Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer
File:                     1F461E0163E83106F84ADF1433865326051B09F5.cer (raw, json)
Hash identifier:          X3WY8h4Dvx8kIpvJl1lqbpODWSnJVsjVls4RBM+Uz6k=
Subject key identifier:   1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FF13B8BB1F7F34F3E8332D074697D91588798AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/1F461E0163E83106F84ADF1433865326051B09F5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Mar 2024 18:39:56 +0000
Certificate not after:    Thu 27 Mar 2025 18:44:56 +0000
Subordinate resources:    AS: 263661
                          IP: 45.179.86.0/23
                          IP: 168.205.124.0/22
                          IP: 177.221.56.0/22
                          IP: 187.63.236.0/22
                          IP: 2804:1128::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f1:3b:8b:b1:f7:f3:4f:3e:83:32:d0:74:69:7d:91:58:87:98:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 18:39:56 2024 GMT
            Not After : Mar 27 18:44:56 2025 GMT
        Subject: CN=1F461E0163E83106F84ADF1433865326051B09F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:80:17:11:91:89:15:4c:5f:3e:6a:09:d8:
                    17:ed:1c:61:fb:b5:81:67:a9:0c:76:e1:7f:fa:c1:
                    fe:b3:8c:91:ca:12:e0:83:37:1d:78:b9:9e:5d:56:
                    b1:38:90:6b:36:0a:96:85:09:83:e3:74:bc:cb:74:
                    6b:88:c3:13:48:c5:f4:48:11:fd:6a:a5:2f:78:57:
                    00:1b:16:c9:fb:9c:d8:df:0a:fc:7c:8b:f1:6d:06:
                    a6:61:e3:99:68:12:51:e1:d4:45:90:1b:a4:53:70:
                    4a:31:45:d0:45:65:61:f1:7d:d5:67:c8:00:2b:78:
                    ae:72:12:f5:be:18:e3:37:1d:d5:eb:7b:3e:aa:ae:
                    57:f6:47:73:22:3f:b9:5a:9a:01:11:5d:2d:2c:6a:
                    41:89:82:f1:7f:71:5d:e3:22:b9:3e:0c:ae:26:da:
                    90:6b:dd:27:df:cd:1c:84:d2:e4:05:fd:59:38:78:
                    be:a9:72:13:49:ed:f2:42:ff:81:19:82:49:ee:b9:
                    a7:da:14:03:51:af:23:1e:6f:96:33:63:76:e6:a6:
                    48:3c:d4:3b:1c:20:04:8d:d4:b5:ff:dd:8f:e7:32:
                    69:a1:7b:a9:e4:c4:ae:03:50:21:20:04:cc:2e:25:
                    0a:ca:08:16:7e:b4:32:bb:12:8f:e1:0e:c9:37:cf:
                    22:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/1F461E0163E83106F84ADF1433865326051B09F5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.86.0/23
                  168.205.124.0/22
                  177.221.56.0/22
                  187.63.236.0/22
                IPv6:
                  2804:1128::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263661

    Signature Algorithm: sha256WithRSAEncryption
         1d:41:d7:16:3c:42:0c:5b:48:02:fa:11:f5:13:cf:db:86:58:
         3d:ee:29:81:7a:e2:ed:84:6a:e4:a6:0a:82:d4:b3:ec:12:15:
         b2:28:79:dc:8a:dc:be:6c:74:a3:da:30:cc:6b:73:82:40:33:
         9e:e9:57:6d:a4:df:8c:46:aa:61:78:7f:f9:e4:c2:ff:9f:1d:
         75:94:32:a3:1d:fd:40:f9:b7:d5:04:a6:28:e1:ce:7d:bb:c1:
         75:2a:35:81:90:c1:0b:ea:5e:8a:21:55:d8:45:71:46:97:f9:
         1b:c6:28:65:23:79:dc:b8:62:4a:c7:15:5b:d8:c5:06:fe:b2:
         40:21:c7:6f:ce:60:aa:7a:88:91:4b:ac:34:a5:3c:61:41:83:
         77:ac:6f:c3:7a:be:42:43:d6:63:12:fe:c5:e6:07:75:51:7e:
         dd:ec:6f:73:6e:cb:be:9e:1e:c1:b0:fb:78:29:66:57:03:c4:
         4a:65:12:8d:03:a4:69:94:23:d1:19:1e:0b:58:e0:fb:34:82:
         0f:de:6c:79:2b:d8:42:5e:b7:07:02:ef:ba:0f:f3:01:d9:0e:
         36:12:bc:f4:61:81:cb:ee:98:10:73:e9:41:2a:33:d9:fc:0b:
         08:c6:07:3e:f2:df:77:79:f8:54:28:c5:7a:8b:91:df:fa:60:
         b0:dd:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org