Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/18E6C7585269031BD50CD626D9E6378F46AB219D.cer
File:                     18E6C7585269031BD50CD626D9E6378F46AB219D.cer (raw, json)
Hash identifier:          pyXuklH9E41Ci4hqYGkB7pSlWXpIgMddRPiyAWf0F3Q=
Subject key identifier:   18:E6:C7:58:52:69:03:1B:D5:0C:D6:26:D9:E6:37:8F:46:AB:21:9D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D25614792FDD4036EC3A333968FA6C53063F30B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/2/18E6C7585269031BD50CD626D9E6378F46AB219D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/2
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 16:25:09 +0000
Certificate not after:    Fri 07 Mar 2025 16:30:09 +0000
Subordinate resources:    AS: 263567
                          IP: 179.109.32.0/20
                          IP: 2804:f24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:25:61:47:92:fd:d4:03:6e:c3:a3:33:96:8f:a6:c5:30:63:f3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 16:25:09 2024 GMT
            Not After : Mar  7 16:30:09 2025 GMT
        Subject: CN=18E6C7585269031BD50CD626D9E6378F46AB219D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:f4:2f:1e:1d:b1:92:94:ce:13:2f:7c:52:
                    a3:84:e3:77:78:28:da:19:e7:e5:60:eb:6d:a0:0f:
                    ab:7f:a6:81:b7:c2:b3:81:41:fb:57:ef:0c:7d:3d:
                    1a:ae:27:61:40:58:c6:6a:66:a5:90:03:f2:a5:4f:
                    7f:17:56:30:c4:c7:35:6c:cc:69:f2:80:99:1d:63:
                    a4:40:29:25:08:ff:26:e9:8d:ce:ec:85:6e:f7:7e:
                    ce:82:97:86:ea:11:ce:de:1f:4b:ed:1a:85:73:a5:
                    17:8d:ef:bb:30:2e:80:62:ca:4f:65:24:0a:ee:c9:
                    60:31:42:c0:43:90:60:ef:68:70:5d:12:c5:84:97:
                    15:66:3c:76:92:67:b3:cb:78:9a:a3:c6:66:32:80:
                    4b:4b:c9:fb:67:20:24:d1:50:ab:81:df:8a:f4:97:
                    bc:d1:c8:1b:ff:59:4d:77:e9:13:39:0c:65:9a:3b:
                    85:c3:79:f4:a7:ae:9a:91:e5:87:31:73:12:08:be:
                    12:18:de:23:20:95:db:6f:4e:ac:2c:08:03:1d:d6:
                    f4:5e:a7:44:45:6f:a0:a8:3b:8a:20:95:a2:4c:b9:
                    47:65:2b:8c:04:19:99:59:05:92:80:e6:46:5c:b1:
                    4e:66:22:aa:6a:e7:8b:02:9f:a3:72:b8:88:9e:d8:
                    9c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:E6:C7:58:52:69:03:1B:D5:0C:D6:26:D9:E6:37:8F:46:AB:21:9D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/2
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9XpguNBgCvZVJpV3eYaQhLcocKi1VcnJp2AzHgi6NYrA/2/18E6C7585269031BD50CD626D9E6378F46AB219D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.32.0/20
                IPv6:
                  2804:f24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263567

    Signature Algorithm: sha256WithRSAEncryption
         a5:a3:5c:85:63:09:74:71:84:8d:4a:de:fa:f5:1e:3c:de:7b:
         fa:f8:7e:57:f6:f7:2a:b7:b4:cc:81:00:14:bb:ec:c0:07:ec:
         55:dc:0e:8d:38:72:14:13:e2:b8:87:1c:05:48:d6:2e:45:4f:
         2f:70:3b:97:f4:1a:77:19:83:99:b5:dd:1e:86:a1:cc:da:fb:
         3a:da:79:c0:1c:e8:e3:61:ad:65:0d:7d:ab:ed:5a:32:f8:89:
         df:78:f2:0a:bf:c5:61:43:ab:de:c1:69:46:9e:e3:99:3e:a0:
         4a:13:de:2f:18:d9:88:39:da:5f:2d:a5:7d:ec:99:fa:b5:44:
         db:33:bc:1a:d6:36:96:d9:72:c9:47:1b:3c:69:d0:9a:e4:79:
         c2:13:d4:ae:c1:2b:31:2c:1b:29:23:81:65:9d:35:47:7f:83:
         9b:fc:13:b5:b3:dd:25:03:26:d0:14:e0:25:4a:2d:d9:68:11:
         47:03:5e:6a:5d:ec:dc:97:d1:76:d9:00:70:06:38:8a:10:3a:
         b5:23:72:f6:00:e1:87:d7:e8:c5:1c:d2:f4:03:c3:7a:ba:43:
         35:6a:ad:2f:ec:c1:be:7e:44:76:26:cc:64:a2:48:1d:ae:ea:
         e0:36:ad:60:27:57:54:d8:44:f3:47:09:75:4d:0b:f3:32:0e:
         71:5d:f0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org