Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1B14CE9900C82885FF1BE5174B350BE85A165F72.cer
File:                     1B14CE9900C82885FF1BE5174B350BE85A165F72.cer (raw, json)
Hash identifier:          9Ai5fX7kmnzZtRXWzGAq2Kgh1ZaRlGnqHkhNmfpCQpU=
Subject key identifier:   1B:14:CE:99:00:C8:28:85:FF:1B:E5:17:4B:35:0B:E8:5A:16:5F:72
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       309DD5FE74175C8B1B2E32DF3452378B105CF02E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/1B14CE9900C82885FF1BE5174B350BE85A165F72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 May 2023 02:06:03 +0000
Certificate not after:    Wed 15 May 2024 02:11:03 +0000
Subordinate resources:    AS: 271216
                          IP: 177.36.76.0/22
                          IP: 2804:7808::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9d:d5:fe:74:17:5c:8b:1b:2e:32:df:34:52:37:8b:10:5c:f0:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 17 02:06:03 2023 GMT
            Not After : May 15 02:11:03 2024 GMT
        Subject: CN=1B14CE9900C82885FF1BE5174B350BE85A165F72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:95:59:6a:dc:cc:11:33:23:e8:5c:03:3c:b5:
                    c4:a9:9a:95:72:56:89:c0:bb:ba:80:2e:af:fb:5e:
                    c8:46:7a:0c:14:e8:23:86:18:25:8a:3d:32:98:c9:
                    5d:94:41:7d:aa:2e:74:bb:4b:13:d5:70:7d:19:c6:
                    77:b6:1e:51:b2:a9:93:c0:31:b5:88:a3:0c:b4:34:
                    c5:89:ae:65:f0:25:7b:45:9c:14:df:ff:65:e5:4a:
                    7b:5c:c3:de:87:de:4b:7d:21:36:16:69:43:69:68:
                    5b:70:3f:32:2f:a3:1c:81:4b:a0:e1:16:8a:61:d5:
                    af:df:ae:72:95:97:9d:c0:8c:32:46:ab:98:46:a5:
                    01:fc:00:9c:25:ff:81:f6:ab:af:7c:3d:ea:f0:65:
                    53:30:f4:86:5e:87:88:bb:bf:88:09:17:c9:04:4b:
                    cc:49:4f:c0:6e:7e:7e:dd:ee:90:77:2f:c0:53:cc:
                    ee:fd:59:a8:e8:93:7e:a6:72:d8:6d:4e:d5:50:b4:
                    f1:95:86:d0:94:4c:3d:07:57:d5:db:88:e2:78:a8:
                    d7:21:2c:5d:39:67:75:19:6e:34:03:19:60:5a:49:
                    2a:71:e4:b8:6f:43:d6:e8:7d:f5:5b:22:69:b3:33:
                    52:00:a9:16:24:e2:76:b4:38:fc:30:df:4e:37:be:
                    de:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:14:CE:99:00:C8:28:85:FF:1B:E5:17:4B:35:0B:E8:5A:16:5F:72
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DKwiB3MHDU9912PxUYuALd8hGztfXib9WDAGACT5cnKT/0/1B14CE9900C82885FF1BE5174B350BE85A165F72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.36.76.0/22
                IPv6:
                  2804:7808::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271216

    Signature Algorithm: sha256WithRSAEncryption
         93:d3:1b:8a:a5:9c:32:2a:3a:11:46:1a:30:80:13:63:bb:b0:
         c2:ca:f8:a3:3a:e7:1f:16:cb:27:5b:eb:6f:d5:06:56:b4:a6:
         c7:81:86:3e:b5:18:d3:44:9b:4a:12:d8:03:2f:32:74:99:19:
         cc:24:b8:46:14:cc:05:9d:6b:aa:9d:b0:79:9f:bb:d4:a3:f5:
         8c:42:36:9d:c0:0a:5e:2f:b0:58:c9:d4:2f:85:36:4a:dc:0f:
         64:61:db:6a:be:3a:1e:23:40:63:a4:07:3b:e7:df:a5:d6:63:
         1c:08:0f:5a:65:0f:51:1d:b9:67:37:06:ec:cc:e7:70:d2:88:
         74:d2:87:75:6d:f0:64:fa:d0:b9:e5:bb:2a:4c:7a:89:f7:d4:
         81:63:2a:ac:e5:a4:0a:d8:63:95:81:30:e5:57:37:04:04:39:
         7c:48:3a:8b:aa:2f:17:1f:77:8b:75:f5:4d:cc:af:d0:af:ae:
         d2:f2:dd:7c:83:b5:c6:e7:3d:72:ad:ea:ad:db:73:7a:17:a1:
         dc:59:b3:fc:03:b9:f7:61:9d:bc:61:39:2b:72:b9:31:c9:2f:
         c5:21:6f:c8:3a:76:cb:63:f7:6d:f2:51:08:95:10:4d:6d:d0:
         6a:5b:11:23:cd:a5:92:bc:8b:1e:57:33:79:5d:d9:8d:33:64:
         cb:76:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org