Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/214830E53E884DA5FC21A586B90AB77FE89D064D.cer
File:                     214830E53E884DA5FC21A586B90AB77FE89D064D.cer (raw, json)
Hash identifier:          D9dji+fatwqhHfCTqDizaCr6NFguq5k/uIvo8GlwrS4=
Subject key identifier:   21:48:30:E5:3E:88:4D:A5:FC:21:A5:86:B9:0A:B7:7F:E8:9D:06:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E3BED453253EC938A684AAE6A6D86311F64CA75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/214830E53E884DA5FC21A586B90AB77FE89D064D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 13:55:15 +0000
Certificate not after:    Wed 10 Apr 2024 14:00:15 +0000
Subordinate resources:    AS: 28182
                          IP: 170.231.128.0/21
                          IP: 189.89.0.0/20
                          IP: 2001:1294::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:3b:ed:45:32:53:ec:93:8a:68:4a:ae:6a:6d:86:31:1f:64:ca:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 13:55:15 2023 GMT
            Not After : Apr 10 14:00:15 2024 GMT
        Subject: CN=214830E53E884DA5FC21A586B90AB77FE89D064D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:97:fb:64:e5:2e:a1:52:8b:9d:dd:d8:0f:d9:
                    d3:bb:69:08:cf:26:de:dc:5d:46:ef:7c:62:fb:a1:
                    4f:9b:72:31:13:bf:da:e0:5b:0c:3c:db:8a:a5:ed:
                    5c:d7:f6:d3:fd:f6:5d:fa:aa:0f:9f:25:f0:ea:c8:
                    7b:19:f9:58:8d:35:d3:3d:a8:5a:83:88:79:d6:f0:
                    60:29:ca:ae:fb:b8:41:c5:a6:43:30:8a:f7:ec:2e:
                    e7:f0:92:42:1f:95:e8:20:b7:32:ef:3d:2b:27:10:
                    35:3b:0d:27:5c:42:ac:3a:5f:a1:c3:b3:24:b2:2a:
                    9b:63:10:d9:af:ee:7a:27:a7:28:cf:c0:1a:a3:39:
                    b3:10:08:67:0d:78:41:01:df:65:7c:8c:e7:d9:84:
                    66:44:8a:a4:c4:42:c7:ef:9b:d4:46:20:21:c5:4c:
                    d1:74:8b:90:d8:f4:cc:b9:fd:dc:29:26:6c:4c:d8:
                    c9:1b:f2:bd:b1:f0:b0:44:b9:b3:9f:05:41:79:79:
                    30:b3:d6:2d:3f:20:3c:8e:33:45:1a:ee:50:45:5f:
                    96:b4:8a:b4:f0:75:ad:7f:98:6c:43:ae:99:a8:3b:
                    ed:21:23:48:bc:ef:64:d2:0a:4e:08:83:49:ad:5a:
                    54:4a:6d:73:de:d2:f7:0e:a7:2e:e0:22:ac:d7:65:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:48:30:E5:3E:88:4D:A5:FC:21:A5:86:B9:0A:B7:7F:E8:9D:06:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gujz89uA5U8Hgu26S7dGjawaKwVKj4WtERF46RCmrp6z/0/214830E53E884DA5FC21A586B90AB77FE89D064D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.128.0/21
                  189.89.0.0/20
                IPv6:
                  2001:1294::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28182

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:96:1f:28:bb:2a:47:7a:1f:f3:80:a8:59:3d:24:2e:9a:
         ae:4a:b3:ab:c2:f9:63:1f:ff:a7:52:c7:eb:74:1d:26:42:b1:
         fd:64:dc:8a:e6:10:17:ff:c2:d7:74:e3:c3:79:5f:d5:b9:85:
         2b:cd:38:3e:d6:05:7d:6a:bc:4d:76:95:b7:82:22:27:12:eb:
         3e:90:81:1a:9b:db:34:b4:93:99:9c:6b:35:57:fa:1e:d9:cb:
         0f:54:bd:d0:26:e4:22:43:99:08:02:7d:70:e1:8e:90:62:dd:
         cc:ce:bc:ab:38:6e:4d:f0:ce:8d:c6:0d:a0:d7:81:0b:48:c3:
         7f:21:ea:51:fd:3d:9b:42:5d:12:b1:e7:db:89:52:d8:2e:00:
         ca:b0:af:eb:17:3c:fc:b7:4d:ac:0a:43:5c:c8:48:59:bf:f6:
         6b:41:b3:a8:53:76:69:7d:68:0a:18:11:d5:18:bf:d5:26:23:
         bb:d0:7c:3a:61:d0:8d:aa:23:9a:9c:35:4d:db:f1:e1:78:e4:
         85:af:aa:2e:ee:16:d6:30:ef:c5:7d:41:dc:3f:ff:5e:d2:e3:
         b8:d8:6b:4e:c0:f7:59:e0:5c:c5:22:01:b5:0f:a2:89:93:66:
         eb:5f:39:d7:12:90:ad:a4:d0:a3:b4:40:9e:c4:b3:b5:84:03:
         93:02:90:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org