Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
File:                     1A01AD3383BFA38B76F1CA139958102A17AF0391.cer (raw, json)
Hash identifier:          KalmP1ZoIq6TImpc4Uy53ZGU6gpjPEcsx1G3wzMbytY=
Subject key identifier:   1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18E2F27D3937EEA6684F55CDF62D575C82C9F95E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 21:10:51 +0000
Certificate not after:    Tue 31 Dec 2024 21:15:51 +0000
Subordinate resources:    AS: 262293
                          IP: 131.161.132.0/22
                          IP: 138.94.108.0/22
                          IP: 143.202.240.0/22
                          IP: 168.232.152.0/22
                          IP: 170.80.176.0/22
                          IP: 177.154.192.0/19
                          IP: 179.107.224.0/19
                          IP: 2804:a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e2:f2:7d:39:37:ee:a6:68:4f:55:cd:f6:2d:57:5c:82:c9:f9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 21:10:51 2024 GMT
            Not After : Dec 31 21:15:51 2024 GMT
        Subject: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:37:b1:74:ed:0a:dc:a3:15:2d:93:94:1f:e3:
                    90:4c:ae:da:47:61:b5:e4:96:02:4e:bd:4a:95:d1:
                    4f:6b:f1:58:48:93:1f:d2:2e:49:b7:a9:4c:bc:a6:
                    74:1d:00:0a:e1:e5:ef:46:0c:e3:6d:03:2b:c6:61:
                    94:3c:1f:20:62:65:22:e6:30:d6:8c:c0:7d:df:c7:
                    fc:ee:d6:e5:24:a4:77:91:37:8c:86:2a:e0:63:68:
                    56:f8:92:98:42:f5:f9:a7:f1:9b:a6:33:b4:78:f9:
                    3b:ad:48:ba:79:c9:53:36:4b:6b:72:42:d8:db:0f:
                    da:ce:88:e5:c6:cf:c9:78:77:92:68:9d:19:a2:2d:
                    67:94:1b:45:f9:18:20:29:16:ab:ae:75:fc:d1:6d:
                    89:e3:40:79:9d:28:90:75:67:01:1f:dc:10:e0:36:
                    11:4c:34:fa:98:a2:40:05:47:78:5b:a6:b9:32:94:
                    7d:1c:10:00:02:78:c5:f9:b5:24:ed:ce:63:b1:5a:
                    8e:1d:68:17:d7:0f:25:52:13:e4:44:0b:40:25:4a:
                    cc:7f:2b:be:59:52:01:5f:f0:25:d9:ef:75:12:23:
                    f2:b5:84:04:b2:62:27:90:f6:7b:8e:8c:55:94:16:
                    05:96:58:d4:91:4a:32:48:ce:bd:62:fd:43:01:4a:
                    d1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.132.0/22
                  138.94.108.0/22
                  143.202.240.0/22
                  168.232.152.0/22
                  170.80.176.0/22
                  177.154.192.0/19
                  179.107.224.0/19
                IPv6:
                  2804:a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262293

    Signature Algorithm: sha256WithRSAEncryption
         14:39:95:a9:4b:7a:5d:58:51:68:16:60:44:16:2a:9f:84:7e:
         1f:9b:3b:92:7c:a5:70:fa:7d:10:7f:d0:5d:88:54:70:10:72:
         9a:b8:84:c0:8f:96:30:f6:de:67:9d:f5:ea:fa:6a:77:61:e9:
         e2:70:e1:78:e5:49:68:af:8f:85:2a:30:f1:df:be:b5:21:64:
         f3:f7:88:fe:c2:f2:68:71:b5:21:24:5c:90:0b:6c:97:e3:87:
         7b:37:e3:53:ac:31:90:a3:dc:94:b5:7b:0e:57:f6:d3:2c:cf:
         70:fa:c5:f2:84:4c:4d:7c:4b:2c:a2:d4:87:93:0b:d8:7d:7b:
         ec:5f:4a:36:5c:0e:4a:76:b9:32:b5:15:d9:fb:ad:e1:c0:8f:
         48:fb:8e:c6:69:42:91:41:61:52:24:cc:19:39:26:f4:39:18:
         ca:9f:99:16:44:51:39:a4:04:19:72:ee:34:99:e8:4b:d8:d1:
         5b:35:e7:e7:15:25:83:4e:c5:d8:3d:22:41:3f:99:27:3b:55:
         f0:5a:0d:d2:ae:49:d3:5a:65:86:f1:97:92:fc:70:13:46:d1:
         cf:d4:98:24:b4:b0:30:6e:da:ef:79:6a:df:50:a8:79:2d:00:
         47:b2:55:fc:73:68:83:5c:cc:7b:c8:8b:84:17:0b:e6:1f:96:
         91:88:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org