Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/26D731497C1CFA82C4EAD24B5AE0CB77B38F08D1.cer
File:                     26D731497C1CFA82C4EAD24B5AE0CB77B38F08D1.cer (raw, json)
Hash identifier:          J4kLlNsMC+QPG2gMSLq8YhU2QQ+Btjvdj/PA4UAGrNk=
Subject key identifier:   26:D7:31:49:7C:1C:FA:82:C4:EA:D2:4B:5A:E0:CB:77:B3:8F:08:D1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51941D7376DE5A140589766BB622EA8192FEF33D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/26D731497C1CFA82C4EAD24B5AE0CB77B38F08D1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Mar 2023 18:53:55 +0000
Certificate not after:    Wed 06 Mar 2024 18:58:55 +0000
Subordinate resources:    AS: 267490
                          IP: 192.141.172.0/22
                          IP: 2804:4248::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:94:1d:73:76:de:5a:14:05:89:76:6b:b6:22:ea:81:92:fe:f3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 18:53:55 2023 GMT
            Not After : Mar  6 18:58:55 2024 GMT
        Subject: CN=26D731497C1CFA82C4EAD24B5AE0CB77B38F08D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:bc:73:65:b9:89:ee:0c:ce:03:49:fd:be:91:
                    79:11:50:eb:82:96:59:f2:27:91:65:8e:9f:cf:8f:
                    ad:d3:2d:b1:8f:e5:0a:1d:b0:b6:35:82:12:76:bd:
                    26:0a:9d:bf:a4:20:c7:4d:fd:43:f0:60:9e:2a:ae:
                    55:d8:1c:f8:89:16:bc:5e:92:d3:60:6e:31:9c:67:
                    25:5d:ee:b4:f6:85:c6:25:34:37:7c:36:db:24:a4:
                    bf:85:37:5b:8d:c6:cc:b2:35:72:7d:08:ac:44:4e:
                    fa:e5:da:d7:f9:37:80:f7:03:12:29:eb:70:0c:14:
                    c5:91:61:ee:d1:d6:0e:5b:0f:63:7a:b1:7d:9b:ea:
                    ee:b8:c9:34:37:50:90:b1:fd:cf:d8:d6:e6:f6:1b:
                    d2:46:f4:04:d5:00:04:a7:98:93:de:d7:a4:c0:07:
                    4a:66:3c:c3:9c:ff:06:e9:82:ae:38:0d:65:f3:b8:
                    c2:f0:6a:8c:54:dc:e7:5d:f4:c7:65:24:a2:7a:f1:
                    9e:ed:e6:c2:66:db:38:c4:3e:6d:ef:21:47:18:ff:
                    46:29:29:65:b9:62:55:91:34:94:fa:b2:56:c4:0d:
                    dc:67:a1:70:e0:96:59:99:eb:5c:ac:0c:f7:2c:f9:
                    bf:bc:4e:17:6a:2d:31:d6:d7:13:4e:e0:38:2a:21:
                    84:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                26:D7:31:49:7C:1C:FA:82:C4:EA:D2:4B:5A:E0:CB:77:B3:8F:08:D1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3tiTeGW5HGXv8EvyLZd1UN9ytCb5AC5uHfLecuoKCSKN/0/26D731497C1CFA82C4EAD24B5AE0CB77B38F08D1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.172.0/22
                IPv6:
                  2804:4248::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267490

    Signature Algorithm: sha256WithRSAEncryption
         98:3c:a8:7d:9f:4f:31:f1:81:59:db:51:1e:4f:74:6c:d2:70:
         5a:16:c1:4a:68:eb:2b:7b:e6:56:52:f8:86:e1:f2:57:d3:3a:
         97:f8:a9:b5:56:2c:ab:22:09:ce:e1:14:74:83:45:de:22:33:
         f9:f7:d4:4d:66:07:92:1c:c2:02:ff:eb:fe:35:8a:9d:ae:98:
         65:ad:fb:a9:a9:83:47:28:45:0b:bc:34:de:e0:87:13:f6:fc:
         88:74:be:a6:77:ec:16:d6:6d:ba:ca:60:bd:4b:ae:0a:72:13:
         a8:79:5f:3a:44:22:ab:25:bd:4a:8b:b6:a3:75:6d:14:c1:f6:
         10:a1:22:0b:9a:d6:3f:c6:aa:14:0b:19:b3:fa:c5:3c:b6:19:
         94:8e:c6:09:6a:f9:7c:96:fc:2a:38:45:7e:38:19:fb:c7:8e:
         a3:0b:e8:90:5e:0f:53:86:b8:2f:74:39:4b:5a:ee:f6:e7:ac:
         be:1d:ae:8b:6b:f5:d2:29:29:79:82:de:dd:c7:66:9c:b0:0b:
         f9:fa:f4:51:eb:a7:db:96:b6:dc:e9:c0:ad:7c:ac:50:2c:c1:
         ff:e2:f3:67:f1:9c:ea:a4:65:74:1b:b1:9b:57:7d:00:95:56:
         5d:3d:84:25:a3:75:48:ef:f7:e6:1c:74:13:5e:26:cb:67:3d:
         74:c7:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org