Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1AC76CD1F04A803385A19BFD83DB6B28E9060FD5.cer
File:                     1AC76CD1F04A803385A19BFD83DB6B28E9060FD5.cer (raw, json)
Hash identifier:          Vj4HUgFvhWyvSTKouh+1BdLNWzhv6xasQWLWwvB3Qzk=
Subject key identifier:   1A:C7:6C:D1:F0:4A:80:33:85:A1:9B:FD:83:DB:6B:28:E9:06:0F:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       362266D89BD80C0DA0B0A5DE3AF8A097DF54127B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/1AC76CD1F04A803385A19BFD83DB6B28E9060FD5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 21:56:46 +0000
Certificate not after:    Tue 17 Dec 2024 22:01:46 +0000
Subordinate resources:    AS: 52583
                          IP: 177.87.168.0/21
                          IP: 191.5.72.0/21
                          IP: 2804:d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:22:66:d8:9b:d8:0c:0d:a0:b0:a5:de:3a:f8:a0:97:df:54:12:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 21:56:46 2023 GMT
            Not After : Dec 17 22:01:46 2024 GMT
        Subject: CN=1AC76CD1F04A803385A19BFD83DB6B28E9060FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:8b:e3:6b:24:64:d1:6e:1c:54:f7:42:40:
                    ac:84:84:e3:e5:29:99:4c:40:41:18:99:39:46:7d:
                    dc:f7:d2:de:63:3c:fb:a2:08:39:4c:a3:36:e5:d6:
                    da:a6:54:eb:da:26:80:52:56:b3:2d:59:a2:0c:91:
                    d8:8f:c7:f9:11:7b:1d:da:82:5c:e8:3f:b4:90:ce:
                    ec:4a:e2:5c:5c:db:ea:da:5c:0c:b8:2b:d9:b8:b4:
                    95:a9:6b:9b:8d:4c:d7:2f:db:f3:46:a0:6f:96:4a:
                    94:71:75:14:f5:ec:6a:f5:8f:c4:b4:d8:3e:9b:ec:
                    56:86:cf:10:a1:f1:92:d2:b6:91:c5:a7:bd:d1:5d:
                    fe:91:43:2a:dc:7d:5c:1c:76:c9:4e:e5:f8:51:88:
                    41:7f:b0:70:f5:4f:64:1c:8b:7c:78:af:a0:3f:99:
                    b9:66:e3:32:fe:38:34:4c:a3:e6:bb:b2:91:25:95:
                    f7:81:44:eb:70:21:fb:02:35:5a:a4:5a:a7:81:f1:
                    e3:b2:ab:02:ff:0c:a6:b3:ea:02:28:7d:08:24:87:
                    f8:59:48:1b:a0:70:65:0f:f3:ac:be:56:30:c2:b5:
                    6a:0c:3c:ed:2b:24:da:a5:94:27:0c:d1:f6:f5:cf:
                    b4:0e:50:97:35:2e:17:74:8b:5e:d0:39:7b:88:12:
                    14:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:C7:6C:D1:F0:4A:80:33:85:A1:9B:FD:83:DB:6B:28:E9:06:0F:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hmx4yjrsnLtA3andFR5ZVcHQnTEupF9oWTqovGo7mHkS/0/1AC76CD1F04A803385A19BFD83DB6B28E9060FD5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.168.0/21
                  191.5.72.0/21
                IPv6:
                  2804:d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52583

    Signature Algorithm: sha256WithRSAEncryption
         af:08:da:8d:82:da:a7:c2:cc:d4:41:25:f9:c4:70:2f:23:0c:
         0e:2a:9e:25:6e:b3:e0:6b:26:65:f1:7c:fa:b9:72:8f:15:97:
         be:70:41:b0:d2:69:d9:3c:4a:1b:1a:02:1c:97:9d:b2:22:36:
         34:f6:3a:7b:42:c5:f2:42:ac:1c:e2:60:fd:d7:c7:e2:d3:8f:
         3b:8a:bc:06:97:66:68:9f:9e:d5:66:b1:e7:34:a8:c1:0b:2c:
         c6:40:f3:f1:73:82:ed:b6:d1:f4:b8:ec:3f:5a:b0:b7:b9:ee:
         52:d3:08:6a:cb:01:6d:68:4b:df:5b:92:84:92:7f:19:9c:d7:
         e1:0b:c0:93:98:dd:47:c3:ea:01:41:35:7a:70:65:76:91:61:
         4a:0d:39:6c:06:04:b9:d9:b6:8a:75:34:be:6c:ca:dd:0e:b1:
         eb:61:d9:ba:c0:4f:16:14:12:11:c3:7a:ca:b8:9c:aa:38:be:
         45:26:fb:35:ee:26:a2:89:f5:3b:45:64:85:a7:ea:d6:4a:ab:
         49:dc:ff:5e:9c:e2:d3:77:92:34:f0:77:32:6e:77:a9:14:a0:
         d7:3b:fd:15:ce:24:8e:85:64:e2:90:6a:00:f9:3f:34:9c:9b:
         9a:9b:cb:12:0d:62:98:af:83:fd:ab:70:4d:09:47:59:9c:4f:
         d8:9b:ba:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org