Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1922A6ACC8445980EA960C507A7F00C0D9D4F959.cer
File:                     1922A6ACC8445980EA960C507A7F00C0D9D4F959.cer (raw, json)
Hash identifier:          IAhuwL0UR8h7Nz3u9QoMW37pM6rvTUwdpZWSINb6T5E=
Subject key identifier:   19:22:A6:AC:C8:44:59:80:EA:96:0C:50:7A:7F:00:C0:D9:D4:F9:59
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       325C544629146C6C32D01C796F8981BE6DB37C03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/1922A6ACC8445980EA960C507A7F00C0D9D4F959.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Feb 2024 15:44:35 +0000
Certificate not after:    Mon 17 Feb 2025 15:49:35 +0000
Subordinate resources:    AS: 265278
                          IP: 168.90.56.0/22
                          IP: 170.231.149.0 -- 170.231.151.255
                          IP: 2804:2d60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5c:54:46:29:14:6c:6c:32:d0:1c:79:6f:89:81:be:6d:b3:7c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 19 15:44:35 2024 GMT
            Not After : Feb 17 15:49:35 2025 GMT
        Subject: CN=1922A6ACC8445980EA960C507A7F00C0D9D4F959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:c4:cd:8b:5d:a3:3c:3c:b2:07:5e:3b:87:
                    89:4b:42:e9:47:48:56:db:e8:af:cc:56:2c:22:58:
                    05:63:46:b5:06:59:03:a0:6c:eb:d8:a6:b0:2b:8f:
                    43:b6:00:72:50:16:8a:5e:4f:8c:ac:36:04:16:6d:
                    ae:2e:ac:2d:c7:11:1b:75:b3:3a:56:8a:1a:53:49:
                    b3:57:2f:82:65:c4:92:a2:21:4a:1c:d3:3b:ef:51:
                    1d:6d:d6:ae:9a:31:41:f7:0a:b4:ec:17:6a:48:44:
                    7c:47:21:f3:70:3d:44:ad:8d:37:b9:04:c4:cc:45:
                    d5:6c:43:1f:91:23:74:60:1b:e1:2e:b5:af:ac:47:
                    9a:09:36:6a:db:41:ac:7b:2d:51:95:65:66:d0:b0:
                    ca:75:c0:23:63:fc:0c:a0:b2:e6:af:c6:da:ca:63:
                    8e:59:a9:4b:c8:ca:26:78:32:68:92:3c:a9:a8:9a:
                    84:b2:e0:6e:6f:95:2d:c0:e1:28:e5:e7:da:31:f1:
                    18:88:57:96:1e:c8:53:a7:f3:29:af:75:8b:bd:f0:
                    16:f4:bb:b9:0d:f9:80:a4:c4:9f:04:0d:64:f0:4c:
                    4b:a2:16:8a:b2:be:94:ab:7a:18:3a:ca:ed:86:bb:
                    b6:95:46:50:1a:97:70:15:a8:63:8c:8a:39:55:d7:
                    c5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:22:A6:AC:C8:44:59:80:EA:96:0C:50:7A:7F:00:C0:D9:D4:F9:59
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9eLBDRHN8pcjyppjCevuuQNa7Lq7E8WBdAgHMFqw22qr/0/1922A6ACC8445980EA960C507A7F00C0D9D4F959.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.56.0/22
                  170.231.149.0-170.231.151.255
                IPv6:
                  2804:2d60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265278

    Signature Algorithm: sha256WithRSAEncryption
         98:d1:e5:f3:14:b6:c9:f4:81:59:ce:88:82:d6:cb:ae:39:fa:
         fb:f2:cf:05:6d:ca:80:03:c6:d7:a5:d9:a7:13:ef:6a:41:9f:
         39:d2:55:39:fb:6e:8c:ef:85:5a:1c:b0:2b:d7:13:9e:5f:d2:
         bd:57:54:67:44:37:f1:33:19:fc:b3:1f:17:01:81:8c:6c:f5:
         90:58:27:a0:41:71:8c:85:0b:f9:ef:4e:60:ae:26:d6:c4:5a:
         9a:b2:36:8e:a8:d0:5b:9f:79:0e:54:13:e9:f5:5f:2b:77:b9:
         1c:d1:31:f3:08:fe:58:9f:dc:88:3a:9d:a8:7b:05:77:17:71:
         aa:b0:5f:d2:13:4c:78:77:ed:3a:b2:06:84:ee:7d:2a:81:78:
         2e:ef:9b:4e:ab:4c:3a:a8:42:eb:36:53:eb:59:e7:77:60:a5:
         dc:dd:24:de:2e:57:fa:5b:1f:c2:4f:8f:04:0b:03:a6:13:bf:
         97:bb:ee:85:a9:00:5b:0c:5f:77:84:a3:0b:72:c9:eb:44:2d:
         1f:d2:d4:e6:e4:10:b3:fd:66:4f:de:c3:ea:48:13:5a:4c:eb:
         03:3a:59:39:39:b0:47:d2:37:26:ca:53:62:77:7e:58:32:21:
         f5:a1:de:4c:35:76:86:72:75:4b:5a:81:60:2a:f2:27:60:5e:
         a3:96:4a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org