Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.cer
File:                     1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.cer (raw, json)
Hash identifier:          DDDKrUoWjYuiTYbPUSe8DVKes9pQZ4vPb4erswQbKMM=
Subject key identifier:   1E:A3:FB:62:D0:AB:A1:9D:25:06:23:6D:E2:8F:82:8C:3B:7B:BF:F6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F8D36F8D98CC46EA728231A612C3AD4D5058B1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/1/1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2024 20:59:26 +0000
Certificate not after:    Thu 13 Mar 2025 21:04:26 +0000
Subordinate resources:    AS: 61823
                          IP: 201.222.24.0/22
                          IP: 2804:19dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:8d:36:f8:d9:8c:c4:6e:a7:28:23:1a:61:2c:3a:d4:d5:05:8b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 20:59:26 2024 GMT
            Not After : Mar 13 21:04:26 2025 GMT
        Subject: CN=1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7c:5e:c1:05:b7:5f:21:52:d6:34:7b:40:49:
                    50:b0:3e:e0:9d:35:79:8e:a9:84:9c:5b:dc:99:33:
                    04:a2:e7:32:94:40:37:f7:10:cc:96:a0:50:97:08:
                    f9:85:f4:72:cb:52:82:1e:94:3e:31:97:93:9a:bc:
                    06:65:02:dd:bf:7c:24:a3:cf:eb:0e:a4:a9:71:c5:
                    7a:7e:3f:00:67:79:77:87:c6:1b:83:b3:a5:56:87:
                    3b:cd:cb:e8:52:c0:e4:42:50:8d:67:eb:10:fa:b7:
                    b7:3d:5d:2e:eb:fb:fe:72:17:83:4e:92:b1:9d:3c:
                    64:91:77:6b:90:05:94:c2:25:e5:3b:8e:2c:d7:f7:
                    02:b8:ab:5a:3d:fb:62:0b:0e:16:f9:00:67:f9:17:
                    c1:9b:c8:b4:fe:d8:a5:bd:ed:cf:6e:d1:e7:dd:e0:
                    2a:25:c1:d4:8a:af:8c:63:2c:2f:b7:7d:df:b0:8e:
                    b0:f4:67:a8:67:99:cc:8f:b9:a1:77:45:90:05:7e:
                    d2:3d:f3:f5:1e:31:d0:b3:c8:23:54:fa:40:2d:e0:
                    bc:2e:a3:16:88:58:cd:2b:90:3e:ee:63:2f:d6:2f:
                    17:af:52:e9:7a:77:63:99:10:30:e9:ad:44:e3:08:
                    66:91:43:07:c9:a6:74:88:24:ee:0a:d6:4a:12:32:
                    39:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1E:A3:FB:62:D0:AB:A1:9D:25:06:23:6D:E2:8F:82:8C:3B:7B:BF:F6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HC43PViezn3vWRdP16kFzRL2tczqHJ1SPRH8QPWNcXjZ/1/1EA3FB62D0ABA19D2506236DE28F828C3B7BBFF6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.24.0/22
                IPv6:
                  2804:19dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61823

    Signature Algorithm: sha256WithRSAEncryption
         39:03:41:1b:d9:71:55:97:8d:d7:a0:b8:6f:e3:3c:0a:22:3b:
         99:b0:57:8f:e7:a1:61:1f:df:b4:a6:52:f6:19:6d:bb:b8:ed:
         a5:47:ca:11:bf:0b:72:a8:fa:0a:f9:14:32:f7:0f:43:b5:de:
         34:ac:4c:f7:ef:c8:cb:8c:34:b6:50:02:7d:fe:37:6f:9f:6c:
         b1:79:20:52:a4:05:c2:34:7b:ad:53:99:e8:77:70:ee:8b:e8:
         5f:fe:23:4d:92:f1:1f:d2:ef:62:d1:bb:c1:5d:78:ea:36:56:
         df:42:e3:2e:d1:bf:a7:ac:a4:fd:2e:02:22:83:0a:c4:71:8e:
         5a:8d:88:7e:ea:3b:84:b7:79:1f:82:87:e9:f3:7d:2d:ff:f6:
         80:32:13:d6:58:8d:89:e7:c8:d5:c0:79:1f:93:47:f5:f0:15:
         52:94:ab:c2:bb:73:d2:7d:9e:a0:ad:a8:da:0b:30:16:bb:7e:
         93:2e:a9:b9:16:4b:da:cd:55:61:cb:fb:23:a1:3d:66:e2:b3:
         cc:16:32:e3:59:30:8e:b1:7f:4b:c9:b6:b3:d7:ac:fc:55:1e:
         37:a8:be:ff:a9:d1:15:ad:02:22:32:98:40:1b:30:73:c5:ca:
         45:af:48:06:5b:ed:34:42:a5:8c:c7:a5:74:a9:e0:ff:66:b6:
         24:fa:71:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org