Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/174A9029B48A456DA6EB93EC88CBB00378817B71.cer
File:                     174A9029B48A456DA6EB93EC88CBB00378817B71.cer (raw, json)
Hash identifier:          SvcnVwcme/KWzlFz9j9iQdG3oYTwKAxudfg6A20a9eo=
Subject key identifier:   17:4A:90:29:B4:8A:45:6D:A6:EB:93:EC:88:CB:B0:03:78:81:7B:71
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1541E02CC2CCA6ED5568111DB136D665F62442D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DrX6ardZJH3zD3sYg1L4Eis9cJJiffYsfok1Ksv4Jb3f/0/174A9029B48A456DA6EB93EC88CBB00378817B71.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DrX6ardZJH3zD3sYg1L4Eis9cJJiffYsfok1Ksv4Jb3f/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 30 Jan 2023 15:47:37 +0000
Certificate not after:    Mon 29 Jan 2024 15:52:37 +0000
Subordinate resources:    AS: 263260
                          IP: 189.84.64.0/20
                          IP: 2804:17f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:41:e0:2c:c2:cc:a6:ed:55:68:11:1d:b1:36:d6:65:f6:24:42:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 30 15:47:37 2023 GMT
            Not After : Jan 29 15:52:37 2024 GMT
        Subject: CN=174A9029B48A456DA6EB93EC88CBB00378817B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:98:c2:f4:3f:9b:1d:e2:1f:7e:e4:8f:b3:
                    ee:c5:8c:6f:59:39:8e:16:17:ff:df:61:bd:d7:64:
                    2a:07:f7:31:1d:ac:e2:fc:41:e8:cb:f9:81:5d:34:
                    2b:77:91:fd:a8:31:55:7b:5c:4c:eb:c6:bf:86:5c:
                    1c:94:aa:3b:c3:74:8b:b4:c6:ca:1d:12:21:37:be:
                    0b:d0:89:f4:7d:c1:c6:7a:f7:64:9d:a0:e3:ce:7a:
                    ab:46:46:62:88:7e:90:cc:e3:f1:93:e6:ed:0a:e2:
                    60:22:6c:d0:24:0f:00:2b:4e:76:84:f3:45:08:84:
                    82:95:b0:ac:54:dd:99:bc:84:86:dc:19:73:37:6c:
                    c7:60:db:52:39:6c:9a:82:17:44:5c:3c:e1:f9:8f:
                    42:a5:0e:23:a7:64:9f:87:41:9a:e3:d3:0a:58:1c:
                    e0:84:fd:0f:78:ac:8f:36:ad:c8:6d:47:0a:3a:a1:
                    e5:23:a6:a2:2a:be:9b:53:8a:08:26:f1:c9:13:6d:
                    4e:7d:16:6f:e9:10:e3:61:fc:81:27:07:5d:a9:a5:
                    fc:09:72:97:56:ee:bd:c3:0f:61:d3:15:c2:de:97:
                    68:b6:60:51:47:22:c2:b6:73:bb:6e:a7:96:0e:ba:
                    b2:5b:60:9a:f7:e2:3f:c8:05:11:76:d3:6d:18:ed:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:4A:90:29:B4:8A:45:6D:A6:EB:93:EC:88:CB:B0:03:78:81:7B:71
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DrX6ardZJH3zD3sYg1L4Eis9cJJiffYsfok1Ksv4Jb3f/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DrX6ardZJH3zD3sYg1L4Eis9cJJiffYsfok1Ksv4Jb3f/0/174A9029B48A456DA6EB93EC88CBB00378817B71.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.64.0/20
                IPv6:
                  2804:17f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263260

    Signature Algorithm: sha256WithRSAEncryption
         5b:90:71:c6:fb:88:4f:e6:0a:66:59:96:09:7c:14:42:f5:c7:
         08:2d:49:08:bb:ff:47:ec:4a:5e:bd:9a:76:07:e9:d9:cf:bd:
         90:e9:46:4a:ea:f9:a1:49:38:48:2a:9a:f3:1b:04:f2:f5:69:
         76:da:e9:2f:47:ca:0f:88:87:fd:a9:3c:f1:fd:bb:07:27:c4:
         91:9c:76:e6:53:74:d0:77:47:69:fd:67:23:ec:5e:a1:a7:38:
         2f:40:54:42:80:9a:c5:12:39:04:3f:02:d5:81:da:62:3a:13:
         a1:e6:bb:0e:91:e9:e1:88:3b:de:97:a6:19:f9:a8:02:1d:56:
         b8:6e:b4:9d:13:62:81:c6:20:61:60:04:ad:dc:aa:0b:db:4f:
         5f:f3:a9:5d:b7:ad:b1:2e:8a:af:3e:5b:e4:ec:c6:fd:a5:f6:
         9c:ee:09:57:d6:70:b3:42:87:31:86:66:40:02:57:a2:90:13:
         c6:9c:7c:02:3e:7f:36:9c:c5:f6:91:bf:2f:40:22:68:7f:43:
         39:29:1f:01:34:23:7d:b4:a8:7d:18:2d:ec:a0:59:b4:43:22:
         4b:3d:5d:fc:9c:10:e4:de:13:b5:26:e5:67:5f:23:cb:c1:1d:
         5f:82:4e:5d:38:ed:f3:84:1b:33:9f:a6:a4:ac:a1:c5:58:ed:
         63:67:83:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org