Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/24E0959AB7772BF66753580C3F4588BD984B000C.cer
File:                     24E0959AB7772BF66753580C3F4588BD984B000C.cer (raw, json)
Hash identifier:          TBQL9s3DcenZO0Zd0R1mh6tBw211YKlkK8uXmTsRoWg=
Subject key identifier:   24:E0:95:9A:B7:77:2B:F6:67:53:58:0C:3F:45:88:BD:98:4B:00:0C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2D7458480E2B9BDA8BA0C9ECB381CD58E46145F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/24E0959AB7772BF66753580C3F4588BD984B000C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 17:49:32 +0000
Certificate not after:    Fri 28 Feb 2025 17:54:32 +0000
Subordinate resources:    AS: 270418
                          IP: 190.111.168.0/22
                          IP: 2804:6bb4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:74:58:48:0e:2b:9b:da:8b:a0:c9:ec:b3:81:cd:58:e4:61:45:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 17:49:32 2024 GMT
            Not After : Feb 28 17:54:32 2025 GMT
        Subject: CN=24E0959AB7772BF66753580C3F4588BD984B000C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4c:d9:31:4a:0d:96:1a:c5:fd:2a:ac:20:fe:
                    e2:96:cc:99:f9:35:b4:49:a2:3e:e1:a5:79:7d:f1:
                    97:08:d1:ca:1b:fc:6e:87:6b:65:2a:22:99:65:c9:
                    7c:fa:be:ee:9d:3e:46:5f:1b:2b:7d:d9:31:4e:15:
                    0b:96:cf:ac:04:0b:db:3e:60:3a:3d:f2:75:d6:54:
                    16:18:8d:4d:9e:1a:b0:ca:8a:c7:3b:04:56:0c:6d:
                    7b:f2:52:7a:40:19:d8:84:9e:36:3e:38:8d:f2:9b:
                    43:7c:f8:c7:9a:32:24:d5:3e:04:30:36:ff:46:0f:
                    40:d6:4a:8f:96:5a:e3:34:2b:e5:e2:b3:5f:67:a4:
                    d9:1d:85:d3:d2:05:2c:ba:10:9a:ee:0e:eb:5e:df:
                    93:6f:fa:80:20:ca:73:7a:d7:4a:e6:b6:2c:90:a1:
                    6d:3c:85:66:fa:ac:87:3d:24:2a:0b:c2:ae:6f:d9:
                    d1:d4:f7:11:c0:05:d2:37:34:59:70:a9:57:20:04:
                    c7:01:c1:36:e5:3f:e2:09:94:df:3c:02:63:8e:05:
                    c2:53:1c:fc:b7:ec:16:20:84:78:47:98:02:72:01:
                    f6:dc:c4:3f:5c:dc:6b:9b:df:20:12:b6:79:a4:36:
                    cb:c1:ed:84:68:66:c5:2b:fb:b8:08:81:f7:32:fe:
                    38:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:E0:95:9A:B7:77:2B:F6:67:53:58:0C:3F:45:88:BD:98:4B:00:0C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/24E0959AB7772BF66753580C3F4588BD984B000C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.168.0/22
                IPv6:
                  2804:6bb4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270418

    Signature Algorithm: sha256WithRSAEncryption
         63:6d:2c:3e:37:0c:2e:65:20:8b:b0:43:2e:2e:88:20:f8:fc:
         cb:fa:69:cb:78:a0:cb:83:5b:17:1d:2d:65:a8:87:56:ea:d4:
         ad:79:fc:36:f8:65:71:f3:2f:b9:b0:7a:ff:09:2c:02:01:f8:
         4e:6f:2a:8e:7d:8d:5e:60:ca:d1:6c:cf:eb:4b:71:63:a9:17:
         c4:c2:dc:3b:88:64:65:17:c6:25:3e:77:db:d7:17:d7:19:3b:
         53:88:57:54:8b:a6:bc:85:f0:0c:af:b8:03:6c:7a:5f:d9:a9:
         5c:4c:7f:ae:fe:3b:e7:33:9f:1e:b6:25:ee:c0:a5:6b:c4:ff:
         08:a0:5d:46:39:a8:76:1d:32:65:45:fe:0b:df:6a:e9:57:76:
         c2:f5:19:3a:2b:17:13:56:1f:25:f6:63:1d:df:97:9c:cb:f1:
         bf:7c:24:57:59:d1:a6:8b:c0:cf:da:bc:02:ee:05:10:f7:9e:
         57:d4:e1:5e:22:b2:81:55:16:6f:63:61:44:f5:08:10:fa:ae:
         20:6d:03:2a:00:17:99:70:bb:f9:03:4c:ab:4c:82:dc:67:d8:
         e7:64:94:5e:45:8d:67:35:05:97:cf:be:ab:db:f1:8b:9a:6a:
         d1:38:be:74:44:7a:8a:2d:2c:7b:07:c1:a3:40:9e:70:3e:f8:
         66:71:61:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org