Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.cer
File:                     1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.cer (raw, json)
Hash identifier:          6WZHvAbSPWAUe0bYvzu/JRRMx9CIefCwq714NUEfALI=
Subject key identifier:   1F:B2:91:BA:7D:5A:8F:08:74:7C:B5:3C:B5:2D:39:20:F5:FB:95:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10E3B2D56A71BC06309EB2DA8AD6704D0A67B544
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.mft
caRepository:             rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:49 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:49 +0000
Subordinate resources:    AS: 52748
                          IP: 177.137.248.0/22
                          IP: 177.155.64.0/21
                          IP: 177.155.78.0/23
                          IP: 2804:b30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:e3:b2:d5:6a:71:bc:06:30:9e:b2:da:8a:d6:70:4d:0a:67:b5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:49 2024 GMT
            Not After : Mar 31 11:03:49 2025 GMT
        Subject: CN=1FB291BA7D5A8F08747CB53CB52D3920F5FB9577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:23:a6:a2:82:b6:5f:a1:b9:40:e4:8b:98:87:
                    9c:1c:ba:10:a2:b2:af:0b:28:0b:9c:02:bc:67:40:
                    79:0c:19:88:a7:5a:b1:d0:a9:32:a0:e8:ed:19:9a:
                    95:3a:e1:e9:12:28:30:4f:3e:f0:9c:2e:51:77:e0:
                    d4:97:f7:ac:e7:8a:67:b2:93:11:0d:8a:64:80:e0:
                    4a:a9:3c:d8:89:55:46:da:35:62:43:c1:ca:87:4e:
                    2f:94:bf:1b:60:73:df:69:06:9b:58:da:e9:89:9b:
                    8d:e1:6d:19:d3:5e:62:2d:2b:04:7a:dd:06:af:6e:
                    7c:fc:f7:37:2d:44:ed:3e:7a:7d:0b:36:34:4a:a6:
                    65:9e:cb:e7:8e:46:8d:a0:ad:9f:1b:0e:6b:be:c5:
                    87:75:e5:ec:aa:c6:1b:b9:a1:93:03:11:d2:44:a1:
                    96:2f:bd:3e:76:1e:bb:8d:86:d3:5e:90:a7:f0:14:
                    98:9c:be:6e:9e:9f:8f:f2:60:9d:d3:47:fd:20:d1:
                    99:dc:59:26:b2:d9:37:86:13:21:36:c4:41:ce:d3:
                    4b:fe:f6:33:5a:09:6f:cd:01:02:45:36:89:e9:e0:
                    83:be:9c:43:f3:b5:cc:0e:76:d8:2a:c3:6f:34:a0:
                    80:62:46:cf:cd:92:73:4f:1f:13:41:4e:e7:50:a7:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:B2:91:BA:7D:5A:8F:08:74:7C:B5:3C:B5:2D:39:20:F5:FB:95:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/rvJTf897mnsXEEGFbPq42bLkMcrbqhhZKSvt3A1bjS1/1/1FB291BA7D5A8F08747CB53CB52D3920F5FB9577.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.248.0/22
                  177.155.64.0/21
                  177.155.78.0/23
                IPv6:
                  2804:b30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52748

    Signature Algorithm: sha256WithRSAEncryption
         3a:43:f7:b1:11:77:37:65:03:30:59:de:5c:3c:1d:43:10:0d:
         60:e2:a9:ee:14:a1:a5:26:6d:7d:11:e4:96:29:50:75:99:9c:
         04:bc:86:11:b8:50:56:44:c6:99:37:c0:2b:8d:87:e0:d8:4e:
         40:c3:31:11:23:d3:f3:ff:95:5b:bd:fa:22:06:1b:b1:2f:02:
         75:94:b7:59:c4:e1:c6:8d:2a:b7:60:99:c9:71:95:8b:86:83:
         df:45:78:6b:9d:ad:b0:48:e5:4a:af:14:ba:03:9e:21:36:22:
         21:d0:3b:97:13:29:38:d1:07:f5:40:d7:dd:80:9c:9f:2f:4c:
         59:a0:46:7e:0d:71:42:56:79:33:10:dc:cd:7b:52:f1:00:fe:
         49:1e:8e:07:f5:ad:4e:55:10:23:a8:b0:81:17:88:2c:ef:f9:
         ab:d8:33:15:e9:5a:65:b3:79:fc:b2:e2:b1:42:31:98:85:b6:
         d1:80:f5:cb:6b:d1:12:06:d0:ae:87:b8:d4:2d:ab:42:f7:94:
         56:68:8c:cf:75:33:32:c3:4e:b7:cf:c6:a0:d6:53:99:83:66:
         55:57:ae:8e:b4:97:9d:3d:13:b2:6b:ea:ad:3c:ed:26:58:90:
         e2:84:c5:1b:c3:4d:bb:d1:ed:60:9d:dd:40:25:66:9c:8c:80:
         81:23:91:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org