Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.cer
File:                     1A1E771886DB4FAE27F017DADDDAE982732C274F.cer (raw, json)
Hash identifier:          hsoQc3UODv55OrrcZVcBOE7UQ5qW6rq2lIyl+jnBtxo=
Subject key identifier:   1A:1E:77:18:86:DB:4F:AE:27:F0:17:DA:DD:DA:E9:82:73:2C:27:4F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       233C3A137D9F8F8904E6EB802F4C8670B1E22DC0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Dec 2023 19:45:08 +0000
Certificate not after:    Thu 05 Dec 2024 19:50:08 +0000
Subordinate resources:    AS: 268312
                          IP: 45.238.44.0/22
                          IP: 2804:4f38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:3c:3a:13:7d:9f:8f:89:04:e6:eb:80:2f:4c:86:70:b1:e2:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 19:45:08 2023 GMT
            Not After : Dec  5 19:50:08 2024 GMT
        Subject: CN=1A1E771886DB4FAE27F017DADDDAE982732C274F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:60:d5:e0:f5:c9:32:5f:5f:fb:16:06:a9:
                    c1:33:96:e8:53:74:ee:c2:7b:da:85:83:b4:59:6b:
                    6a:a8:f8:6f:56:01:46:b6:1a:5d:ca:86:9d:43:b8:
                    cd:a8:3c:2e:d6:9f:82:bd:25:9e:6d:9c:7e:c8:90:
                    99:5f:73:fe:ea:c5:5f:e2:fb:02:e5:b6:0d:7b:70:
                    14:70:8c:99:7f:cc:3c:62:80:24:85:37:ab:37:0f:
                    25:a3:8d:c2:9a:72:b3:81:f2:61:4e:b7:cb:94:cf:
                    50:38:e1:ba:16:8d:cd:8f:3e:f1:0a:49:98:c9:e4:
                    19:86:c9:b7:f3:86:e4:e5:5a:cc:3d:3c:0f:25:3e:
                    c3:f7:ba:12:51:5c:c6:e9:77:24:a1:69:1c:5d:06:
                    42:59:24:fc:1c:87:ba:6c:5f:b9:9c:9b:d5:73:d0:
                    77:22:01:05:b8:aa:81:83:74:32:d4:88:63:51:38:
                    b6:25:ac:91:f7:8a:fe:9d:04:c3:20:7c:6d:9f:35:
                    cb:da:af:98:b7:65:da:5e:1c:6b:92:30:92:6a:63:
                    4b:e8:fd:cb:04:92:b1:c1:a9:18:5c:b3:aa:70:92:
                    37:cb:4c:ea:7f:48:9f:78:6b:ec:4a:df:7e:58:16:
                    09:85:50:ff:66:25:a9:cb:cc:9f:60:2c:e9:1b:a4:
                    27:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:1E:77:18:86:DB:4F:AE:27:F0:17:DA:DD:DA:E9:82:73:2C:27:4F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/0/1A1E771886DB4FAE27F017DADDDAE982732C274F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.44.0/22
                IPv6:
                  2804:4f38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268312

    Signature Algorithm: sha256WithRSAEncryption
         0b:a5:7a:d3:37:5b:f4:ad:fc:3d:b5:de:2f:03:06:e5:14:22:
         2c:60:61:c9:9e:4e:8e:9b:8f:28:94:aa:58:84:ba:b7:0d:d9:
         b8:c2:ec:d5:0b:e8:68:f4:57:dd:87:a2:89:cf:22:26:d3:4a:
         29:b4:0d:8c:65:2f:41:2d:48:1a:31:ff:66:a3:0b:b3:a2:af:
         1c:39:5a:ca:a6:21:a4:9e:29:2f:02:61:d5:a1:16:59:09:55:
         c8:d0:53:78:33:49:48:dc:6e:07:6a:b7:eb:66:c0:e0:ff:9e:
         63:48:34:b6:7e:8a:b5:c1:71:ac:ba:a8:78:f4:f9:8c:32:3b:
         2e:94:f0:10:5a:ad:32:22:e0:53:3c:f0:2a:91:7b:42:71:c7:
         f1:cb:34:a0:d0:be:83:ed:fb:f8:4a:27:3b:f3:75:6c:e8:a9:
         de:a1:2b:55:4e:aa:e8:cb:a2:4e:0a:c9:ad:99:c7:ba:72:50:
         11:3c:67:0d:5a:c7:49:14:4d:f3:e5:45:d2:0a:d5:cc:c7:2f:
         8c:f6:bd:ca:34:52:f2:f0:55:f0:81:4c:fc:7b:e5:89:b3:8e:
         6e:24:82:af:75:76:d8:e4:69:7d:4a:61:cb:40:ba:de:34:11:
         b7:ff:98:cb:4d:ff:e2:31:eb:f2:df:f0:c0:f6:1e:5d:8f:bd:
         93:eb:ad:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org