Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer
File:                     1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.cer (raw, json)
Hash identifier:          B16MrYQK6Qtp+1cYHqi6cfopQF5b11ehBimkqn3ScHE=
Subject key identifier:   1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D0AC00AE559EF45E0EEE9C5D6076AD191D2FE6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Dec 2022 15:17:26 +0000
Certificate not after:    Tue 05 Dec 2023 15:22:26 +0000
Subordinate resources:    AS: 268160
                          IP: 45.170.144.0/22
                          IP: 2804:58f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0a:c0:0a:e5:59:ef:45:e0:ee:e9:c5:d6:07:6a:d1:91:d2:fe:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 15:17:26 2022 GMT
            Not After : Dec  5 15:22:26 2023 GMT
        Subject: CN=1C11E8770FA62CB23F7D77E2C262D80D54B60BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:de:0b:8d:18:8f:11:b3:a3:1a:64:cc:3a:55:
                    04:dc:44:f1:a4:ba:9a:e8:88:c1:22:8f:59:91:8b:
                    19:be:41:01:1e:73:14:1f:59:e2:61:a5:a5:79:71:
                    ab:09:39:7a:8b:2f:bd:86:e2:15:99:85:ee:06:38:
                    3d:41:a8:f7:12:05:c1:3f:1f:01:11:07:25:9f:8c:
                    ae:4e:9c:25:0f:21:a2:e9:18:70:90:11:21:83:17:
                    1e:23:2f:c7:ff:93:11:b6:2e:98:06:f9:a7:7f:96:
                    75:a3:09:8a:54:57:fc:88:5e:3f:57:bc:d8:b9:de:
                    fa:68:7c:97:8c:c1:1c:3f:6d:1d:75:fa:49:24:de:
                    9e:da:13:fb:eb:d2:f4:71:5c:aa:c5:2d:bf:77:c5:
                    e6:fa:4d:33:2c:b7:23:d6:4e:4a:06:c2:97:7e:19:
                    7a:f5:ec:98:35:1e:ec:f0:fd:af:2c:26:51:a0:45:
                    44:bb:bf:1f:cc:ef:7e:29:b8:31:7e:a0:0a:a8:bb:
                    5a:b4:84:d3:44:e8:7b:78:bd:cd:af:a7:8e:b5:a8:
                    1c:c3:61:f7:b2:45:74:84:1d:2f:1f:d2:3d:40:bb:
                    b1:e5:a8:1c:fc:d9:e8:88:31:25:0b:d9:6b:5a:d8:
                    3d:80:b0:89:80:81:ad:79:bc:08:f5:c3:4a:15:70:
                    03:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:11:E8:77:0F:A6:2C:B2:3F:7D:77:E2:C2:62:D8:0D:54:B6:0B:F0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/1C11E8770FA62CB23F7D77E2C262D80D54B60BF0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.144.0/22
                IPv6:
                  2804:58f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268160

    Signature Algorithm: sha256WithRSAEncryption
         72:1c:6e:ae:34:b2:bf:e3:4a:9f:ab:0a:de:33:2c:fb:39:7a:
         47:d3:3c:2a:69:62:50:1a:cb:9f:8d:f0:94:33:5d:4a:28:aa:
         fc:99:fb:8b:70:44:c2:b8:55:a6:fe:6c:d1:1f:b0:1f:83:27:
         54:cb:a0:55:0f:bd:58:a6:a8:a1:e7:c8:da:f6:a3:8b:84:0e:
         e1:a9:e3:b9:31:47:09:6d:0f:d9:b5:35:bc:82:1a:99:4f:09:
         e3:1a:86:fb:2b:35:2d:18:5e:bc:30:0f:af:36:bf:c8:4d:be:
         bc:1a:f9:95:88:63:30:a3:e1:75:95:68:10:cb:6d:8e:77:75:
         cf:58:bf:65:6c:4b:3e:09:22:66:02:13:03:eb:15:d8:b2:f2:
         04:f6:ba:3c:71:80:71:58:58:ea:5a:59:3e:f1:40:63:1b:1b:
         ef:ce:a8:e6:35:e9:e2:e4:35:d4:11:c0:81:7a:5c:a2:92:ff:
         b8:a9:35:0b:ca:c5:4b:d4:b7:1d:68:14:ec:f5:10:62:82:e6:
         47:95:b6:0a:b6:fc:fb:06:c7:f2:0a:a2:43:ca:9d:b1:67:87:
         cf:73:6b:db:cb:28:64:78:d4:d5:f4:48:c7:e0:5f:95:83:3b:
         90:b1:2f:7f:e0:b9:9e:ea:4d:86:12:0d:6a:21:c6:68:8e:72:
         28:92:05:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org