Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer
File:                     1A290848CB48B2366D6F878C4A2126EBA581FDEC.cer (raw, json)
Hash identifier:          nM6xtpSDDC8dmFOicexMMM/zpaaavhgNnDo//SF6Rc0=
Subject key identifier:   1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       298079B07F8ED903DF8878F22DA18CD46F176A6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Dec 2023 02:03:13 +0000
Certificate not after:    Mon 16 Dec 2024 02:08:13 +0000
Subordinate resources:    AS: 270910
                          IP: 138.121.164.0/22
                          IP: 2804:735c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:80:79:b0:7f:8e:d9:03:df:88:78:f2:2d:a1:8c:d4:6f:17:6a:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 18 02:03:13 2023 GMT
            Not After : Dec 16 02:08:13 2024 GMT
        Subject: CN=1A290848CB48B2366D6F878C4A2126EBA581FDEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:84:27:96:05:41:6f:3d:97:80:27:fe:8f:f0:
                    75:07:0f:f3:9c:73:d5:0f:f3:12:1f:99:54:77:e1:
                    95:01:8f:f2:04:cb:d3:a0:82:45:12:65:78:28:33:
                    52:3e:bb:5e:2a:c5:f3:42:fd:97:f0:88:41:f2:fa:
                    5a:35:c5:72:b1:79:40:f8:9c:99:4e:38:dd:91:22:
                    89:ef:e0:99:d5:bb:25:ca:68:7e:a9:f9:d1:c0:69:
                    6e:9e:a3:6e:79:4f:1e:d3:59:c8:31:2e:3a:d0:3b:
                    b0:6d:2b:80:79:c5:30:76:bc:61:78:6b:83:79:de:
                    2f:3c:37:d4:2f:0d:f8:13:77:77:f3:8b:0f:dd:9c:
                    aa:0b:26:f4:b8:d9:40:e3:54:e5:a6:b3:98:03:22:
                    04:bd:24:e7:31:00:c7:27:40:64:dc:9c:a1:f0:5c:
                    b3:04:f5:71:a7:6d:29:a1:61:c1:50:be:0a:82:61:
                    71:20:c6:53:40:ec:2d:9c:0a:ea:27:7a:bb:33:15:
                    94:df:b7:73:c4:eb:23:f3:ea:2d:4e:51:9b:e8:60:
                    f6:7d:43:80:e8:eb:63:e3:0e:69:53:21:0f:a8:23:
                    e5:88:04:41:7a:be:89:04:14:f0:18:5d:41:b4:82:
                    61:41:70:3f:7e:fc:91:39:1a:40:ba:34:d3:58:4c:
                    bd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:29:08:48:CB:48:B2:36:6D:6F:87:8C:4A:21:26:EB:A5:81:FD:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D3qE5HsCq8B5HjtJg91pcxQYETrRyHQpBkUGRcDhdTCf/0/1A290848CB48B2366D6F878C4A2126EBA581FDEC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.164.0/22
                IPv6:
                  2804:735c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270910

    Signature Algorithm: sha256WithRSAEncryption
         6d:bc:af:a8:b9:6b:37:49:66:3f:90:50:2e:10:f3:a6:dc:1a:
         93:a2:e8:d1:47:36:f6:ff:e2:01:27:36:fa:fe:7c:3c:dc:47:
         49:0a:e3:03:e5:2d:e4:a8:37:39:b5:38:41:ea:25:37:92:b7:
         7b:25:d7:2d:cd:7e:45:c8:14:f8:32:54:89:22:35:ac:d6:ea:
         73:71:97:b1:ea:83:d9:0b:2d:4f:5c:39:cc:b5:c5:49:86:82:
         16:ba:a8:4a:63:50:89:3e:ed:b1:36:9c:bc:8d:1d:25:e6:39:
         96:e3:c2:7d:2a:a6:10:9d:93:e9:e7:27:25:ad:9c:22:62:ea:
         b3:6b:12:12:94:65:50:5a:bb:4a:17:ba:c8:e1:d1:2f:8f:09:
         1f:c4:c5:da:aa:fa:b3:0c:7d:36:c6:3a:ce:77:45:71:e8:bb:
         64:8e:61:c9:17:08:62:2a:1b:5b:e7:5d:08:37:99:5a:16:1d:
         d9:0a:3e:a0:af:2c:b8:dd:c3:33:6b:5c:63:31:6e:ae:f7:54:
         6f:c5:c0:0f:ff:a8:30:89:9c:72:b8:e9:c2:74:0d:d6:4a:eb:
         b9:42:ed:90:11:92:ad:a4:c3:45:34:89:04:ef:27:ff:33:5f:
         a6:c0:9d:ae:df:b7:20:64:4e:a9:c9:aa:f1:2d:9f:5b:4c:de:
         38:89:ac:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org