Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F.cer
File:                     2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F.cer (raw, json)
Hash identifier:          eg+e8Qy/U1xFTEIVMhecS/bzNDPqDsTiT0R4Kn6zA3k=
Subject key identifier:   2A:49:F6:1A:38:C4:E4:F1:DB:9B:F9:3B:13:E1:3C:54:88:74:FD:4F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       618CA510A8990A100E4D289CF72FD86DEFD860D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/1/2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 Apr 2024 15:17:55 +0000
Certificate not after:    Sat 05 Apr 2025 15:22:55 +0000
Subordinate resources:    AS: 271246
                          IP: 192.231.118.0/23
                          IP: 2801:80:3e20::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:8c:a5:10:a8:99:0a:10:0e:4d:28:9c:f7:2f:d8:6d:ef:d8:60:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  6 15:17:55 2024 GMT
            Not After : Apr  5 15:22:55 2025 GMT
        Subject: CN=2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:7e:82:0f:f6:12:df:dd:fe:4b:96:ae:7d:
                    1f:f7:e3:96:7c:36:45:98:d2:5b:16:59:e6:54:3f:
                    3a:0c:2e:68:86:b3:17:d7:e3:f3:6a:a4:8e:98:48:
                    7d:07:76:90:d0:62:a5:43:4d:b3:65:ea:5a:81:90:
                    30:ce:75:34:b9:17:00:88:db:cf:86:2f:1c:f6:74:
                    c3:c2:a1:85:74:df:e2:87:48:5d:a3:58:0f:ec:61:
                    6b:ae:5e:20:21:73:99:a7:33:24:14:58:a5:71:1f:
                    44:a2:d5:f7:9b:a4:be:95:c4:6c:52:95:9f:43:f5:
                    96:ee:d4:c5:26:47:8d:e0:50:29:0b:91:0a:8b:4b:
                    eb:d8:5f:16:fa:24:9f:8c:44:2a:d4:b1:e0:d6:95:
                    f1:06:ea:fa:77:4d:b1:28:c1:57:35:65:b2:bb:88:
                    7c:c9:54:b1:dc:10:0b:ea:2a:46:61:54:20:9c:40:
                    36:2a:a2:63:f3:c0:94:e2:45:e6:ed:28:d2:d6:c9:
                    ff:44:21:22:01:46:37:50:02:c5:43:c5:a9:b4:36:
                    fb:de:9e:0e:d8:a4:48:0f:a0:8c:bc:18:79:0e:37:
                    02:de:a8:56:78:1f:12:8d:08:b8:b6:85:a3:1b:1a:
                    60:10:55:97:c6:b3:7a:f5:ed:ab:95:92:db:ef:b2:
                    93:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:49:F6:1A:38:C4:E4:F1:DB:9B:F9:3B:13:E1:3C:54:88:74:FD:4F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H5ChUXD24ZYo3x5eh8GS5gxH5XLqEGDoDBEjqA3kU9pn/1/2A49F61A38C4E4F1DB9BF93B13E13C548874FD4F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.118.0/23
                IPv6:
                  2801:80:3e20::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271246

    Signature Algorithm: sha256WithRSAEncryption
         94:6d:79:04:ed:e5:ef:96:c0:d6:36:8d:fc:59:0e:55:cb:e9:
         db:92:65:22:5c:47:19:99:34:df:4d:b7:fc:f3:ce:70:86:51:
         97:48:97:fe:3a:06:dd:e0:1b:e8:b5:6a:b5:bd:96:4d:1a:20:
         2c:21:fe:5e:87:7e:eb:83:ee:66:62:b6:00:29:65:28:35:df:
         d6:89:32:a2:ff:ca:3c:a6:f1:10:43:6d:a0:e7:84:99:bb:7c:
         ff:65:56:7a:f9:bc:ca:be:e8:9f:f5:f5:d8:72:e8:a7:9a:d8:
         58:e4:e4:eb:02:33:55:4b:ba:bd:e2:6c:37:f9:d7:1f:13:90:
         5e:a5:6d:40:e6:2b:bb:78:df:39:37:0e:84:2d:3a:f0:4a:89:
         f2:8a:19:61:98:13:da:ba:77:04:f6:07:c6:56:41:80:71:48:
         61:ed:03:be:af:53:4f:9d:46:5b:68:f3:b3:72:c2:73:79:12:
         f6:56:2c:34:5e:e8:ee:59:f8:d1:9c:f6:cc:64:2d:43:95:f8:
         01:d3:21:4f:45:cb:c3:12:1f:e7:c6:2a:ed:8c:fe:c3:9c:e3:
         be:1e:dc:67:28:54:44:9f:aa:14:58:74:e3:10:ab:ee:54:b8:
         6e:fb:0b:89:d6:b1:8b:dc:e5:34:26:52:ad:b2:0f:5a:72:9a:
         d7:3e:ab:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org