Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/304178719B03E20B3C17F5C1B8305E7333D1087D.cer
File:                     304178719B03E20B3C17F5C1B8305E7333D1087D.cer (raw, json)
Hash identifier:          +5XayM2NlG37/JC8iHBnLy4cB4CWp3m7qSfwlBrBo7Q=
Subject key identifier:   30:41:78:71:9B:03:E2:0B:3C:17:F5:C1:B8:30:5E:73:33:D1:08:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C2D6A80475A68643238D2AC7DFFB9AC85F75AC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/304178719B03E20B3C17F5C1B8305E7333D1087D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Mar 2024 14:09:01 +0000
Certificate not after:    Thu 27 Mar 2025 14:14:01 +0000
Subordinate resources:    AS: 53019
                          IP: 177.70.160.0/20
                          IP: 2804:5dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2d:6a:80:47:5a:68:64:32:38:d2:ac:7d:ff:b9:ac:85:f7:5a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 14:09:01 2024 GMT
            Not After : Mar 27 14:14:01 2025 GMT
        Subject: CN=304178719B03E20B3C17F5C1B8305E7333D1087D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:c3:ee:ec:4b:72:d3:fe:6e:f2:59:cc:41:
                    d8:01:b9:70:f3:bd:d4:e3:f6:22:a4:c5:66:8a:4e:
                    53:7c:3d:f6:d7:6a:99:8c:aa:4c:32:77:a2:d7:32:
                    fe:29:d4:93:99:b7:65:e9:9c:62:d3:18:a1:cc:5b:
                    d3:38:a3:c8:41:aa:b2:1a:01:91:ff:96:17:ae:6f:
                    71:e2:a8:c3:8f:02:15:f8:c1:62:9d:12:70:6f:9e:
                    36:8f:14:bb:d7:be:3a:cb:72:00:7f:d7:b4:b3:c6:
                    d9:76:af:5d:24:1e:41:d8:e3:78:fb:d4:dd:6f:03:
                    13:26:44:c4:18:6e:aa:ec:11:28:d4:f2:f1:c1:af:
                    89:77:80:42:0d:e3:cf:c9:0b:c5:b3:1b:be:c8:e7:
                    31:70:06:0f:de:aa:6c:87:53:a2:15:76:4e:55:40:
                    1e:9d:b5:0d:57:57:5f:51:c1:d4:e0:ef:50:83:1b:
                    b9:af:b4:6c:7c:5f:81:c9:48:d2:aa:67:a7:fe:4a:
                    e7:b1:73:3d:0a:4f:c0:7a:11:3c:42:4b:64:9d:f0:
                    9e:38:0e:c4:07:02:fc:b4:eb:28:b7:bc:ae:fc:f4:
                    21:dc:87:fb:06:7d:18:12:45:c0:1b:c1:60:54:d7:
                    ce:16:c8:95:9b:a7:f7:5e:e9:95:ef:e3:43:c5:13:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                30:41:78:71:9B:03:E2:0B:3C:17:F5:C1:B8:30:5E:73:33:D1:08:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/1tT1M996jgHFrQjBwqpRBassd6EhUFrCepkXicS7pQW/0/304178719B03E20B3C17F5C1B8305E7333D1087D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.160.0/20
                IPv6:
                  2804:5dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53019

    Signature Algorithm: sha256WithRSAEncryption
         13:71:06:be:8b:a4:3d:27:44:4a:e3:78:ba:a7:07:2f:fa:fa:
         39:a2:dc:29:1e:63:89:b2:54:73:10:e5:2f:d5:13:58:de:5b:
         aa:f9:0f:a9:6f:c4:a2:4d:fa:21:65:4e:0e:8e:18:6c:9f:dc:
         39:5c:93:4e:6d:e0:4a:d0:20:08:8e:fe:69:1a:2e:49:07:cb:
         b7:1e:01:9f:d3:49:48:b9:53:ad:cb:08:47:06:fe:1d:01:cf:
         95:94:75:04:f3:72:2d:8d:b8:84:63:39:42:58:7a:ab:ef:91:
         ac:83:d2:8f:e8:21:5d:e0:b1:bb:83:8d:1b:f0:ed:6a:91:85:
         17:4c:94:3c:45:16:64:ef:e1:72:c8:78:03:fc:80:0b:4d:89:
         02:1d:41:19:f1:7f:32:17:af:3d:7e:e1:78:d8:4c:03:9f:15:
         32:05:d8:17:fe:f2:b1:4d:c2:1a:9b:a8:40:f7:95:e9:ee:16:
         d8:37:00:be:16:bf:77:a8:74:6e:4c:78:93:2a:30:05:13:22:
         6c:12:14:80:fa:fc:11:0c:7d:05:47:1e:82:dd:13:bb:22:3e:
         80:31:57:52:1f:4f:12:38:bb:8b:92:9f:ee:4b:88:7d:29:88:
         02:4d:a7:bf:2c:49:fa:a6:fc:83:55:9a:64:8a:09:a6:51:44:
         84:cd:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org