Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7.cer
File:                     199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7.cer (raw, json)
Hash identifier:          SC2XCE0QJ6/+p9lGz2GJyf2ZMfiUTXUa0PY+r2e3/Ss=
Subject key identifier:   19:9B:A2:FB:7F:0B:E4:E6:A2:75:59:DB:CE:B2:8E:89:0E:60:34:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5071767630AE57A02B61C660F9E50B52A0B28C9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/0/199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Jul 2023 13:04:21 +0000
Certificate not after:    Wed 03 Jul 2024 13:09:21 +0000
Subordinate resources:    AS: 267298
                          IP: 45.233.24.0/22
                          IP: 2804:4b54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:71:76:76:30:ae:57:a0:2b:61:c6:60:f9:e5:0b:52:a0:b2:8c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  5 13:04:21 2023 GMT
            Not After : Jul  3 13:09:21 2024 GMT
        Subject: CN=199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6c:46:52:29:49:67:15:8a:5b:5b:f0:60:77:
                    d6:b7:bf:6c:18:5b:43:7a:e6:93:c8:27:f7:07:c5:
                    e2:ff:4d:0b:75:16:50:0f:82:f4:56:db:0d:e9:46:
                    fa:d1:78:3f:9d:7b:f8:b1:54:6b:23:2e:d6:c6:ee:
                    20:e0:5d:e1:9d:2f:2b:bb:c0:7c:3d:16:35:d6:42:
                    b5:0b:99:66:98:b2:7f:24:29:01:bf:bd:aa:f5:d6:
                    49:4a:26:bb:e7:39:79:f7:99:17:49:46:fb:a8:45:
                    78:31:eb:8a:60:c0:6a:e1:4a:e1:9f:b8:bb:7f:85:
                    13:ed:d2:7a:2a:c4:1d:5c:e8:34:4a:a2:6f:a3:98:
                    fe:19:46:31:a5:22:96:57:a6:cc:31:e7:c5:99:3f:
                    47:1e:dc:d4:dc:5c:c3:57:be:f4:b8:de:9a:27:ab:
                    83:12:e2:48:76:ae:79:a8:0f:13:c2:c7:2e:4a:15:
                    a3:a1:3e:88:ed:49:58:11:e1:da:26:15:87:8f:77:
                    3d:d7:04:fd:dc:56:fb:12:d2:e2:ee:25:bf:7e:c1:
                    f2:0a:79:49:65:35:d4:ec:ec:8e:16:8b:fb:02:bd:
                    2a:49:a0:50:5e:a3:8f:82:9b:c1:b3:34:ea:8b:2b:
                    de:a9:b3:54:ce:27:38:30:98:d2:d0:72:dc:76:81:
                    ed:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:9B:A2:FB:7F:0B:E4:E6:A2:75:59:DB:CE:B2:8E:89:0E:60:34:F7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eabb8QM6EKiCcZUqLiMWVdkzP1xafRQVA9TNNYfoZyP4/0/199BA2FB7F0BE4E6A27559DBCEB28E890E6034F7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.24.0/22
                IPv6:
                  2804:4b54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267298

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:0e:cd:11:a2:74:c4:16:72:74:ea:fa:a1:82:48:34:d2:
         4b:eb:7b:83:71:f3:1d:f8:eb:e6:b7:3a:7d:4c:0d:48:f3:7c:
         fd:bf:43:82:22:04:42:67:b3:e2:7e:ee:2e:4c:52:55:89:12:
         0d:7b:73:18:6a:d1:1e:4c:a5:7a:cb:dc:d2:42:83:70:16:75:
         76:41:d2:6b:94:19:fe:99:2d:29:15:24:9f:e7:19:92:88:68:
         b2:ca:74:ee:44:75:89:d8:08:7a:94:f8:df:c7:0a:03:5d:d3:
         1b:c0:4d:56:95:c9:3a:36:e9:09:78:4b:39:79:49:1f:41:90:
         2b:01:d3:c2:df:d5:72:62:d2:e0:e2:22:e8:f2:c3:cf:5d:80:
         38:a9:b4:a1:81:6a:a5:da:b9:26:94:24:d3:85:6d:99:43:77:
         23:05:42:c9:0d:b5:6b:b4:e8:5c:9b:26:ed:e6:a7:8f:14:05:
         f5:22:43:94:a6:18:0a:9b:c2:04:ef:6c:0d:34:4f:56:89:b8:
         c4:a0:93:4d:41:74:dc:d0:03:ea:1d:68:15:67:94:92:7b:98:
         60:6f:3b:96:cb:3d:59:21:59:1c:27:47:f0:2c:6e:ac:b5:64:
         40:fb:10:ce:d3:dc:9d:27:ca:6b:44:92:fd:30:14:a1:57:f2:
         89:c1:41:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org