Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1890D320CAFEB0247AAACAFBABE135F55DC3D844.cer
File:                     1890D320CAFEB0247AAACAFBABE135F55DC3D844.cer (raw, json)
Hash identifier:          G463gcSDkQL8mmpvytEysMrXZIpe0UYkq0FO6eOJkW8=
Subject key identifier:   18:90:D3:20:CA:FE:B0:24:7A:AA:CA:FB:AB:E1:35:F5:5D:C3:D8:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       490372FDB5CFA300947C2D6DC7E57F448BE4AD52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/1890D320CAFEB0247AAACAFBABE135F55DC3D844.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 20:27:54 +0000
Certificate not after:    Thu 25 Jul 2024 20:32:54 +0000
Subordinate resources:    AS: 270810
                          IP: 200.219.16.0/22
                          IP: 2804:71c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:03:72:fd:b5:cf:a3:00:94:7c:2d:6d:c7:e5:7f:44:8b:e4:ad:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 20:27:54 2023 GMT
            Not After : Jul 25 20:32:54 2024 GMT
        Subject: CN=1890D320CAFEB0247AAACAFBABE135F55DC3D844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:28:be:23:86:78:59:70:d4:6c:e1:bd:1b:b3:
                    fc:89:11:b2:6a:54:1f:ef:05:6c:35:67:7f:fa:0c:
                    58:87:9c:15:38:87:6f:be:ba:ec:7a:7f:00:ae:7e:
                    37:11:6a:21:b2:d3:b4:89:61:79:d9:14:e7:5b:f8:
                    62:ec:78:fd:ca:6f:1c:01:51:dc:47:63:ba:84:3e:
                    95:9e:01:29:d0:87:b1:8a:ef:25:ee:af:15:e8:67:
                    59:f1:9a:3b:90:12:18:ea:60:54:9a:60:eb:78:d8:
                    de:2a:ed:dd:22:bd:a7:88:0c:9e:be:2f:ac:90:5c:
                    81:99:8e:1e:7b:aa:71:9c:38:54:f5:cf:95:9d:17:
                    9e:4d:7a:2e:a7:d0:ec:10:62:c1:e2:1f:b2:0b:2a:
                    38:30:e9:49:26:2b:d9:a9:49:d2:fa:df:a8:e6:98:
                    ed:4c:03:07:8b:5f:11:56:eb:6d:db:b5:21:61:e6:
                    9d:43:cb:8a:3c:28:07:1d:21:be:3d:a9:50:35:b2:
                    dd:c4:42:2a:eb:bf:05:42:da:0a:d7:95:34:83:a6:
                    f9:20:c4:b1:55:b0:00:fb:3a:35:6f:b0:59:0a:50:
                    2e:47:e8:76:bf:40:26:34:74:12:61:5a:cf:b3:fd:
                    ba:47:35:46:e9:6a:98:f1:e8:5c:44:b3:fb:3c:80:
                    a7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:90:D3:20:CA:FE:B0:24:7A:AA:CA:FB:AB:E1:35:F5:5D:C3:D8:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/0/1890D320CAFEB0247AAACAFBABE135F55DC3D844.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.16.0/22
                IPv6:
                  2804:71c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270810

    Signature Algorithm: sha256WithRSAEncryption
         09:76:a9:f5:78:e1:2f:b5:a3:f1:f2:76:2e:fa:73:94:bb:a1:
         24:df:9c:97:3b:54:cf:59:0c:db:27:ce:08:06:3d:dc:ab:6b:
         2b:9b:9d:54:22:65:64:f5:fc:d4:36:38:84:85:69:87:71:d1:
         3f:87:40:ba:e2:cc:85:a2:55:ce:0c:77:f9:95:a7:eb:bd:7c:
         93:97:3b:e5:fd:83:d3:1d:e3:c0:fe:91:1c:de:a7:90:b1:f6:
         24:9e:9e:d3:7e:43:7d:0e:98:69:a4:2d:04:5d:66:48:a3:f5:
         53:87:d5:0f:aa:48:f9:27:5c:ec:a8:b7:a4:b5:d7:62:4a:42:
         38:d2:69:da:99:b5:52:87:ea:e2:ba:12:9d:7c:86:69:f4:27:
         8f:2f:66:54:e9:e2:fc:bd:92:60:74:fe:96:ec:cd:40:af:8c:
         03:a9:b2:ca:8e:f6:63:28:db:4c:f9:69:ba:5f:a5:bc:b7:4d:
         24:22:07:71:56:c3:ca:df:1c:5b:ce:ec:c2:21:ae:58:6f:98:
         b3:05:3e:bf:f3:ed:2a:a7:44:db:b8:e8:2b:fd:15:6d:bf:b2:
         bf:f5:41:59:81:61:93:72:41:25:ed:63:61:05:e7:59:c4:8a:
         43:5d:ae:c9:4b:d2:ff:a6:9c:32:f4:59:a4:fd:94:22:5f:11:
         d3:77:f8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org