Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1911402BB7B065DBFE181AABD91C2DCA5DD1A183.cer
File:                     1911402BB7B065DBFE181AABD91C2DCA5DD1A183.cer (raw, json)
Hash identifier:          RTPfWdW3wdTj3AyXo6fHY4Ctqj1eKbcXwiv3YGzciag=
Subject key identifier:   19:11:40:2B:B7:B0:65:DB:FE:18:1A:AB:D9:1C:2D:CA:5D:D1:A1:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       692C8E1D68FEFC7CFB286E1D809018A5186F0261
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/1911402BB7B065DBFE181AABD91C2DCA5DD1A183.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 17:10:23 +0000
Certificate not after:    Fri 01 Nov 2024 17:15:23 +0000
Subordinate resources:    AS: 268080
                          IP: 45.169.4.0/22
                          IP: 2804:57b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2c:8e:1d:68:fe:fc:7c:fb:28:6e:1d:80:90:18:a5:18:6f:02:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 17:10:23 2023 GMT
            Not After : Nov  1 17:15:23 2024 GMT
        Subject: CN=1911402BB7B065DBFE181AABD91C2DCA5DD1A183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2e:dd:e0:18:16:b4:05:1f:7e:c1:80:ec:3c:
                    e0:7e:d1:94:c2:c6:89:29:b8:f0:18:95:01:96:b8:
                    9f:62:8b:c1:24:ad:cd:b2:cb:49:3c:c9:aa:b8:98:
                    b8:23:11:87:cb:48:d1:db:50:cc:f2:08:ea:bc:a8:
                    50:71:5f:e7:8d:5f:3f:1f:b4:69:cd:93:4b:62:74:
                    72:ef:be:83:de:f5:4d:64:51:19:01:bd:a3:96:3e:
                    59:7c:a6:c0:e7:0b:33:be:28:17:21:dc:81:9d:96:
                    1d:05:9f:a4:19:8d:6e:81:25:b8:b0:b5:b2:30:2f:
                    99:4c:83:d6:77:0f:b4:df:81:8d:d9:59:1c:a8:b5:
                    83:84:4d:f2:4d:d3:e5:05:99:37:26:91:91:9c:30:
                    30:53:87:32:81:b2:5a:68:cf:ad:1f:73:a7:1d:9d:
                    56:47:f3:b6:13:ea:16:f6:4e:42:7c:88:c0:c2:0f:
                    30:e6:f6:e7:53:36:20:5e:69:47:bc:b7:1b:13:cd:
                    61:62:0d:6e:83:26:39:d3:f1:b9:48:70:bd:20:58:
                    27:31:4e:c2:fd:2c:48:ba:2b:61:66:4c:1a:d6:cd:
                    b0:b2:cc:5d:38:92:cc:b4:10:3b:eb:6d:bc:c1:f4:
                    90:69:46:50:37:4f:be:fc:0e:13:ff:4f:99:b2:a7:
                    12:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:11:40:2B:B7:B0:65:DB:FE:18:1A:AB:D9:1C:2D:CA:5D:D1:A1:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/1911402BB7B065DBFE181AABD91C2DCA5DD1A183.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.4.0/22
                IPv6:
                  2804:57b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268080

    Signature Algorithm: sha256WithRSAEncryption
         67:ac:5c:70:ca:0a:69:f2:13:c0:ea:63:d5:7b:61:2a:16:2b:
         fe:87:92:27:ad:d5:7c:1f:2a:b8:42:6a:07:2e:5f:2f:61:2a:
         25:07:5c:39:be:76:92:89:52:da:ea:54:96:63:be:97:c8:af:
         31:5e:d5:ac:87:7a:c0:60:86:d0:8e:7f:19:13:de:a9:8b:3a:
         d9:85:5f:ec:e4:62:2a:f0:ff:e1:5a:3e:3e:9a:f7:c3:e8:2e:
         ad:7f:db:43:61:57:cc:80:10:ad:61:84:0e:1b:d0:1e:63:fb:
         a5:c8:06:2f:b2:1d:b8:f1:9e:a1:b7:30:9d:83:46:06:fa:bb:
         0a:6d:9b:3a:bf:61:14:76:fa:40:3b:79:1c:32:41:0a:2a:64:
         f6:fd:26:bf:81:c6:f2:aa:dd:7e:7b:84:75:37:73:3c:52:07:
         23:5d:a6:cc:f2:b0:8f:95:e2:33:a1:08:39:62:21:42:7b:37:
         a5:67:fa:43:3f:c4:f1:27:ce:3c:09:bf:2a:d8:99:ae:93:7f:
         48:2f:a6:2e:18:26:e9:6f:69:46:13:08:d7:d1:d0:fd:ad:12:
         97:8c:f6:50:6a:17:22:c5:3f:cf:f9:9c:3f:5a:f3:87:8c:aa:
         2d:40:04:13:6a:90:2f:eb:93:80:01:1a:c5:5d:73:ed:68:79:
         a5:17:08:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org