Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/18F4778CE1BCFFEC495B66B36B0AD084AC04E809.cer
File:                     18F4778CE1BCFFEC495B66B36B0AD084AC04E809.cer (raw, json)
Hash identifier:          YjXhZtD7wANOCS2N+62q3FpSXvhbwfqfgWjLU2pUp2c=
Subject key identifier:   18:F4:77:8C:E1:BC:FF:EC:49:5B:66:B3:6B:0A:D0:84:AC:04:E8:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7FC822BE8C3FAC8F6E4600033B49AB891CC4208F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/18F4778CE1BCFFEC495B66B36B0AD084AC04E809.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jan 2024 14:59:42 +0000
Certificate not after:    Wed 29 Jan 2025 15:04:42 +0000
Subordinate resources:    AS: 52532
                          IP: 179.106.96.0/20
                          IP: 201.49.224.0/20
                          IP: 2804:2d8::/32
                          IP: 2804:df8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c8:22:be:8c:3f:ac:8f:6e:46:00:03:3b:49:ab:89:1c:c4:20:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 14:59:42 2024 GMT
            Not After : Jan 29 15:04:42 2025 GMT
        Subject: CN=18F4778CE1BCFFEC495B66B36B0AD084AC04E809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f3:76:d7:2e:2e:4f:16:34:cd:a5:6c:c6:6a:
                    d4:b1:8b:e7:ac:5a:cb:6c:fa:13:4b:69:fd:76:d5:
                    e8:34:6c:0b:39:12:6b:0e:f8:e5:b0:ac:20:46:50:
                    de:b9:e9:1b:b5:bb:a4:75:94:c9:54:a0:f8:e8:2a:
                    22:7d:fc:4a:25:ac:11:8b:49:fb:d4:6b:29:b9:20:
                    2b:7b:03:6e:2f:a4:55:0c:44:d4:c6:49:13:d7:ca:
                    b0:c0:e4:90:4d:3e:e0:23:ef:35:26:35:c1:74:5d:
                    09:82:07:d6:b8:b7:eb:fa:dc:05:b1:5b:f4:37:c3:
                    81:9b:f9:82:5e:f0:93:44:69:86:74:58:93:89:7a:
                    59:46:c6:0e:ea:6b:88:55:47:3d:5a:71:0e:6b:24:
                    a4:a8:08:6b:9d:b6:d5:6a:ac:8e:32:85:8d:5c:dc:
                    51:ae:3c:15:3a:b6:d7:92:53:1c:aa:2e:28:b7:67:
                    5b:a8:00:64:ce:d1:6a:9a:60:65:b8:97:60:50:87:
                    71:6c:70:1c:9b:e0:d8:2d:84:fc:d0:6a:74:bf:f2:
                    5d:67:93:3a:c5:ba:89:a4:92:ac:3a:e1:d2:54:73:
                    ed:fd:3f:02:98:06:1e:12:26:15:0d:19:57:c4:ef:
                    9e:90:71:1b:23:29:9e:bc:89:60:e9:a5:b5:17:33:
                    d9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:F4:77:8C:E1:BC:FF:EC:49:5B:66:B3:6B:0A:D0:84:AC:04:E8:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Mrei7cs5dYYuqE8WRNZQjqUbDY4ofq3epGtQ9KsNFTo/0/18F4778CE1BCFFEC495B66B36B0AD084AC04E809.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.96.0/20
                  201.49.224.0/20
                IPv6:
                  2804:2d8::/32
                  2804:df8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52532

    Signature Algorithm: sha256WithRSAEncryption
         0d:27:75:b6:34:c3:94:96:e0:db:a9:79:4b:92:75:fe:23:51:
         2f:b2:c5:84:35:3f:4e:72:a5:80:cb:72:2e:90:fd:f2:2c:9e:
         6a:48:e5:25:50:80:f5:91:3d:cd:c7:28:7d:2f:9e:f0:ba:bf:
         26:da:cf:0b:61:21:b7:9d:13:5f:1e:f1:1c:cf:e9:c5:b4:55:
         a1:f8:18:8a:64:9e:22:44:58:9a:92:d2:52:86:fb:a9:f0:ad:
         c0:fb:06:52:9f:d5:9e:f8:06:56:6e:49:68:a4:bf:b5:b8:b0:
         d0:78:8d:65:30:c0:0f:d5:3a:59:74:e7:59:f8:0a:af:c6:4f:
         69:ab:cf:ea:da:29:d5:af:7f:f4:81:0f:51:d1:b6:2f:3b:24:
         c4:71:7e:91:52:fa:2a:b5:2f:35:91:73:9c:14:bb:bd:c0:0a:
         1c:a7:19:4d:52:38:16:ff:71:3d:12:63:33:c9:cd:77:68:25:
         52:27:34:28:e0:11:5c:91:d9:79:8f:d5:7f:56:7d:4b:c5:87:
         67:02:8f:c3:60:7c:ac:53:c0:df:d2:0d:a0:2e:26:66:93:fd:
         e1:af:00:6a:6e:19:ee:0f:f4:ad:3b:70:1e:a7:77:1c:e3:82:
         7e:46:90:57:57:fa:de:2e:18:91:20:d8:d6:ed:1c:42:40:33:
         f8:17:a4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org