Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1CFFFE670163E5C26A8BC8CE9181519C22190820.cer
File:                     1CFFFE670163E5C26A8BC8CE9181519C22190820.cer (raw, json)
Hash identifier:          C+IiH2EgWon7utzvHTq46bhQLx5ZmKPm+t+XgtyNCFA=
Subject key identifier:   1C:FF:FE:67:01:63:E5:C2:6A:8B:C8:CE:91:81:51:9C:22:19:08:20
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       311EDB8A43C2BFC7F04E97EB78F1AFB7BCBA2E01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7iaPmEZipvPNe685B5QauQr3KVevA7ukXLsGnTZ77cbJ/0/1CFFFE670163E5C26A8BC8CE9181519C22190820.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7iaPmEZipvPNe685B5QauQr3KVevA7ukXLsGnTZ77cbJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 17:37:22 +0000
Certificate not after:    Thu 20 Feb 2025 17:42:22 +0000
Subordinate resources:    AS: 271242
                          IP: 179.51.216.0/22
                          IP: 2804:7870::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1e:db:8a:43:c2:bf:c7:f0:4e:97:eb:78:f1:af:b7:bc:ba:2e:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 17:37:22 2024 GMT
            Not After : Feb 20 17:42:22 2025 GMT
        Subject: CN=1CFFFE670163E5C26A8BC8CE9181519C22190820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:c7:78:39:fa:80:ef:6e:ed:2c:c4:05:74:
                    b0:bf:b2:24:55:16:0a:c0:e3:df:f3:e6:62:00:f4:
                    34:b0:9c:13:2d:fe:da:07:14:03:4d:bc:e9:93:8d:
                    cf:cd:30:fa:15:95:c7:b8:23:ca:40:12:1b:a2:9a:
                    62:46:c7:11:df:26:1a:c8:4d:0c:39:4d:52:29:a7:
                    f1:d5:fb:b1:93:aa:51:32:c9:e0:aa:a2:18:72:08:
                    c3:06:9d:97:7b:e9:5d:1d:dc:54:75:28:3a:f3:c7:
                    92:53:49:d1:b1:68:28:b4:4b:c8:39:31:00:f4:63:
                    71:e8:8c:82:28:33:52:10:b3:59:52:35:44:21:bc:
                    24:47:fa:13:2c:be:c3:2f:b4:3a:df:dc:5f:39:c8:
                    8b:d6:58:bd:8b:80:4b:fa:73:c4:8e:cb:cb:cc:ca:
                    ae:9a:24:fb:e2:a2:06:87:9b:96:29:97:f5:04:9e:
                    6a:ee:e9:85:b0:ad:03:d8:90:16:1d:b7:db:f5:bd:
                    06:ac:42:05:7f:5f:0b:c9:4f:9c:3e:81:5f:d9:07:
                    98:d4:f8:90:7e:b7:a9:60:f7:3e:5b:4e:4b:09:78:
                    95:f8:e0:89:6d:f9:2e:10:52:48:70:c6:3c:1c:ac:
                    5a:c3:6c:53:d0:39:c2:4b:42:83:88:ac:d0:91:cc:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:FF:FE:67:01:63:E5:C2:6A:8B:C8:CE:91:81:51:9C:22:19:08:20
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7iaPmEZipvPNe685B5QauQr3KVevA7ukXLsGnTZ77cbJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7iaPmEZipvPNe685B5QauQr3KVevA7ukXLsGnTZ77cbJ/0/1CFFFE670163E5C26A8BC8CE9181519C22190820.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.216.0/22
                IPv6:
                  2804:7870::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271242

    Signature Algorithm: sha256WithRSAEncryption
         44:50:0f:e3:94:63:83:70:61:a9:de:60:1a:2c:32:fc:e8:72:
         97:be:5c:8b:91:1c:e5:f9:cd:49:f9:e7:f0:4b:9c:40:5e:7d:
         8d:04:80:b9:e6:c5:78:4e:24:87:65:85:a3:2b:69:ba:22:db:
         7a:d1:f5:0e:02:a3:7d:92:6f:7d:4d:06:c4:c0:d4:b8:5e:4f:
         84:9a:dd:f8:bf:1d:3c:8f:2b:59:0e:90:15:0d:b4:12:e5:8b:
         af:e4:96:3c:e0:8f:6a:d7:d4:71:04:73:46:82:98:b3:5a:0a:
         b9:aa:90:8a:66:e1:2e:8e:9b:dc:bc:68:e8:4b:4d:06:25:ac:
         a6:9b:ec:fb:18:48:69:8c:24:be:31:78:95:28:e7:8a:63:19:
         89:91:65:fc:49:b0:20:7f:fb:0e:83:88:c2:dc:58:98:00:62:
         d6:78:8b:62:1a:71:b6:d9:41:b5:0a:eb:08:d0:de:5c:f6:9b:
         80:32:17:01:c5:bc:57:76:0f:92:c3:22:ba:31:3c:29:82:ec:
         5c:8f:d4:bd:f2:a1:20:00:e7:14:08:65:f1:4f:05:0f:a0:76:
         28:ee:a5:21:5d:55:4b:1b:b9:31:30:39:9f:c0:a7:3b:04:11:
         f4:da:30:a9:c2:a6:fb:e5:ec:a5:d6:f3:22:92:2c:a9:6d:17:
         ad:77:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org