:88:d9:bc:c9:ef:40:5a:
                    4e:c9:9f:59:ec:0b:03:83:46:b4:8b:6e:13:de:63:
                    67:4d:b3:b5:dd:de:ce:4b:d8:c2:1a:49:d7:7a:43:
                    53:24:e0:09:68:f3:75:bb:94:e2:e8:c5:55:44:6b:
                    44:6b:49:c7:e7:d4:5f:4f:9a:fd:07:37:6c:1e:fd:
                    93:0d:d7:c6:e5:6c:6a:6d:17:6c:d1:d0:78:52:2b:
                    ef:c9:39:fd:72:27:97:41:58:c2:77:8b:cd:05:52:
                    a5:e1:d1:bf:d9:d8:6f:43:d3:a6:89:dc:e7:4d:a7:
                    d3:a5:76:ea:aa:d9:9a:8e:3f:a0:a7:56:b8:71:e9:
                    a5:df:10:2c:c2:33:94:54:db:46:7d:55:5f:ba:e4:
                    3e:91:c7:bf:3a:43:4a:7a:94:db:a2:2c:c2:fd:2c:
                    9d:51:b3:a3:ed:b2:6d:07:48:6f:84:3c:a4:8d:12:
                    a1:fb:d3:05:40:de:14:dc:04:1c:c2:81:3e:fd:35:
                    54:44:a4:3d:30:1b:4c:5d:48:f2:b2:2f:83:d0:7d:
                    e7:6b:72:21:09:34:b8:da:08:d5:5b:72:5a:d3:03:
                    5c:a5:89:06:3d:df:d3:cf:80:35:80:17:4c:97:a7:
                    4b:63:bd:d7:fe:c5:21:f4:70:cc:ed:37:c5:f0:1c:
                    fc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:EE:92:A1:41:E9:B6:AC:1B:C1:D8:29:47:89:07:F1:1E:1E:40:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Gnt2oBFw1nkj6p3pEKWKzFXJ8XnpThdftjJaKn9PUVd/0/15EE92A141E9B6AC1BC1D829478907F11E1E4077.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.52.0/22
                IPv6:
                  2804:2918::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263997

    Signature Algorithm: sha256WithRSAEncryption
         53:2b:b7:7a:cd:82:9a:80:1c:24:2e:1b:27:f6:bc:a5:83:fc:
         96:ee:7f:2c:25:3d:34:f6:9e:de:47:6c:d8:04:fc:41:4b:29:
         f8:3f:a8:dd:68:d8:f6:47:fd:51:08:ff:2d:1f:2e:ca:30:f3:
         1b:31:b0:e5:60:c9:61:d9:fa:93:f1:c9:3d:07:94:03:6a:26:
         73:58:48:9b:c2:65:1a:f0:f0:7b:5f:a3:4c:f4:40:93:7e:cd:
         6c:92:27:c6:cd:2d:d9:ec:da:fe:f6:05:99:0b:39:e0:8d:7b:
         c1:18:46:79:71:fa:d2:89:4e:89:75:9c:b9:06:5d:e9:61:4b:
         e3:92:3b:fe:78:2c:2b:c3:3a:7a:2f:63:f8:ea:3c:67:ad:e7:
         3f:ac:dd:de:7b:39:b8:28:01:74:cd:77:8b:cb:a5:79:4b:39:
         52:89:d4:85:bb:e6:c1:25:5e:48:07:2a:29:b5:80:52:cf:b8:
         c2:ac:9e:88:42:2f:88:45:ab:5c:96:80:a8:0e:11:33:82:c9:
         51:68:06:96:05:ff:47:9f:9e:e3:bf:c5:26:ba:2f:f1:cd:f4:
         46:25:e1:65:33:5b:60:73:22:93:78:73:3c:2e:7b:6a:a6:89:
         b7:9c:69:bc:2f:e9:1c:a6:d6:95:25:84:1c:89:01:9a:91:f1:
         40:a1:32:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org