Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1.cer
File:                     1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1.cer (raw, json)
Hash identifier:          KFS+QqwuWXc+rjI1RKa0hOXXFmdAY3PWHh21zMWoGW8=
Subject key identifier:   1C:F8:99:C8:37:4C:BD:37:7C:1C:6B:96:A6:7A:5D:4F:39:CA:C3:D1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5280A4F64498AF5FB868123A05328203FC3D8AF2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 23 Mar 2023 21:44:47 +0000
Certificate not after:    Thu 21 Mar 2024 21:49:47 +0000
Subordinate resources:    AS: 264441
                          IP: 131.221.248.0/22
                          IP: 2804:1ea4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:80:a4:f6:44:98:af:5f:b8:68:12:3a:05:32:82:03:fc:3d:8a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 23 21:44:47 2023 GMT
            Not After : Mar 21 21:49:47 2024 GMT
        Subject: CN=1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3e:88:22:b6:09:d8:6c:5f:83:d2:b7:f6:1f:
                    a2:39:d1:2d:33:56:a6:21:43:b5:a4:10:6b:aa:2c:
                    67:b5:3b:54:21:4b:95:aa:ee:31:43:21:b8:d5:48:
                    ca:89:e0:a4:99:ff:e0:ae:1a:d3:98:68:57:5d:de:
                    84:8b:2e:88:97:2e:f3:e4:84:88:52:90:c8:1a:ad:
                    be:e2:b7:36:d0:6a:3c:e0:50:9b:bc:f6:9f:2e:bb:
                    53:0b:5b:08:90:a9:d1:c9:3d:ac:e9:3f:df:31:ff:
                    65:e0:d6:34:50:92:2c:4e:93:82:35:a9:f5:3c:ff:
                    7f:3f:c9:75:d7:3b:02:ee:83:9e:5c:2b:ea:50:30:
                    8d:1d:d3:6e:cc:6e:22:4e:3d:77:32:a8:8b:14:e3:
                    b4:78:31:63:d3:53:21:d3:83:f0:42:68:47:0c:60:
                    9f:49:e4:63:8e:27:67:68:69:ec:9a:ce:89:26:be:
                    90:f4:01:5c:32:69:53:49:7a:ce:b5:14:a2:41:6d:
                    01:9d:9b:49:17:b3:51:32:ce:0a:5a:65:41:7a:58:
                    8f:ef:11:36:3e:b1:9e:6e:15:02:aa:33:69:59:3e:
                    13:51:0a:ea:fc:30:f4:0d:76:9d:a1:30:6d:e9:ca:
                    4a:65:ed:b1:22:4a:c4:11:80:86:39:5d:9f:23:0f:
                    b5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:F8:99:C8:37:4C:BD:37:7C:1C:6B:96:A6:7A:5D:4F:39:CA:C3:D1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/1CF899C8374CBD377C1C6B96A67A5D4F39CAC3D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.248.0/22
                IPv6:
                  2804:1ea4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264441

    Signature Algorithm: sha256WithRSAEncryption
         5a:32:62:79:fe:ea:60:15:75:dd:8b:ed:88:e8:73:3f:ee:11:
         0d:ec:34:fd:49:7a:51:f5:07:f4:94:06:e2:f9:68:33:8c:3c:
         c9:d4:21:b9:9e:28:d0:39:2b:a8:ad:18:3c:a1:34:a8:b6:55:
         90:33:13:f8:f3:f0:bd:3e:ae:81:fd:90:a0:3a:5a:d2:31:57:
         14:72:9a:82:d2:c1:52:e0:74:09:a2:44:90:19:60:41:fa:b4:
         38:79:6f:13:f1:4a:7f:a3:19:85:3c:34:e5:6c:49:5d:7a:7e:
         95:71:f6:3d:84:09:e5:e9:ec:f2:19:2b:01:42:95:b7:12:8a:
         af:05:e9:19:f2:85:b4:e4:41:c9:96:ff:57:9e:42:37:48:c5:
         7d:16:83:94:c1:88:05:ee:98:89:37:62:7a:6f:14:00:37:37:
         b8:75:28:eb:b1:06:4e:b5:4e:f3:98:a6:38:4c:57:8f:dc:5c:
         a9:48:73:ae:88:eb:cd:8e:7e:17:f3:47:bc:e9:8a:59:51:29:
         4f:b0:aa:28:23:44:a9:1e:5c:da:be:5d:8b:2c:32:40:e6:2c:
         2e:b7:b3:70:51:56:03:d2:5b:66:c7:3f:71:8c:1b:cd:4b:1e:
         9f:fa:df:6f:02:a2:07:eb:15:de:5c:65:b9:ab:c7:ce:f0:f0:
         6b:74:94:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org