Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/24FAD869D13955BC3FF5B25755564DDA5B30A63A.cer
File:                     24FAD869D13955BC3FF5B25755564DDA5B30A63A.cer (raw, json)
Hash identifier:          xzf3fDWiOcDS5HfUmdC+1F12/GP7x2hvER6CJnsVgKA=
Subject key identifier:   24:FA:D8:69:D1:39:55:BC:3F:F5:B2:57:55:56:4D:DA:5B:30:A6:3A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DAA92E2BC80381DD1AAB67051510DD90A462086
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/24FAD869D13955BC3FF5B25755564DDA5B30A63A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Dec 2022 22:12:06 +0000
Certificate not after:    Fri 15 Dec 2023 22:17:06 +0000
Subordinate resources:    AS: 271418
                          IP: 181.224.40.0/22
                          IP: 2804:7b38::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:aa:92:e2:bc:80:38:1d:d1:aa:b6:70:51:51:0d:d9:0a:46:20:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 16 22:12:06 2022 GMT
            Not After : Dec 15 22:17:06 2023 GMT
        Subject: CN=24FAD869D13955BC3FF5B25755564DDA5B30A63A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:27:f9:8a:53:7e:9b:9c:16:45:22:6d:2e:6d:
                    fb:d1:a6:c0:c6:ea:1b:f0:6d:13:d9:66:69:2d:04:
                    9e:4b:85:a9:ee:ed:d7:6e:b9:78:59:1f:01:54:67:
                    c5:c9:b4:79:7d:04:ef:8e:9c:0f:c3:0d:95:fc:f0:
                    7d:1d:52:d2:da:62:a9:92:f5:1e:30:17:a3:e4:d5:
                    42:ed:ae:c4:7e:ab:5d:3c:06:e9:0e:b1:70:fc:25:
                    e3:fd:b3:4d:f9:22:b7:90:e2:66:50:78:bd:5a:fe:
                    58:72:87:9f:18:28:7d:51:73:25:19:4d:91:9d:90:
                    89:9a:5e:6b:f0:23:4f:21:74:2d:b4:ce:a7:46:d0:
                    77:76:6b:72:c3:3b:c5:6b:94:c6:e4:ab:34:15:7d:
                    74:64:ba:73:c3:76:62:5f:46:0f:eb:77:e8:9e:0d:
                    19:92:a8:e2:54:73:4f:9c:b8:6b:85:24:3d:89:be:
                    e5:8b:0e:f6:b5:8e:71:60:06:6f:48:15:25:25:9c:
                    66:fd:89:2d:f1:5c:92:44:0c:c1:e5:de:40:84:fa:
                    5a:fc:60:ef:49:07:9b:50:02:00:27:08:81:80:0d:
                    77:98:60:2e:2f:2d:6f:92:22:9b:98:c0:df:e3:7f:
                    e5:b7:a1:3d:5c:27:31:92:8e:b4:13:a2:9c:30:00:
                    18:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:FA:D8:69:D1:39:55:BC:3F:F5:B2:57:55:56:4D:DA:5B:30:A6:3A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Dg4BB9CjZgYDyRzZFVsXjYxc8CinzUA6QjgtPy4L7frA/0/24FAD869D13955BC3FF5B25755564DDA5B30A63A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.40.0/22
                IPv6:
                  2804:7b38::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271418

    Signature Algorithm: sha256WithRSAEncryption
         67:df:58:68:ef:90:be:b9:f0:b7:d2:c2:3d:74:97:ce:56:3f:
         4f:d5:6e:9e:9e:af:2b:7b:7d:05:82:05:0b:8c:aa:88:59:71:
         7e:76:79:e6:d3:f4:ac:49:81:bf:cf:d0:76:8d:d2:d2:d7:56:
         27:c5:d0:35:34:98:19:e3:e6:29:de:76:6f:c5:bf:6d:36:e5:
         54:ad:1d:d9:cd:7f:2f:de:c9:d0:87:35:27:fb:45:36:5f:55:
         fe:7b:2a:f9:c3:8b:88:78:a6:48:2b:ec:69:00:9f:73:01:68:
         d6:44:76:fd:51:2a:57:5f:2e:91:9c:fd:c1:24:11:db:ec:ec:
         95:40:31:e6:4a:e3:69:b0:af:c4:5a:d2:da:99:77:3f:0f:35:
         e5:4b:4c:20:1f:c2:37:d4:e9:39:f4:0d:31:b8:b7:a5:a0:d3:
         2e:4f:e1:81:3f:42:d0:96:5c:c8:90:a0:1f:1b:b1:15:f6:49:
         cf:0e:56:43:81:1a:a1:35:c9:68:7c:b0:bf:e7:04:60:b2:9a:
         0c:f6:92:23:fc:3c:bc:1a:6e:6d:9f:64:a7:4c:47:0d:42:50:
         99:03:ca:2b:aa:a0:64:64:fb:43:68:5c:50:58:90:f7:e3:e0:
         2b:ca:90:60:87:70:cc:f8:2d:34:c0:54:ca:f4:2d:f9:47:98:
         a9:48:3c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org