Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/32149EE0DC10ABC770C49D053156E085CC1E2144.cer
File:                     32149EE0DC10ABC770C49D053156E085CC1E2144.cer (raw, json)
Hash identifier:          iVVxqejwLN1YFvn+Q5rXU+4Bp42Lj42dOFAY3tS7EeM=
Subject key identifier:   32:14:9E:E0:DC:10:AB:C7:70:C4:9D:05:31:56:E0:85:CC:1E:21:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0196DF7B2A841EEB117E9CE0465785D351D3441E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/32149EE0DC10ABC770C49D053156E085CC1E2144.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 12:40:11 +0000
Certificate not after:    Tue 11 Feb 2025 12:45:11 +0000
Subordinate resources:    AS: 266509
                          IP: 170.244.204.0/22
                          IP: 2804:38e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:df:7b:2a:84:1e:eb:11:7e:9c:e0:46:57:85:d3:51:d3:44:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 12:40:11 2024 GMT
            Not After : Feb 11 12:45:11 2025 GMT
        Subject: CN=32149EE0DC10ABC770C49D053156E085CC1E2144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:81:56:84:10:6b:d3:b8:38:6b:6f:15:a5:
                    7e:03:b4:ef:7d:16:4d:a5:e0:51:a4:a1:3e:dd:ff:
                    7d:93:d8:46:15:71:2c:ac:fd:45:e2:83:98:73:f7:
                    5a:ff:43:fe:c3:ed:f7:02:75:5f:16:22:01:52:73:
                    e7:3f:1d:c6:a2:f5:6e:03:e7:82:a3:45:82:4b:55:
                    dc:43:85:ec:00:c6:38:67:b7:4b:53:1e:34:96:f0:
                    8f:ca:f2:43:db:88:5a:fd:13:da:2e:45:03:ab:da:
                    e6:d3:73:af:87:35:94:42:41:8f:91:da:66:28:4e:
                    dc:d3:02:7c:4a:df:72:92:01:28:f5:75:5f:6b:f7:
                    08:9f:1d:d3:e8:d1:39:bb:1c:fb:0e:84:c3:56:f6:
                    da:6f:cd:44:29:b8:87:b5:56:4d:1b:70:f4:1b:c8:
                    a6:f8:a7:fd:b0:c2:8a:8e:ad:4a:80:7d:15:01:38:
                    5a:89:18:81:c4:d0:20:ad:cf:c3:ac:59:8f:e4:bc:
                    8a:50:92:83:65:bd:57:f5:79:5d:ae:66:03:8a:e1:
                    56:a4:48:fd:89:6c:f9:c2:df:0f:ba:a9:66:2e:4b:
                    39:0a:21:88:dc:c8:ce:c6:e6:9e:d1:40:37:6a:08:
                    45:b5:d6:ba:b8:2f:cb:61:a4:ee:49:93:9d:1f:84:
                    eb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:14:9E:E0:DC:10:AB:C7:70:C4:9D:05:31:56:E0:85:CC:1E:21:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A35m83h9gtwB8Z94nneb4iK3mtQ55TJUjURGnUqVDfUq/0/32149EE0DC10ABC770C49D053156E085CC1E2144.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.204.0/22
                IPv6:
                  2804:38e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266509

    Signature Algorithm: sha256WithRSAEncryption
         1d:31:e9:df:fb:23:e0:3d:ee:60:54:e9:c4:5f:41:8c:ed:e6:
         07:68:a6:c6:32:08:4f:9f:18:fd:39:10:35:f6:69:08:3f:e7:
         62:2e:98:db:8c:3f:6d:f9:fc:92:25:c2:5a:78:8b:e6:22:9b:
         db:ac:c5:33:b9:a0:21:17:4b:fa:c3:db:52:2f:19:08:c0:32:
         b4:b5:02:9a:d1:bb:7e:22:c9:cd:d6:fc:e5:78:e7:0b:db:a2:
         ef:96:06:34:d3:72:ee:a6:b1:14:8c:9a:dc:e5:19:8c:61:c5:
         de:04:7d:f3:f8:6e:03:27:bc:a2:a9:c1:ab:8c:fc:e0:07:7e:
         c9:9d:1e:e7:2f:a8:6e:aa:eb:87:5f:23:d2:18:4b:07:e4:78:
         89:e8:6e:3a:4d:11:92:47:58:fd:41:bd:a9:b7:a8:88:fa:27:
         c6:bb:87:09:26:45:01:cb:64:a2:9c:0c:0f:25:9e:69:e7:49:
         c6:94:3e:f5:57:ec:42:5b:62:cb:38:04:fe:32:b8:a9:9f:98:
         14:d9:99:54:5e:e1:fc:c3:22:ce:6a:df:5c:f9:e1:cf:d5:71:
         9a:7d:22:24:a3:17:9f:36:4a:6a:73:2e:ad:d5:59:cd:d8:70:
         f4:f5:69:38:d8:91:f0:a4:dc:29:7c:38:76:5c:dc:77:8c:05:
         4f:3d:2e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org