Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer
File:                     2483D2805F2966A13A1FF7E130907B7443BE7FB6.cer (raw, json)
Hash identifier:          soyRSTPD+fxaKnyl+S7C0FwF07hDIt1f/ErAiH0qTRc=
Subject key identifier:   24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1584960812545CC3AF90BF79E5D420FE74E4406E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 10 Apr 2024 19:13:13 +0000
Certificate not after:    Wed 09 Apr 2025 19:18:13 +0000
Subordinate resources:    AS: 61748
                          IP: 131.100.52.0/22
                          IP: 168.181.192.0/22
                          IP: 170.245.96.0/22
                          IP: 2804:1bc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:84:96:08:12:54:5c:c3:af:90:bf:79:e5:d4:20:fe:74:e4:40:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 10 19:13:13 2024 GMT
            Not After : Apr  9 19:18:13 2025 GMT
        Subject: CN=2483D2805F2966A13A1FF7E130907B7443BE7FB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:41:71:4b:15:86:29:06:53:3b:ee:98:e0:22:
                    22:27:a8:87:6b:9e:ef:5e:c9:58:80:af:d5:28:1a:
                    61:a1:b2:27:ad:78:13:a1:7f:28:68:51:0d:b6:7b:
                    1b:26:4f:d8:31:57:d4:3e:4e:09:00:d5:a2:29:9e:
                    ab:b3:cc:e9:39:d2:28:a8:ba:00:51:20:2c:32:3c:
                    8d:e7:01:20:0d:73:94:24:1b:db:71:b4:48:89:af:
                    14:3b:13:bb:98:a4:83:95:f9:0e:19:87:98:18:f4:
                    70:3b:20:d3:ac:49:79:2d:75:5b:a6:2d:49:21:f0:
                    8c:c3:61:3b:81:23:e7:68:38:71:39:5b:4d:b6:df:
                    04:8d:39:3d:31:6f:6b:8f:66:bf:a4:f9:a4:af:92:
                    6f:df:74:77:13:fe:af:3d:b5:4a:71:93:0b:42:cd:
                    9d:16:e9:9c:23:c8:34:cd:7c:97:d2:df:01:76:f2:
                    25:57:94:a2:d9:d6:88:dd:aa:d5:b1:4a:5e:6c:98:
                    ba:5e:d8:01:29:2d:c5:38:83:4f:01:af:5a:40:04:
                    ec:db:ee:71:cd:17:34:e4:94:ec:aa:4a:8e:c3:c4:
                    b3:e7:f1:db:f9:98:2f:29:09:60:b8:97:2e:a8:9b:
                    6e:f5:28:5b:93:03:95:b0:91:ba:a5:73:92:f4:6e:
                    9d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:83:D2:80:5F:29:66:A1:3A:1F:F7:E1:30:90:7B:74:43:BE:7F:B6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/1/2483D2805F2966A13A1FF7E130907B7443BE7FB6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.52.0/22
                  168.181.192.0/22
                  170.245.96.0/22
                IPv6:
                  2804:1bc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61748

    Signature Algorithm: sha256WithRSAEncryption
         07:26:6d:23:aa:f9:f5:ee:b0:d7:0b:d8:f1:0f:d1:8a:07:cb:
         7e:02:e2:e1:e5:9e:56:9e:61:28:d7:5e:69:95:74:fe:db:e3:
         79:06:a4:0a:fe:b6:7c:2c:35:fc:dc:2e:64:64:36:aa:70:4e:
         74:50:41:c7:91:23:50:59:a7:2b:64:92:93:0b:aa:4b:bb:d3:
         c5:a1:c3:28:60:11:b0:01:c6:27:11:f8:08:3b:54:b1:3a:8c:
         40:39:c9:33:79:f9:c3:e4:4a:a0:02:d0:48:54:dc:3a:98:b9:
         f6:c9:96:15:ec:4d:cf:3c:e6:cf:f5:02:8f:a1:63:3d:e8:09:
         a4:13:95:0f:81:91:6d:f2:f3:a9:67:96:62:fa:cc:ee:76:c9:
         83:4a:03:58:03:8d:83:91:a5:91:2c:ad:db:c1:40:e2:9f:9d:
         22:e2:16:78:67:fe:f0:f3:71:b6:3f:09:7c:f5:f0:77:55:2b:
         c2:28:98:ae:fa:79:65:a4:e4:c1:3e:43:70:06:b5:e3:80:cf:
         cf:4b:2b:b0:9a:63:26:6a:f1:c3:17:68:3b:ad:a6:ec:ea:1e:
         7e:24:f9:4a:76:89:69:80:b6:cc:a1:09:65:db:29:1c:32:9c:
         60:95:e0:37:71:68:08:7c:a5:b7:88:00:0b:72:78:dc:d2:25:
         01:01:c1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org