Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/19E98883E3A673317F3AC927DE191C45EBB4241D.cer
File:                     19E98883E3A673317F3AC927DE191C45EBB4241D.cer (raw, json)
Hash identifier:          DMQ+4KaEjMIZCHDuoUxeR+bu6EykUwJzHVC16XilAls=
Subject key identifier:   19:E9:88:83:E3:A6:73:31:7F:3A:C9:27:DE:19:1C:45:EB:B4:24:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FD5FDEBD10FC24DCF203FAB378CC10D630992F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/19E98883E3A673317F3AC927DE191C45EBB4241D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:31 +0000
Certificate not after:    Tue 21 May 2024 09:25:31 +0000
Subordinate resources:    AS: 269368
                          IP: 45.185.100.0/22
                          IP: 2804:638c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d5:fd:eb:d1:0f:c2:4d:cf:20:3f:ab:37:8c:c1:0d:63:09:92:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:31 2023 GMT
            Not After : May 21 09:25:31 2024 GMT
        Subject: CN=19E98883E3A673317F3AC927DE191C45EBB4241D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:3c:8f:d2:fa:77:01:d3:bb:08:2c:40:5e:
                    8e:1d:2b:ff:f9:6e:57:67:03:5a:8f:38:f2:16:15:
                    77:75:a0:0d:ed:ec:6b:20:1f:56:30:46:dd:55:d3:
                    b8:93:41:59:3d:bc:43:6f:e1:a8:d4:2c:8a:c7:41:
                    fa:af:8f:14:78:c2:34:3c:f9:d5:5c:8b:9f:f8:f7:
                    3f:1a:10:d1:71:8d:10:56:7c:ba:15:e4:61:4f:71:
                    08:e6:14:6d:1d:34:5d:49:05:b2:71:7b:fa:47:c3:
                    81:c0:fa:7a:54:d3:24:e8:56:e9:54:69:aa:85:0b:
                    6b:bc:94:f1:24:42:15:e7:dd:8b:83:ad:65:21:8a:
                    45:93:50:eb:15:e8:3c:50:6b:ff:00:0d:45:3e:c3:
                    cb:2f:79:ef:4f:ac:02:0f:97:b8:45:06:2b:94:ed:
                    7c:11:02:60:82:36:2d:16:b8:02:45:d0:55:d8:21:
                    d6:9f:24:b2:3c:93:86:cc:85:1d:57:be:c4:16:e0:
                    c6:48:f4:b2:83:46:08:80:41:8e:6f:af:ed:18:d1:
                    15:72:f6:0f:cf:f6:69:78:d7:26:90:d7:ab:2a:f9:
                    bb:5e:85:c0:95:8b:bc:5a:31:b8:96:a8:6a:62:3a:
                    8a:1f:36:31:c9:c8:59:70:fc:17:21:f1:5d:43:37:
                    6d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:E9:88:83:E3:A6:73:31:7F:3A:C9:27:DE:19:1C:45:EB:B4:24:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HNoTMPBipinK6agPvCAXvCZMZgQcWiZUby1Zrxye46bx/0/19E98883E3A673317F3AC927DE191C45EBB4241D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.100.0/22
                IPv6:
                  2804:638c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269368

    Signature Algorithm: sha256WithRSAEncryption
         27:ba:40:50:51:af:59:a4:27:27:be:d2:ba:96:3a:30:1a:0a:
         bb:1b:6c:bd:29:e3:e5:47:da:9b:dc:21:1c:89:e5:56:6a:e2:
         af:11:de:a0:a1:4d:31:2a:04:26:28:9d:08:21:6a:3b:84:b7:
         76:92:96:e1:a7:84:d6:7e:2e:63:e8:93:66:8c:f5:20:27:78:
         6f:91:02:b0:16:c3:8f:c0:35:9a:d4:15:81:86:7c:77:95:e9:
         76:fd:b7:e3:bd:fe:51:f8:d9:e3:a5:c8:52:d3:36:71:9e:82:
         7c:cb:7e:0b:ae:18:3c:ca:1b:01:4f:60:e2:08:2f:b6:72:fd:
         bb:92:79:29:a2:41:f5:f1:c7:fc:b7:b2:5b:73:4f:8f:fa:5c:
         02:9c:ff:a9:51:16:fc:a3:e9:65:f6:e7:8f:d2:aa:55:13:03:
         71:27:61:41:87:21:d3:3e:82:ed:0a:a3:6d:1a:e9:6b:7d:03:
         df:5f:ac:b3:16:a7:20:5b:18:3d:38:b0:19:1d:95:fa:b0:5a:
         96:63:3c:5c:74:ef:d2:03:25:86:c1:03:7d:41:1e:34:e6:b0:
         27:2f:16:64:e5:de:f1:8b:fc:83:da:e7:a2:35:76:80:14:f8:
         7e:0b:3b:d8:7a:09:5b:9d:58:f6:4d:cc:fe:45:80:cf:d0:4b:
         87:bd:2c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org