Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1B48865C2ECB384BCBAAB41003FABA098EC1CFB8.cer
File:                     1B48865C2ECB384BCBAAB41003FABA098EC1CFB8.cer (raw, json)
Hash identifier:          1+IiqMomn0n2yOMRq/ni7Ke6R2ZU3fyffTamRdvie4Y=
Subject key identifier:   1B:48:86:5C:2E:CB:38:4B:CB:AA:B4:10:03:FA:BA:09:8E:C1:CF:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D599EA3099352E63DDFFB90592ED16D69B650A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/1B48865C2ECB384BCBAAB41003FABA098EC1CFB8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 29 Nov 2022 11:48:26 +0000
Certificate not after:    Tue 28 Nov 2023 11:53:26 +0000
Subordinate resources:    AS: 270497
                          IP: 24.152.116.0/22
                          IP: 2804:6cdc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:59:9e:a3:09:93:52:e6:3d:df:fb:90:59:2e:d1:6d:69:b6:50:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 11:48:26 2022 GMT
            Not After : Nov 28 11:53:26 2023 GMT
        Subject: CN=1B48865C2ECB384BCBAAB41003FABA098EC1CFB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7d:a2:93:2c:59:37:ea:46:14:36:45:f1:31:
                    cf:64:50:06:d4:69:a9:e7:d4:2b:86:eb:43:be:b4:
                    6a:c3:59:74:b9:e2:63:1d:2d:c8:cb:1e:0a:b9:92:
                    12:88:68:f1:0b:f3:d0:8f:eb:6c:e3:2c:18:47:0e:
                    b3:1e:fa:2c:b4:5c:34:56:db:30:1a:e3:6c:ad:24:
                    42:81:15:b0:0c:99:0b:1d:0a:16:1e:81:3e:6b:1a:
                    b1:2e:44:eb:21:23:41:17:c0:d0:cf:0d:b9:3a:ce:
                    05:f3:b1:6b:47:9a:db:2e:99:17:c6:02:54:8f:a7:
                    8b:51:e3:7e:f9:0f:85:e9:cb:7e:08:e3:66:33:ff:
                    7a:f6:09:82:e0:43:ba:4f:4b:52:f5:59:4d:4f:df:
                    24:0d:bf:da:17:9f:31:5a:56:f1:bc:6a:20:2e:82:
                    64:33:cd:1d:f6:f6:39:0b:b9:f3:e8:89:04:05:b9:
                    e6:21:8a:ae:31:9f:c2:02:de:10:c3:bc:f2:88:e4:
                    a0:d3:7b:42:75:7d:0a:43:4b:40:f1:9e:5f:e0:fb:
                    b8:cc:09:37:8f:8d:c1:3b:4b:55:fc:a1:76:44:02:
                    44:96:da:78:48:db:29:92:c0:ee:64:27:4a:89:4f:
                    a8:e2:8b:17:ae:8e:b4:21:98:af:fe:18:89:aa:ee:
                    24:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:48:86:5C:2E:CB:38:4B:CB:AA:B4:10:03:FA:BA:09:8E:C1:CF:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9vor5aA4Db9zbBTiHXa325cBwKJkE6dMCAhoXJFM9Sum/0/1B48865C2ECB384BCBAAB41003FABA098EC1CFB8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.116.0/22
                IPv6:
                  2804:6cdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270497

    Signature Algorithm: sha256WithRSAEncryption
         1c:15:7d:b4:38:68:98:ed:b2:fe:4c:82:98:9c:c5:f0:5a:05:
         b3:18:1c:f6:c8:95:04:24:33:7e:0a:d6:df:ae:27:c4:c5:17:
         31:a7:86:c6:c7:34:59:eb:76:ec:09:c6:d3:90:3a:f9:3d:e9:
         a9:9a:ca:a1:17:c5:f8:bd:a8:2a:22:a1:bb:68:52:37:71:68:
         47:ee:a9:a3:90:ee:63:46:c1:22:32:1b:e4:79:bf:55:20:53:
         05:cc:a5:11:da:8e:48:a8:72:55:04:58:e3:63:fb:71:b6:34:
         1e:68:8d:ca:69:55:e0:47:a6:49:33:07:49:6b:58:fe:f3:8a:
         c0:60:df:a0:3c:e4:2d:c3:d9:ca:ca:2c:e4:a7:c8:bd:e0:01:
         ec:45:08:46:87:1c:58:ee:5a:12:29:e0:cd:91:6b:db:eb:30:
         96:58:65:4d:53:e4:a6:02:ab:eb:e3:e2:4a:19:30:f3:3c:32:
         d2:37:31:51:4c:fc:9a:05:f5:c5:59:ad:ee:ec:dc:b4:c2:72:
         8e:9e:2a:c0:0e:b0:ad:89:39:1d:0f:9c:ff:75:aa:03:20:17:
         89:44:c6:86:b5:9a:76:2b:29:83:ce:e4:62:65:a9:27:5b:ff:
         2f:d7:22:20:7d:08:69:ec:0a:7e:24:f5:99:9d:b7:fd:29:7c:
         8a:64:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org