Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6.cer
File:                     1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6.cer (raw, json)
Hash identifier:          hAICK9kd3kLNsWj+v1fGc/UjX+ouo5zwYCbLnYjZP+4=
Subject key identifier:   1A:DD:50:7D:E9:1F:BA:F3:69:7D:3E:22:0B:A1:CD:20:AE:08:EE:E6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10B12B96D5ADA680E926DD6A1B3DBCC68A468255
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 12:02:04 +0000
Certificate not after:    Mon 08 Apr 2024 12:07:04 +0000
Subordinate resources:    AS: 267423
                          IP: 181.191.116.0/22
                          IP: 2804:4140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b1:2b:96:d5:ad:a6:80:e9:26:dd:6a:1b:3d:bc:c6:8a:46:82:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 10 12:02:04 2023 GMT
            Not After : Apr  8 12:07:04 2024 GMT
        Subject: CN=1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:28:00:9b:90:ea:51:5e:57:d4:d5:30:98:6f:
                    8d:84:ea:97:ad:88:47:19:37:6a:6a:a6:fa:f3:bc:
                    82:8e:36:0a:f7:1d:68:c0:c0:fd:e5:27:59:95:73:
                    db:75:89:14:d3:77:b4:6d:c3:f0:28:2e:61:67:e7:
                    5d:0d:ea:09:e0:c0:81:66:52:00:ba:22:77:b4:40:
                    4e:68:2e:ca:4b:7f:5d:06:52:65:a4:73:a9:42:ed:
                    a3:d7:35:01:b1:bf:f8:56:83:8e:56:bb:e1:13:7d:
                    0c:ca:43:ad:10:9c:0a:f8:85:49:22:84:91:ae:e8:
                    74:47:b3:8c:54:14:5a:89:78:ce:5f:fb:6b:5b:40:
                    4e:b1:fc:f9:b7:f3:21:68:da:69:ec:18:27:ef:66:
                    e9:de:25:75:98:6d:c5:3a:c0:ec:de:10:68:3c:a7:
                    0e:94:e4:19:a7:22:6a:2e:1c:9a:83:14:56:28:74:
                    6a:47:a4:bf:2f:4b:75:b5:c2:f8:95:ec:d6:e7:df:
                    ac:ef:7b:5e:e1:23:4d:04:34:bc:2b:34:a4:d9:71:
                    48:1d:0f:7f:03:05:6c:0c:0c:d0:ec:7a:b2:a0:d2:
                    80:de:34:e1:05:d4:3c:20:85:c1:11:8b:8d:38:96:
                    7f:27:6e:ea:1f:45:3e:8d:8e:44:2a:8a:27:e4:0b:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:DD:50:7D:E9:1F:BA:F3:69:7D:3E:22:0B:A1:CD:20:AE:08:EE:E6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FAPQBcZN7UUaUSdF9CX8vCCHxgbkqkmvBZNUi1apqgL2/0/1ADD507DE91FBAF3697D3E220BA1CD20AE08EEE6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.116.0/22
                IPv6:
                  2804:4140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267423

    Signature Algorithm: sha256WithRSAEncryption
         9b:7d:5f:09:72:4f:66:0f:de:b7:5e:f3:f0:b0:6b:c3:fc:12:
         8c:fb:60:96:fa:9b:17:de:d2:67:32:57:4c:11:77:46:0a:b3:
         42:ce:2b:5a:ed:ea:fa:f3:1b:7e:4e:e3:71:52:41:2c:3c:1a:
         fb:dc:f1:76:51:58:1f:e6:f3:32:0d:b0:fc:bb:b1:a1:a0:97:
         26:62:d9:73:13:02:c7:22:56:2e:8c:0c:13:7c:c2:0f:e1:9b:
         ad:0d:c2:53:a2:a0:75:36:59:60:af:ac:6a:5b:de:56:5c:66:
         cf:d3:de:24:d2:df:3c:ed:f6:8b:65:8b:79:a2:80:00:ea:19:
         6c:c2:1d:38:de:80:b1:05:ba:89:67:89:0b:7c:4b:2c:61:94:
         6f:32:83:70:e7:d2:7c:c8:d5:fa:ec:89:40:05:c5:1f:63:c2:
         f5:55:5c:15:83:49:2b:64:c9:d4:4f:85:d8:8b:3b:8f:c8:e6:
         f7:d7:68:bc:4d:5b:2a:66:11:78:ef:dd:01:51:88:62:4b:a1:
         04:75:64:a6:fb:f2:7a:79:91:d0:6b:5a:c3:23:c1:93:0c:2d:
         df:3d:68:60:7f:9d:4a:80:e8:8c:c4:c0:8d:d1:01:98:fc:4c:
         06:cf:58:a0:31:9e:bc:74:7f:fa:94:96:4d:fd:60:b1:94:81:
         f5:07:5b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org