Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer
File:                     1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer (raw, json)
Hash identifier:          2BZ0uO6yyejhaIJNcdYAI0w+FZV+DTD1vW2hQsQyVN0=
Subject key identifier:   1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A3551967FEBC85677238FD09353233D1B93CC5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 19:06:00 +0000
Certificate not after:    Mon 24 Jun 2024 19:11:00 +0000
Subordinate resources:    AS: 265462
                          IP: 168.196.220.0/22
                          IP: 2804:3480::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:35:51:96:7f:eb:c8:56:77:23:8f:d0:93:53:23:3d:1b:93:cc:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 26 19:06:00 2023 GMT
            Not After : Jun 24 19:11:00 2024 GMT
        Subject: CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2e:f1:5b:a0:3f:78:76:b6:e1:ca:1c:0c:97:
                    70:f8:1e:00:78:5d:a3:f5:16:af:bd:7f:c3:27:7e:
                    7c:94:aa:de:fb:9b:bf:1c:45:0f:c0:0b:6d:10:48:
                    e8:5c:66:97:43:84:5c:30:ff:e2:bc:9d:7c:9c:1c:
                    12:c4:73:fc:dc:a5:87:bc:f9:54:72:34:85:88:bf:
                    a1:00:6e:e4:54:ee:61:bf:d7:fd:2c:b7:e2:d3:6f:
                    47:b4:05:53:32:d5:94:b0:98:30:42:15:65:fa:e5:
                    30:ca:ea:2a:ba:b3:bc:b8:87:7e:b7:a3:13:e8:eb:
                    0b:83:43:47:5f:ac:b4:5a:94:cc:fb:1e:13:92:98:
                    71:34:2b:d6:2f:9b:b4:3c:ab:41:db:f4:47:f0:21:
                    a0:7a:d1:f5:5e:7e:f1:bf:44:81:fc:0c:7e:25:79:
                    45:7b:ea:50:07:99:0d:d2:5a:93:ea:fc:11:5a:c3:
                    29:69:90:83:1d:4c:ee:64:b7:54:2b:e4:cc:8f:72:
                    4e:2f:b3:e3:35:b0:ac:88:ef:4a:e5:38:7b:f2:df:
                    c6:b6:02:bf:0b:32:26:33:4f:4b:6f:ca:24:cc:74:
                    0a:4e:a4:6c:67:10:90:c2:b3:db:68:10:26:95:3f:
                    9e:e1:86:6d:44:c4:14:d5:16:f0:5e:a0:ad:52:fe:
                    8d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.220.0/22
                IPv6:
                  2804:3480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265462

    Signature Algorithm: sha256WithRSAEncryption
         5b:4a:e9:f0:d8:b1:e3:cf:a2:26:95:90:ea:66:61:b3:0f:03:
         1d:c3:8c:e5:28:97:c3:7d:62:cc:22:fd:c4:61:d7:4e:fc:57:
         2a:9a:cd:10:f4:b1:19:04:2b:d9:d4:62:77:aa:a0:12:c7:18:
         20:cb:09:fa:97:a1:92:61:32:7a:94:5d:1d:4e:30:73:df:be:
         f3:a3:d7:d4:85:aa:6c:b2:ff:6f:d9:ca:e0:7d:a4:c6:3a:b5:
         8a:fd:6a:63:77:4f:12:d2:64:0f:a6:ac:80:44:04:60:49:02:
         a2:5f:1a:86:02:25:e7:24:5f:51:c9:aa:88:46:8d:53:94:c0:
         79:f6:c8:4d:5c:1d:22:08:82:6f:40:3c:bb:2d:1e:23:51:c8:
         76:61:12:bf:3f:41:3e:0d:71:b5:99:cb:32:b3:76:6d:87:49:
         77:17:24:d6:83:79:ba:e3:f5:fd:8a:82:09:19:65:59:35:e1:
         af:9f:2e:19:58:43:05:e6:4b:7a:b0:f6:ad:7b:90:70:99:9b:
         17:a9:79:a5:a7:47:75:53:94:47:8a:a3:94:46:ce:ee:48:52:
         92:a5:60:3f:10:e5:ff:38:3f:04:f7:48:f0:d5:55:17:3e:9a:
         30:1e:25:e3:0d:4c:30:f5:28:cc:3b:72:b3:11:c3:d7:77:5d:
         3d:a4:68:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org