Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1CEAB2C57300195DEEB059504286FBA1F7D645FF.cer
File:                     1CEAB2C57300195DEEB059504286FBA1F7D645FF.cer (raw, json)
Hash identifier:          BNmndOOkU4JXvAsLLRmuUwhH6/MUoQ91smYOz5s3lc4=
Subject key identifier:   1C:EA:B2:C5:73:00:19:5D:EE:B0:59:50:42:86:FB:A1:F7:D6:45:FF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0650C760B842C7B8590A4ECFD8CD23833F13D94A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/0/1CEAB2C57300195DEEB059504286FBA1F7D645FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Dec 2023 01:06:54 +0000
Certificate not after:    Fri 27 Dec 2024 01:11:54 +0000
Subordinate resources:    AS: 269382
                          IP: 45.184.136.0/22
                          IP: 2804:63c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:50:c7:60:b8:42:c7:b8:59:0a:4e:cf:d8:cd:23:83:3f:13:d9:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 29 01:06:54 2023 GMT
            Not After : Dec 27 01:11:54 2024 GMT
        Subject: CN=1CEAB2C57300195DEEB059504286FBA1F7D645FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fd:47:cd:c8:96:4d:61:65:0e:24:b2:19:b9:
                    15:74:31:fa:3c:ec:06:c8:28:90:f6:d2:11:17:1d:
                    f4:4f:bd:04:58:3b:10:b1:b0:91:db:fa:1f:40:32:
                    c1:29:43:75:9a:bf:11:ba:b5:78:c4:61:f4:8c:af:
                    ce:14:3c:99:cf:d2:9e:9f:67:e6:b3:db:d4:30:fe:
                    2b:9c:fa:86:70:92:6d:2d:74:91:a1:b0:b0:5d:4d:
                    60:a9:54:9e:5a:d0:0e:cb:39:8c:19:3e:12:38:08:
                    82:18:97:63:a8:57:6c:33:61:cf:c5:4c:1f:0f:74:
                    85:a8:ae:e4:dd:5a:a6:50:42:ec:34:ce:77:17:39:
                    14:45:fa:36:e9:b2:0c:34:bd:28:21:9e:5b:8d:87:
                    34:de:e1:a1:63:7d:21:73:75:32:21:33:e6:72:2a:
                    5f:71:bd:80:23:5d:62:49:87:21:f7:71:b0:4f:bd:
                    97:e2:0b:65:57:fa:ae:df:11:b5:eb:fb:01:1e:73:
                    7a:1d:3c:fb:ba:01:73:28:90:87:14:39:d5:ef:98:
                    54:bc:83:c2:79:73:aa:32:29:5e:b4:d8:96:60:11:
                    fa:d8:ca:98:ef:ad:60:18:93:69:0e:c6:2c:1f:bd:
                    1d:54:53:a8:e4:3a:f1:c6:aa:e6:fd:97:41:77:2f:
                    ff:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:EA:B2:C5:73:00:19:5D:EE:B0:59:50:42:86:FB:A1:F7:D6:45:FF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FzAaVKKfPC3FzWFLVvSoCEEWKMSzMM8FK1wGycFwnLLo/0/1CEAB2C57300195DEEB059504286FBA1F7D645FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.136.0/22
                IPv6:
                  2804:63c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269382

    Signature Algorithm: sha256WithRSAEncryption
         68:6a:c0:3b:03:8c:b2:57:74:99:89:f4:62:1d:07:59:be:3a:
         82:9c:c0:73:69:3c:02:2f:2c:3b:dd:e0:14:bd:e0:b9:1c:f2:
         3f:1a:92:c6:9e:53:59:ea:7a:a5:47:9a:f9:13:cb:a0:bd:1d:
         06:aa:dc:5b:03:e8:91:e2:92:90:6c:22:0a:0c:0a:95:c5:17:
         ab:e8:a9:56:60:b2:9a:cd:fd:58:72:b1:dc:91:d9:88:e1:f0:
         9e:fb:11:97:5f:9a:77:ce:d4:64:ed:b5:68:5e:8e:cf:60:5d:
         07:6c:10:0d:33:d0:71:5b:40:b0:48:67:bc:b6:4d:67:3c:4a:
         e5:86:77:96:00:f0:c9:e0:b2:22:11:16:63:1c:05:b6:ae:38:
         e9:a4:f4:c1:04:8b:ad:29:82:95:6a:dd:3b:60:3f:7d:19:98:
         d0:20:cc:54:3d:51:19:00:ff:da:8c:59:74:f7:f7:cc:d4:c2:
         30:e5:9c:28:93:e6:9b:ef:df:9b:55:bf:1d:ae:28:5c:ce:f6:
         91:de:e9:8b:f8:39:e7:3d:99:17:fd:e5:ac:82:c3:c0:3a:ba:
         cc:64:e4:ba:49:69:55:2b:e6:52:fb:65:43:4e:eb:9f:f7:34:
         b1:4a:34:e6:94:78:5a:10:f4:ef:05:ba:e5:4a:94:fe:e6:bf:
         d3:57:39:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org