Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer
File:                     187B3B176F0808984D1B5075CAF3CA9D636EBBD6.cer (raw, json)
Hash identifier:          RI5r3q+uixp7qkqlnOdpCR7oc9mcbcNd9xleB4Gz7Ls=
Subject key identifier:   18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18178164EB25CB9E4CDDE9D7A5E9171A28291933
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Aug 2023 17:50:39 +0000
Certificate not after:    Thu 22 Aug 2024 17:55:39 +0000
Subordinate resources:    AS: 263276
                          IP: 45.178.124.0/22
                          IP: 168.90.224.0/22
                          IP: 168.195.180.0/22
                          IP: 179.108.248.0/21
                          IP: 191.243.16.0/20
                          IP: 2804:1638::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:17:81:64:eb:25:cb:9e:4c:dd:e9:d7:a5:e9:17:1a:28:29:19:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 24 17:50:39 2023 GMT
            Not After : Aug 22 17:55:39 2024 GMT
        Subject: CN=187B3B176F0808984D1B5075CAF3CA9D636EBBD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a1:13:30:14:5f:55:d5:54:d5:86:30:fd:97:
                    b3:20:bf:b0:fc:7d:7c:e2:a6:ee:d0:66:bb:3a:54:
                    52:34:c7:8d:82:36:a8:0f:7b:05:fe:4d:b2:2b:e1:
                    0e:76:eb:72:b8:b1:7e:7a:68:a2:b8:ed:4e:41:b7:
                    db:52:ba:02:8f:56:4f:86:1e:10:a0:35:bd:43:24:
                    ed:fb:53:b3:5d:68:83:93:8f:bd:6c:f3:72:23:11:
                    07:76:56:9f:7c:c7:fa:f2:c2:38:ce:a8:9d:96:ce:
                    b5:34:45:0a:0e:56:20:b2:f5:ae:d2:7e:1d:fc:2d:
                    9f:08:bf:bf:6a:e5:29:aa:e2:35:b4:cd:5c:ba:e8:
                    f8:95:0a:96:18:c5:ee:20:9e:e9:3b:39:d6:08:7f:
                    ed:fe:cd:49:2c:2a:df:c3:76:1d:d9:a7:fc:00:23:
                    b0:16:c2:7a:f8:e9:ef:ce:5f:3d:a5:cb:8f:27:d8:
                    c4:13:f7:36:a3:30:77:48:3d:88:2d:26:d9:ce:e0:
                    1a:de:d7:31:78:8c:9c:ed:d0:0c:57:ad:94:b7:13:
                    22:46:12:e2:fa:e3:33:c3:e2:f2:e5:df:44:71:5e:
                    34:d5:68:f9:ae:0f:70:02:a1:68:fb:07:9f:98:7b:
                    99:c4:14:be:4e:ea:e6:6e:83:05:12:e8:20:e8:1a:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:7B:3B:17:6F:08:08:98:4D:1B:50:75:CA:F3:CA:9D:63:6E:BB:D6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/0/187B3B176F0808984D1B5075CAF3CA9D636EBBD6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.124.0/22
                  168.90.224.0/22
                  168.195.180.0/22
                  179.108.248.0/21
                  191.243.16.0/20
                IPv6:
                  2804:1638::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263276

    Signature Algorithm: sha256WithRSAEncryption
         a1:ae:3e:f1:56:f5:3a:f8:39:c8:fa:1f:31:78:4c:48:1b:d7:
         f2:9e:fc:92:28:99:1a:ac:96:2b:23:be:03:ad:44:4a:9c:e7:
         76:15:b2:d4:a9:72:d0:bf:4e:b5:4e:ac:bd:68:d7:3d:22:be:
         99:3d:9a:f6:06:81:4f:b3:39:d0:80:fe:94:24:65:24:9a:a8:
         cc:30:a2:0b:39:41:07:b8:ec:1b:c6:1f:6e:35:5d:be:8e:5c:
         d3:ae:75:ac:bd:fe:4a:36:88:2f:e7:21:e9:75:eb:f7:ca:ce:
         99:5c:9c:5c:0e:ea:17:e4:20:98:4a:e9:97:92:71:61:dc:0b:
         9c:38:4f:80:f6:e7:31:14:d2:bf:b3:31:45:af:4a:3a:68:14:
         83:1f:c0:d8:ae:d3:4a:43:4e:66:ee:d0:be:2d:27:48:6d:bd:
         ac:70:fe:c6:95:2b:30:9c:86:cc:db:7c:bd:95:74:ed:de:df:
         2d:c6:61:0d:aa:5d:9b:84:39:37:49:e1:d0:f6:6f:8c:1b:ff:
         6e:b3:d9:83:fd:47:87:09:0e:e6:6d:fb:dc:57:80:4b:a1:90:
         8f:49:26:15:66:37:0f:e9:3b:be:93:e5:e5:f5:64:2f:b9:f0:
         c8:f7:4d:81:23:fd:2a:cf:6e:53:68:a8:72:3a:bb:69:df:de:
         7b:3c:67:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org