Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2719F43965E7EDB5C5356E533B3BF2F2A5B79A14.cer
File:                     2719F43965E7EDB5C5356E533B3BF2F2A5B79A14.cer (raw, json)
Hash identifier:          +9zbsiBoy5IPFrOsEOaNEsB3T7FXu/2/WQ5YRQHGLfE=
Subject key identifier:   27:19:F4:39:65:E7:ED:B5:C5:35:6E:53:3B:3B:F2:F2:A5:B7:9A:14
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D972FCC50710848326C0BE8DA8DD2E73397C5B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/2719F43965E7EDB5C5356E533B3BF2F2A5B79A14.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Aug 2023 12:32:04 +0000
Certificate not after:    Tue 20 Aug 2024 12:37:04 +0000
Subordinate resources:    AS: 264441
                          IP: 131.221.248.0/22
                          IP: 2804:1ea4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:97:2f:cc:50:71:08:48:32:6c:0b:e8:da:8d:d2:e7:33:97:c5:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 22 12:32:04 2023 GMT
            Not After : Aug 20 12:37:04 2024 GMT
        Subject: CN=2719F43965E7EDB5C5356E533B3BF2F2A5B79A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a0:ff:42:4c:28:19:08:0d:36:97:30:4f:ec:
                    1f:fb:1b:7e:da:37:e4:68:d4:8c:53:10:73:c1:1f:
                    49:b8:3f:d9:58:54:62:95:84:72:f2:5e:4f:d9:ba:
                    4b:18:63:b0:5c:ce:dd:76:30:7f:f0:3e:31:cd:5a:
                    89:2d:dc:d2:66:d1:99:62:bb:86:41:7c:96:78:06:
                    90:bb:06:12:e5:27:12:03:c2:13:4a:4e:d3:fe:90:
                    7e:a8:8f:fe:4a:d5:12:88:5b:2d:c9:ae:05:04:2e:
                    7b:28:e0:7d:86:a0:d3:e7:ae:fa:38:61:3d:4b:fc:
                    1b:f4:1d:b6:30:ed:57:6f:a3:15:f6:2d:92:ce:84:
                    18:b8:90:84:06:ce:68:58:88:9c:1c:55:4f:bb:2d:
                    7a:e3:3c:3f:2c:61:0e:57:72:26:d5:78:54:f4:11:
                    19:a4:5b:04:ef:ca:a2:40:e5:7e:c4:36:bf:bf:6b:
                    da:ce:b5:b5:56:b4:42:b3:61:4f:04:cd:c2:ce:47:
                    d2:d7:94:2e:c3:1a:a3:26:47:ff:29:a1:9c:c0:63:
                    a1:5d:50:55:30:53:52:65:16:db:6a:19:5d:12:ba:
                    7c:8f:4b:2a:a6:c9:1c:4e:4f:44:78:59:4d:94:d4:
                    65:55:60:f9:ad:3e:26:f6:ba:71:b9:a1:24:72:7c:
                    d5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:19:F4:39:65:E7:ED:B5:C5:35:6E:53:3B:3B:F2:F2:A5:B7:9A:14
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4GuK3Ndzo5Edrm4XGcAXb21kzLTujbcCdYTiXKBLQPAk/0/2719F43965E7EDB5C5356E533B3BF2F2A5B79A14.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.248.0/22
                IPv6:
                  2804:1ea4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264441

    Signature Algorithm: sha256WithRSAEncryption
         4e:18:0b:bf:71:69:2c:2d:f1:71:45:0d:3f:a1:18:01:3e:2d:
         e3:3d:e3:e4:5c:ad:a1:16:e9:ab:1c:99:4a:25:4c:2e:61:03:
         f0:ba:e1:4e:eb:ad:84:ee:c6:13:a3:05:5f:93:cb:1f:80:07:
         a6:a5:b1:9e:ff:f3:59:4e:6a:6f:14:61:a5:84:11:f3:66:e2:
         5c:04:56:73:88:19:0a:44:3d:00:07:ca:95:c3:1a:53:e1:07:
         a8:4f:af:f5:aa:5b:3a:a4:07:73:16:c3:58:17:3a:76:d7:c3:
         34:a0:a2:85:44:08:81:75:3a:69:47:e4:dc:f3:ab:62:65:22:
         4a:69:7d:7a:29:83:c6:f3:67:69:9e:aa:36:4e:17:96:38:17:
         b1:ad:df:35:49:7c:d7:b8:da:2c:68:d9:11:5f:8f:ef:6a:a7:
         c1:05:96:c2:e7:7c:5e:ac:3a:91:6f:7f:bd:04:c5:19:0f:be:
         a1:6d:58:d9:5c:19:33:d7:1a:cb:a2:28:de:47:3f:f4:ac:c0:
         01:ee:04:60:33:ff:12:5a:f4:57:eb:c8:7d:e5:cc:83:4b:d6:
         6a:42:35:87:71:fd:58:4e:fb:0a:a3:a3:8c:e4:86:d6:77:3a:
         55:d2:65:ab:2c:a1:1c:ac:c0:b7:4a:cd:bd:26:88:a7:34:d6:
         68:4c:6a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org