Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1AD87FCAD53024131720D8ECD330672E32A2FD31.cer
File:                     1AD87FCAD53024131720D8ECD330672E32A2FD31.cer (raw, json)
Hash identifier:          QPTGOR/fGQbbVKeCVXehVMABJ3I/PvFKgoFCIw2I2sg=
Subject key identifier:   1A:D8:7F:CA:D5:30:24:13:17:20:D8:EC:D3:30:67:2E:32:A2:FD:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       306DB73EAB735B616034403E0B177B3D86107A7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/1AD87FCAD53024131720D8ECD330672E32A2FD31.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Apr 2021 15:08:22 +0000
Certificate not after:    Thu 28 Apr 2022 15:13:22 +0000
Subordinate resources:    AS: 61604
                          IP: 201.131.98.0/23
                          IP: 2804:7754::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6d:b7:3e:ab:73:5b:61:60:34:40:3e:0b:17:7b:3d:86:10:7a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 29 15:08:22 2021 GMT
            Not After : Apr 28 15:13:22 2022 GMT
        Subject: CN=1AD87FCAD53024131720D8ECD330672E32A2FD31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:5b:2f:8d:ff:1e:f6:f4:ff:7a:46:bb:75:
                    16:25:e8:22:25:7d:26:5e:56:8c:ed:ba:d1:b5:79:
                    79:46:89:33:ec:1f:94:38:16:06:ce:03:8e:75:62:
                    9b:63:13:77:46:f4:82:76:00:f5:4d:f5:fd:3f:de:
                    3f:97:70:92:c2:a9:7f:b5:f5:33:b9:dd:d2:d0:49:
                    05:e3:b1:42:ff:c9:fb:dd:1a:63:69:87:46:da:db:
                    67:24:18:72:0a:43:8b:f6:0d:0c:5d:1b:6d:31:6d:
                    1d:99:e4:a9:8e:60:68:09:50:99:b8:08:1a:d2:17:
                    c4:26:68:07:39:2b:78:ec:25:22:80:42:92:11:c6:
                    71:6b:ac:24:44:90:48:a7:80:ce:9b:43:95:6f:56:
                    70:5e:de:76:89:5e:25:b5:6a:68:17:05:c2:6c:df:
                    a4:24:a2:ec:85:e7:fa:0d:19:1a:66:33:7b:bd:85:
                    4a:e5:62:6e:d5:ac:b5:16:7f:78:b1:cc:a6:e6:17:
                    bc:ce:98:9d:42:91:1c:2b:2c:2e:9e:4f:02:f6:f4:
                    c0:6d:40:d1:e6:44:13:04:9c:e6:de:af:ed:b4:39:
                    28:ca:7d:06:a9:ec:f7:ab:c8:7e:35:61:28:1e:02:
                    ba:60:7f:b8:6f:5a:31:d5:56:f2:93:2a:54:ef:33:
                    82:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:D8:7F:CA:D5:30:24:13:17:20:D8:EC:D3:30:67:2E:32:A2:FD:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/1AD87FCAD53024131720D8ECD330672E32A2FD31.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.98.0/23
                IPv6:
                  2804:7754::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61604

    Signature Algorithm: sha256WithRSAEncryption
         15:c1:f3:de:07:de:a8:3e:ed:e6:c2:7b:2f:8b:fe:17:5c:f1:
         61:c8:c4:ba:89:35:9b:d4:ac:14:c9:81:a3:fc:48:df:dc:34:
         95:2c:4a:2c:48:4e:ee:f7:84:76:67:a7:97:9b:17:8a:ff:3a:
         d9:6d:de:3f:a1:30:a0:db:6d:e2:57:36:77:9b:41:09:8d:9c:
         53:e7:81:3f:76:14:bf:78:65:6a:da:eb:d8:36:e1:86:fd:09:
         a1:2f:4a:97:7a:43:d9:1a:5d:57:0c:69:cb:b0:4f:c7:9a:dc:
         bc:a7:33:87:75:58:c5:68:b6:cb:b7:3f:3d:51:48:ae:5e:33:
         9a:17:7c:c5:21:72:40:42:6b:50:6f:99:2a:67:71:b9:e7:30:
         70:34:7d:70:87:65:8a:00:1e:93:e6:ea:98:07:10:f8:18:1e:
         8b:ca:d7:02:46:cc:c0:96:c1:ce:df:ec:cb:f9:02:1b:50:2f:
         c5:94:c7:b8:c0:85:18:4c:27:c0:58:78:1e:cb:bd:2c:1a:dc:
         91:db:1e:7a:99:e6:20:1a:e9:3b:d2:20:31:22:29:81:6e:c8:
         a3:74:f0:14:28:91:d4:bc:26:9d:f0:37:48:7b:b2:a2:19:cf:
         42:36:93:6c:32:1e:e7:2c:16:af:bc:3f:db:aa:fc:64:2b:da:
         dc:66:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org