Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/19BE0ECF1929D351B8E8680C771D8EA7AFDEE677.cer
File:                     19BE0ECF1929D351B8E8680C771D8EA7AFDEE677.cer (raw, json)
Hash identifier:          rc/OUqyLFZhsuJFv+UAsOFlwuEs7PtvdDoSi5AP0Ffg=
Subject key identifier:   19:BE:0E:CF:19:29:D3:51:B8:E8:68:0C:77:1D:8E:A7:AF:DE:E6:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       571B4CDE629290F3A2E0832A3631E28323E7FE42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/19BE0ECF1929D351B8E8680C771D8EA7AFDEE677.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Feb 2024 14:36:45 +0000
Certificate not after:    Wed 12 Feb 2025 14:41:45 +0000
Subordinate resources:    AS: 264241
                          IP: 138.118.4.0/22
                          IP: 168.196.8.0/22
                          IP: 2804:24c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:1b:4c:de:62:92:90:f3:a2:e0:83:2a:36:31:e2:83:23:e7:fe:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 14 14:36:45 2024 GMT
            Not After : Feb 12 14:41:45 2025 GMT
        Subject: CN=19BE0ECF1929D351B8E8680C771D8EA7AFDEE677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:11:10:e1:ac:05:cb:94:9e:3f:a5:64:fc:ff:
                    7d:8a:81:d7:0b:73:9f:9e:3c:c3:11:31:78:c8:aa:
                    a6:3e:e7:95:f9:bb:cb:0d:71:95:05:7d:a1:2c:5c:
                    43:88:e8:22:35:8b:7d:6e:8a:c6:5d:43:df:2c:e7:
                    b0:ba:c0:1b:41:90:92:67:64:89:6b:60:28:ec:cd:
                    16:b5:34:42:7b:5c:48:5a:56:1f:10:df:e8:51:15:
                    0d:4c:b7:9e:00:f1:42:46:37:2b:ee:23:24:d4:9f:
                    fd:24:0b:27:cd:f5:4e:ce:16:cb:50:16:11:05:82:
                    cf:f6:ad:6d:bb:82:ce:dc:33:cd:fd:80:02:b2:88:
                    75:2c:7a:93:0e:9b:a9:ca:72:e8:55:2b:59:a0:8d:
                    35:90:93:6e:34:a5:e2:c8:43:46:4b:65:03:54:e7:
                    04:f8:6b:a5:c5:10:b0:86:e1:6a:f3:e4:74:e1:6e:
                    9c:c4:0e:61:af:f3:e0:45:a7:94:10:23:85:40:85:
                    54:7f:10:85:fb:a0:ff:95:39:a2:db:3d:6a:59:90:
                    03:bf:56:8f:a3:c1:38:79:7f:d4:31:15:33:b9:25:
                    10:87:d5:cd:d1:37:63:5f:3f:14:41:22:45:f5:9e:
                    68:61:b6:df:9b:00:09:1e:ac:1d:29:19:93:f6:de:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:BE:0E:CF:19:29:D3:51:B8:E8:68:0C:77:1D:8E:A7:AF:DE:E6:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7A4P63b92RBGVckEt9xMzReYXGmJSuWCRJuFrNnHwo37/0/19BE0ECF1929D351B8E8680C771D8EA7AFDEE677.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.4.0/22
                  168.196.8.0/22
                IPv6:
                  2804:24c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264241

    Signature Algorithm: sha256WithRSAEncryption
         8d:74:12:7e:d5:58:78:95:f2:15:a9:7a:c3:51:94:4f:6c:8e:
         f0:9a:a7:d1:7a:fd:51:85:ef:a9:aa:f8:9a:91:14:c4:54:b1:
         01:5b:12:c6:3e:01:73:34:4f:a6:90:d5:aa:05:64:e3:85:9b:
         83:69:3f:ec:fd:5e:66:71:cb:e4:2c:f8:f1:04:8d:59:80:bb:
         a2:3a:f4:7e:3f:d8:cb:01:49:a7:bd:70:c1:8b:e8:17:8c:93:
         cc:6d:e2:89:64:20:00:12:90:81:f5:09:06:9b:a8:ca:63:02:
         dd:92:63:51:4e:c9:e1:69:f2:57:2c:e3:94:d1:eb:a8:2d:bb:
         e9:c0:f5:35:c4:d4:d7:2f:66:5f:77:de:82:eb:83:b0:04:42:
         6e:3d:b6:d6:2e:d0:70:8d:30:6f:33:66:79:37:16:25:c1:9e:
         f6:42:bc:18:7e:49:96:75:d1:f1:56:85:83:8b:4e:f0:67:60:
         47:da:77:26:8a:c7:c9:88:18:78:c6:a2:a1:59:dd:7a:c5:4e:
         26:e4:e2:da:7e:c0:cb:f8:4e:1b:76:9f:c4:0c:d6:71:6f:55:
         58:ed:a7:85:70:38:e0:0d:ef:c6:67:8f:09:bf:fa:eb:ff:6a:
         c6:a6:9c:a9:ff:ba:45:39:f7:a6:73:55:2b:de:0f:92:47:e0:
         02:72:77:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org