Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/31E92968DDBD56979B58FC3703D49BEA42ADFCFA.cer
File:                     31E92968DDBD56979B58FC3703D49BEA42ADFCFA.cer (raw, json)
Hash identifier:          kFiAkiGfOAJW8wpqbc2MuOnMaGtW5cGbUVVpsk8jsW0=
Subject key identifier:   31:E9:29:68:DD:BD:56:97:9B:58:FC:37:03:D4:9B:EA:42:AD:FC:FA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B8EC097BA33F9049A51030561D60F7D47D8D4A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/31E92968DDBD56979B58FC3703D49BEA42ADFCFA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Jul 2023 01:29:30 +0000
Certificate not after:    Wed 24 Jul 2024 01:34:30 +0000
Subordinate resources:    AS: 61726
                          IP: 131.72.96.0/22
                          IP: 2804:1b68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8e:c0:97:ba:33:f9:04:9a:51:03:05:61:d6:0f:7d:47:d8:d4:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 26 01:29:30 2023 GMT
            Not After : Jul 24 01:34:30 2024 GMT
        Subject: CN=31E92968DDBD56979B58FC3703D49BEA42ADFCFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:63:cb:b2:b8:53:d7:89:12:63:e1:20:67:
                    b0:a3:fd:dd:24:67:df:17:e4:1a:4b:37:ed:df:4b:
                    b9:ff:dd:a3:2e:d2:58:74:ac:51:a9:94:0a:8a:90:
                    ab:9e:51:dc:ef:31:35:59:02:72:90:ba:67:4c:05:
                    19:de:66:d5:f9:2e:fa:b2:76:49:32:57:91:33:d7:
                    8c:57:6a:25:fd:71:b3:df:cb:25:2d:06:e8:13:87:
                    13:ee:0c:1a:76:d1:4f:60:f0:ce:b3:52:cd:af:c8:
                    8e:52:79:b8:a5:c2:57:09:58:23:4c:32:e3:ab:82:
                    88:f6:bb:4f:98:aa:3b:49:0c:1f:09:71:b8:2c:67:
                    6d:ce:8b:1d:87:2b:36:11:94:25:b6:ec:e5:23:7d:
                    dc:38:a6:30:dd:ca:0c:2f:0c:26:da:c1:35:75:76:
                    e5:20:b2:1d:80:eb:1a:d1:af:84:02:ee:87:c5:be:
                    59:81:a5:de:c1:bb:d2:a7:bd:9e:f7:a6:b3:e2:dc:
                    01:ab:62:56:a1:0c:29:01:b5:c7:5b:19:2b:bf:76:
                    24:e1:1e:86:1e:34:0b:47:55:1c:68:4b:fb:54:37:
                    e9:5f:06:07:71:64:f5:ce:8c:70:79:67:2c:0e:25:
                    f3:23:08:0a:37:79:25:84:2e:35:66:53:be:47:18:
                    5c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:E9:29:68:DD:BD:56:97:9B:58:FC:37:03:D4:9B:EA:42:AD:FC:FA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/31E92968DDBD56979B58FC3703D49BEA42ADFCFA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.96.0/22
                IPv6:
                  2804:1b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61726

    Signature Algorithm: sha256WithRSAEncryption
         2c:9e:b9:21:ce:bf:43:b0:36:ff:f4:bb:24:af:84:4d:4b:11:
         d8:36:1f:60:d3:aa:2d:d8:12:67:e6:99:b8:15:75:80:41:ea:
         95:35:41:b3:30:17:44:a7:80:5b:1c:4a:79:9f:af:d7:b5:7b:
         19:3f:73:d1:e0:2c:f1:c4:4a:83:57:a4:11:f7:08:1a:28:0f:
         50:c8:02:3b:cc:e3:aa:6f:9d:fd:bb:e9:c6:e3:20:43:66:90:
         4b:fc:66:1c:f3:c4:d3:ae:a7:36:f5:a1:4b:a8:c3:da:6f:59:
         db:77:9d:f7:29:50:dc:dc:48:88:9c:56:45:7f:5d:37:d2:ba:
         62:72:4c:9d:6b:5c:dc:92:c6:5b:dc:4e:9d:9d:d2:1e:ee:e7:
         63:7b:ef:0f:fd:01:37:40:9e:cd:f7:44:57:b5:4e:51:c3:0e:
         9e:e5:11:cc:7b:d4:b0:c5:70:90:40:a7:a3:c8:5a:19:8c:70:
         d7:e2:c1:a6:e2:38:af:b9:e4:73:4e:1d:93:39:86:9a:13:57:
         17:d9:1d:90:11:1a:bf:d8:e6:03:fe:2b:22:0c:9a:da:ba:20:
         41:5e:84:9b:80:d3:3e:fc:1d:8c:a5:cb:d5:e9:66:49:4b:6c:
         46:d2:df:13:04:ca:8b:5c:d5:66:30:10:74:34:ae:71:54:21:
         8e:82:26:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org