Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1B2CC55885BEB813C6A6343258A76F6B189F32D5.cer
File:                     1B2CC55885BEB813C6A6343258A76F6B189F32D5.cer (raw, json)
Hash identifier:          Txh+RMswPg+HXev27O7bsKXwQizbYkX8w9MnGkDjoIY=
Subject key identifier:   1B:2C:C5:58:85:BE:B8:13:C6:A6:34:32:58:A7:6F:6B:18:9F:32:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1966B08302AA8E0F7D1C1C820E4C426F5679B15F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1B2CC55885BEB813C6A6343258A76F6B189F32D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 22:03:12 +0000
Certificate not after:    Mon 02 Sep 2024 22:08:12 +0000
Subordinate resources:    AS: 273779
                          IP: 177.8.69.0/24
                          IP: 2804:8c18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:66:b0:83:02:aa:8e:0f:7d:1c:1c:82:0e:4c:42:6f:56:79:b1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  4 22:03:12 2023 GMT
            Not After : Sep  2 22:08:12 2024 GMT
        Subject: CN=1B2CC55885BEB813C6A6343258A76F6B189F32D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a5:7f:80:98:46:f6:07:b1:e2:97:66:87:5c:
                    8f:fd:29:20:a0:b7:03:2f:14:09:c2:d7:aa:0b:78:
                    88:e7:88:91:01:11:b1:68:f7:f9:23:08:ac:5d:a3:
                    45:46:94:38:32:fa:37:1c:b6:bd:23:4c:8e:c6:5d:
                    d2:7c:a1:83:eb:52:31:d8:8f:2a:1a:e0:9e:69:bb:
                    f4:fd:d6:86:e9:82:51:6b:c3:ef:fd:54:eb:3d:10:
                    cb:dd:08:59:36:9c:7c:3c:40:ce:82:dd:7d:cf:74:
                    f4:05:fe:b6:3c:3b:4a:fa:84:2e:3d:b2:35:88:e5:
                    9a:eb:c8:17:26:9e:a6:02:eb:30:f7:80:1a:14:61:
                    74:0f:13:0b:43:9e:37:b7:c1:b3:62:c7:2c:7c:31:
                    33:4c:c2:95:5b:b3:10:74:3c:16:60:61:71:c2:81:
                    45:c6:3a:a8:c6:c8:6c:58:cf:6f:e8:28:54:b6:7c:
                    c4:e1:ed:a9:3d:14:6e:de:88:9e:9e:81:a5:ec:bd:
                    65:78:2e:58:92:1f:4a:52:67:72:1d:98:4f:4e:a9:
                    38:c3:32:d0:d0:ec:7e:db:4a:dc:03:61:0d:ac:78:
                    75:76:ad:fe:8a:99:60:64:73:b2:e1:cd:2a:ad:3c:
                    5d:e2:75:b3:ae:c1:7e:1d:a7:6e:74:7a:a4:91:8a:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:2C:C5:58:85:BE:B8:13:C6:A6:34:32:58:A7:6F:6B:18:9F:32:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FVpFMtz8L1dHCeR58yZqVuUBxHcJ8v1kZXxQokHMttSL/0/1B2CC55885BEB813C6A6343258A76F6B189F32D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.8.69.0/24
                IPv6:
                  2804:8c18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273779

    Signature Algorithm: sha256WithRSAEncryption
         a4:b8:e7:6f:38:92:62:86:04:17:10:aa:9d:4e:43:63:f6:38:
         c7:6d:9f:a5:2f:2d:a9:64:3f:54:b6:a3:79:cc:53:7e:ad:d1:
         a0:94:6c:ba:6d:ad:26:e9:91:a0:61:ab:59:f3:c0:d4:f3:d2:
         4e:8e:41:94:4d:f7:e7:b6:2c:d8:03:f2:0c:1e:df:63:54:21:
         b4:b8:03:ae:d4:22:47:cb:7f:df:cc:68:ec:e7:e6:f4:24:8d:
         fb:fd:3e:b8:c3:32:bc:9e:bf:ce:90:44:82:bc:ab:82:28:d5:
         5f:de:84:6b:fd:23:b7:ce:ab:55:93:71:26:2e:d1:f3:49:98:
         59:5b:d8:52:ba:94:34:25:9c:d0:14:b0:a9:18:80:c6:88:a0:
         f3:73:2e:37:fa:cb:19:70:e1:9c:ec:92:80:3b:5a:31:43:98:
         5e:66:64:5b:12:10:52:63:60:6e:2b:a4:88:aa:dc:c3:f8:dd:
         da:7d:41:b0:54:5c:63:64:89:d5:06:c5:5a:b7:b5:d1:94:59:
         f7:93:2a:5b:b1:ff:06:fe:1f:45:51:af:6e:66:40:63:81:87:
         ae:c0:44:12:6c:a2:79:e5:e6:a1:49:f6:57:9e:f0:a4:53:7b:
         41:e9:c9:f4:b0:dc:c1:c4:59:6b:32:1c:78:3b:37:3e:05:e6:
         1b:32:3d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org