Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE.cer
File:                     1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE.cer (raw, json)
Hash identifier:          jChXU3kuxfNSHr0Rl3jL01h5zyM1ntTi0BzjFxThDzY=
Subject key identifier:   1C:15:C3:9C:0C:AD:61:2E:A9:07:C3:6F:3F:AF:EC:6B:8A:78:CE:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0376865B06CC7F6AA5CF107C9E8974EE6FE13152
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Sep 2023 20:45:50 +0000
Certificate not after:    Wed 11 Sep 2024 20:50:50 +0000
Subordinate resources:    AS: 270382
                          IP: 190.111.128.0/22
                          IP: 2804:6b28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:76:86:5b:06:cc:7f:6a:a5:cf:10:7c:9e:89:74:ee:6f:e1:31:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 13 20:45:50 2023 GMT
            Not After : Sep 11 20:50:50 2024 GMT
        Subject: CN=1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1f:9f:9f:a1:6f:a2:d5:99:f1:08:f0:c9:6c:
                    03:2a:fb:a9:cd:35:81:a8:32:45:a1:14:32:e0:97:
                    98:41:8b:7d:3d:bc:e3:26:e7:82:81:90:d1:1e:47:
                    a4:2d:98:f7:12:a5:38:8a:e9:1a:ed:24:0e:a9:d4:
                    85:b6:56:cc:69:5f:88:95:ab:29:0b:44:94:39:ee:
                    ba:41:95:5e:f7:f9:34:0e:e1:c3:9f:72:0a:ba:46:
                    4a:60:b1:c0:f7:27:ef:91:54:76:2f:e1:6c:fe:b8:
                    1e:70:43:fb:50:e7:36:8d:2b:44:86:7f:eb:e2:98:
                    c9:f2:9f:dc:80:40:df:be:aa:a1:4b:13:25:6d:f3:
                    94:1f:3c:1d:2b:80:93:99:19:6a:f4:0a:ce:ae:d9:
                    f7:45:5e:2a:ec:4a:a8:62:2c:c4:a1:3e:ad:2d:b4:
                    99:4f:fa:77:5d:9a:55:53:0c:5b:76:1f:48:d1:b0:
                    95:cc:f6:e5:d3:a3:f6:8e:9a:4c:25:12:f4:b6:61:
                    47:c9:f3:97:c4:a2:3f:18:4d:dc:00:e8:ab:b6:cd:
                    87:28:ef:62:1c:ff:25:22:16:02:b8:14:48:83:6c:
                    5c:d5:66:6b:da:0d:ee:1c:55:db:5a:fe:87:19:f0:
                    45:0e:93:4a:0d:12:36:21:f9:ef:4d:31:3d:aa:e3:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:15:C3:9C:0C:AD:61:2E:A9:07:C3:6F:3F:AF:EC:6B:8A:78:CE:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DWRkNyV6kLLcFax9mtQQX9LyT8iQuEZZYAhwDZZD6uPm/2/1C15C39C0CAD612EA907C36F3FAFEC6B8A78CEAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.128.0/22
                IPv6:
                  2804:6b28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270382

    Signature Algorithm: sha256WithRSAEncryption
         59:c6:f7:27:87:8a:8a:a9:ac:57:60:60:52:0a:b1:fd:21:3f:
         ce:aa:ce:14:20:ed:4d:c1:b5:b4:55:62:b8:d5:22:82:9b:1a:
         e7:23:98:3f:d5:cb:b8:30:9e:97:05:ba:79:a8:b7:ad:da:3f:
         d0:46:34:5a:46:47:a2:df:c2:01:7c:6a:f8:1f:83:d2:3b:1c:
         07:14:8a:34:7c:ab:60:12:14:75:9e:68:fe:76:d7:aa:81:00:
         49:47:72:a3:82:b7:7c:32:57:13:87:f4:58:b9:d0:f6:1c:24:
         29:e2:ce:1c:7d:a1:88:a3:53:65:57:ff:ce:bc:da:6e:33:1a:
         41:6c:fb:7d:d1:68:85:41:3a:4c:01:6a:20:55:1f:dd:b5:df:
         55:6f:af:42:65:7f:d1:57:bc:b8:ac:11:d1:93:7e:5e:2b:27:
         ac:82:7f:7b:38:86:05:1f:29:d2:ed:65:22:a7:0e:13:ed:03:
         7b:04:b6:15:fa:81:12:fa:00:c8:78:fb:8e:2f:44:a8:61:98:
         22:b4:b4:37:4f:42:ff:49:9f:d1:65:e7:47:3d:79:34:a7:d6:
         47:0d:f5:7a:e1:1b:58:60:45:29:4d:ed:c2:bb:bf:d3:03:de:
         24:de:72:95:9c:a8:02:18:90:d5:5f:2b:b8:68:b3:9d:e0:4d:
         52:27:3f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org