Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.cer
File:                     19CACECF1715A1C974AF169D14ABF46962EEF36F.cer (raw, json)
Hash identifier:          7pQIAJcviUBb8vkNWE2deAYVBqFNfP8PhbOLJns2FRk=
Subject key identifier:   19:CA:CE:CF:17:15:A1:C9:74:AF:16:9D:14:AB:F4:69:62:EE:F3:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58EEB640991D016869EFC04D7F7CE8BCC000EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 19:43:40 +0000
Certificate not after:    Tue 17 Dec 2024 19:48:40 +0000
Subordinate resources:    AS: 61756
                          IP: 131.100.72.0/22
                          IP: 2804:1be8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ee:b6:40:99:1d:01:68:69:ef:c0:4d:7f:7c:e8:bc:c0:00:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 19:43:40 2023 GMT
            Not After : Dec 17 19:48:40 2024 GMT
        Subject: CN=19CACECF1715A1C974AF169D14ABF46962EEF36F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e0:5f:d7:80:8d:ef:60:3d:19:6e:cd:e2:d9:
                    99:24:d6:21:22:52:af:58:6c:58:3d:1b:91:a0:bc:
                    98:f4:04:ab:9c:7b:e7:4e:5e:4f:83:d0:97:e7:c4:
                    14:2e:73:4c:08:25:25:a9:97:36:bd:6d:87:82:fd:
                    50:19:a4:00:08:a1:e2:13:8d:97:62:d4:06:97:a7:
                    7b:17:61:ee:80:4b:39:a6:bc:48:8d:2b:67:6c:d2:
                    94:31:85:10:75:83:64:61:29:26:e9:55:82:32:fd:
                    17:c0:02:73:19:bc:76:6d:a6:12:97:69:66:11:7e:
                    45:03:c6:68:ce:37:00:a7:c4:e8:fc:33:8b:e2:ac:
                    f0:c5:1e:20:5c:cc:bc:e0:fb:17:45:f0:84:68:cc:
                    b0:8d:77:83:0d:4c:23:2c:17:c1:ae:17:be:a3:48:
                    56:43:20:d1:2d:e4:1b:d1:82:2f:79:49:b3:61:5d:
                    53:c3:c8:4a:6c:c0:9c:2c:e1:e5:dc:36:e6:5f:40:
                    21:24:d6:fe:91:a9:7a:0e:13:e7:1e:18:67:a6:38:
                    86:17:b1:57:7f:9b:0c:27:eb:8f:0d:75:a0:6a:45:
                    ff:29:9e:aa:b9:7a:15:8f:cb:2a:05:cf:aa:81:e8:
                    fa:fb:43:82:f6:51:9e:dc:a1:d0:aa:14:44:fa:70:
                    91:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:CA:CE:CF:17:15:A1:C9:74:AF:16:9D:14:AB:F4:69:62:EE:F3:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/0/19CACECF1715A1C974AF169D14ABF46962EEF36F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.72.0/22
                IPv6:
                  2804:1be8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61756

    Signature Algorithm: sha256WithRSAEncryption
         5e:e0:41:f9:21:2f:79:2e:d8:74:af:99:98:4c:07:7a:78:89:
         7a:8a:25:d9:13:e5:bb:6c:26:24:ec:8a:8f:50:50:15:ab:64:
         a1:b5:a4:b7:2a:1c:26:3b:1e:56:06:88:9a:4b:63:19:dd:f6:
         54:c9:c6:2e:6f:11:00:2f:e4:b3:ce:2a:a1:72:e9:f1:c9:7d:
         1f:c0:3b:f8:37:b9:0a:a2:b4:77:4b:54:16:22:9b:df:ae:09:
         e0:31:5c:9d:8f:0e:b1:6d:0f:64:b5:d0:3c:61:fc:17:f7:58:
         1a:93:8b:a4:60:b5:f2:e7:e4:1e:5c:06:d2:4a:6c:e3:3a:e8:
         fb:61:5f:ee:7b:22:f9:41:39:d1:dc:5c:92:cb:dc:05:55:98:
         d8:d6:d4:e2:2b:d6:95:85:23:ef:1d:a1:c4:7c:5d:31:e5:6b:
         9a:83:e6:9d:c3:c2:2f:47:05:99:8f:49:4e:45:06:89:54:02:
         23:af:46:31:db:69:cf:4c:c3:ed:71:d1:e1:6b:bf:7f:d7:63:
         ea:d8:87:43:0f:24:de:51:49:47:dc:94:26:23:21:da:2d:5f:
         59:1c:21:48:75:83:ec:c8:88:06:0a:1f:03:ea:18:26:93:a0:
         93:66:3c:85:f1:38:a2:8c:62:f4:b5:2f:7a:70:96:a0:5a:a8:
         df:72:a1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org