Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.cer
File:                     1D7BC705EEA281DFF0A94B408D23A1F04AE05888.cer (raw, json)
Hash identifier:          +edusYtub9GllfgfBW/RBFgznPosfxRIo8xLwCXgqbU=
Subject key identifier:   1D:7B:C7:05:EE:A2:81:DF:F0:A9:4B:40:8D:23:A1:F0:4A:E0:58:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15A551B635B9A6103A496B4647DBA839E371A0E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 20:45:22 +0000
Certificate not after:    Mon 17 Mar 2025 20:50:22 +0000
Subordinate resources:    AS: 262582
                          IP: 138.99.32.0/22
                          IP: 177.84.96.0/21
                          IP: 177.93.88.0/21
                          IP: 2804:664::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:a5:51:b6:35:b9:a6:10:3a:49:6b:46:47:db:a8:39:e3:71:a0:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 20:45:22 2024 GMT
            Not After : Mar 17 20:50:22 2025 GMT
        Subject: CN=1D7BC705EEA281DFF0A94B408D23A1F04AE05888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e4:f3:b6:09:c2:99:08:2a:77:91:ce:52:90:
                    00:28:f2:df:ff:25:d3:97:94:8b:fa:13:9a:5e:cf:
                    c1:c1:07:05:d7:f2:40:fe:62:6b:d0:bf:c0:13:a4:
                    6a:97:93:17:f3:15:41:61:71:c1:ff:3f:d9:d1:7b:
                    f4:6c:dd:32:76:5a:d6:8d:07:d3:2f:13:0e:cb:52:
                    d8:8a:f8:0e:b9:49:23:36:45:a0:0b:38:f9:d3:46:
                    b6:f5:3b:26:0e:94:39:74:69:8e:49:d5:9a:69:93:
                    d9:cf:cc:fc:90:b3:16:1c:34:fe:a2:24:ef:b3:ce:
                    e8:a0:2c:a3:92:56:86:00:1e:82:16:bb:a8:01:22:
                    a4:6e:54:18:c8:9a:c5:41:46:6f:b9:bb:df:a7:db:
                    32:50:43:60:33:ed:d6:6f:2a:35:c4:2f:21:3c:8f:
                    45:6b:df:c9:85:34:be:45:cb:70:ba:21:60:34:7a:
                    0f:de:64:06:a2:02:c3:cf:cf:31:31:25:b2:31:e8:
                    fc:65:b5:11:9f:d2:32:9e:e9:16:e5:bd:75:ff:97:
                    be:da:1d:7e:80:6b:fb:95:8b:f0:2a:b0:8b:ec:0b:
                    af:d6:ed:3a:9d:b8:93:00:63:53:c6:64:3c:ed:44:
                    88:38:57:92:8b:de:69:4a:71:cb:45:73:c6:03:ae:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:7B:C7:05:EE:A2:81:DF:F0:A9:4B:40:8D:23:A1:F0:4A:E0:58:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/1D7BC705EEA281DFF0A94B408D23A1F04AE05888.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.32.0/22
                  177.84.96.0/21
                  177.93.88.0/21
                IPv6:
                  2804:664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262582

    Signature Algorithm: sha256WithRSAEncryption
         99:c1:b8:c8:38:e4:d1:b6:8f:04:22:3e:bf:c8:53:3c:78:4c:
         8f:62:20:f3:30:0e:e6:9a:77:7e:db:20:53:12:b9:15:62:49:
         d0:ff:f4:1e:cf:6b:93:3c:52:4c:7e:70:f2:9e:04:c4:25:15:
         9b:a0:81:87:5f:19:38:9f:4f:3a:2a:28:7a:17:c7:8d:04:41:
         6a:52:4c:cb:f7:7b:03:b2:b0:cc:77:07:64:41:b9:06:1d:f3:
         f4:d6:51:2d:88:e5:89:db:9a:2b:6a:a3:7b:ec:66:17:5a:37:
         5a:3f:73:5f:0f:3f:3f:7d:39:96:e3:ee:2e:3b:7a:e1:69:59:
         98:62:ce:5b:48:33:e7:66:2d:33:1b:fc:78:1b:1c:37:d1:0f:
         53:11:2c:6e:48:62:9b:97:94:03:16:b7:8e:f9:41:39:5c:a8:
         d2:05:34:08:ed:1e:5b:e0:7e:3b:bb:28:7d:e8:b7:03:2b:55:
         e6:b2:2a:04:a7:15:4b:45:d9:79:e8:28:41:65:96:00:69:ba:
         63:1e:63:f5:2a:c9:ea:14:97:e2:db:7c:3a:88:95:c7:a1:53:
         8b:a5:4a:d6:df:31:89:c8:ae:c6:b3:38:ee:e9:32:d8:c5:af:
         4f:1d:75:97:af:a9:a1:7e:23:e6:5e:af:d6:8a:0c:57:e6:58:
         fd:ca:57:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org