Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/32AF31FAE0EB546597DD848209C6B71F94237AE9.cer
File:                     32AF31FAE0EB546597DD848209C6B71F94237AE9.cer (raw, json)
Hash identifier:          bxh3hi2QJBw7g5dY5aM6VI8ajasHOurCo+MRGsDWexo=
Subject key identifier:   32:AF:31:FA:E0:EB:54:65:97:DD:84:82:09:C6:B7:1F:94:23:7A:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0324627B6668BCFF5B10786708513FE789B3E340
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/32AF31FAE0EB546597DD848209C6B71F94237AE9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 07 Nov 2022 18:31:14 +0000
Certificate not after:    Mon 06 Nov 2023 18:36:14 +0000
Subordinate resources:    AS: 271592
                          IP: 190.9.120.0/22
                          IP: 2804:7df0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:24:62:7b:66:68:bc:ff:5b:10:78:67:08:51:3f:e7:89:b3:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 18:31:14 2022 GMT
            Not After : Nov  6 18:36:14 2023 GMT
        Subject: CN=32AF31FAE0EB546597DD848209C6B71F94237AE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:14:4a:9b:b9:b5:71:ad:83:77:5f:0c:d7:73:
                    18:58:8a:5f:52:ae:1c:67:2c:c0:e3:bb:e1:d4:e4:
                    a7:f7:ac:70:e5:3d:d4:7a:0d:7c:41:d9:b6:8e:f4:
                    49:10:d8:8d:96:7c:5b:27:81:c6:75:6f:ef:3b:40:
                    ae:85:45:f4:36:d0:c0:e5:bf:fe:39:b8:29:c3:54:
                    b1:a9:98:16:ab:f6:ca:04:f6:25:d3:ac:b1:79:0b:
                    16:a5:39:72:50:ff:2e:cb:e3:bf:b3:0d:01:16:8c:
                    2d:af:a6:f7:48:9e:2f:2b:6c:37:b0:06:c5:f9:4d:
                    fa:56:c4:c8:81:0c:a5:7f:2c:a5:26:55:8c:0c:a7:
                    16:2e:2a:a5:ca:bc:5d:e8:73:af:59:ef:85:23:89:
                    98:e0:49:82:8f:0d:72:77:0e:1f:bf:0c:5b:d8:81:
                    73:4a:5c:89:01:7f:6f:65:52:e4:81:af:b6:81:81:
                    e7:81:a4:ce:bf:dd:a9:78:a4:4d:26:b0:86:3c:19:
                    7b:df:0d:d9:9c:60:d8:1f:04:e8:45:4f:d7:bb:10:
                    98:fe:39:f9:d7:43:0c:59:f3:2e:85:f5:e6:f8:cb:
                    c5:3d:8c:06:87:28:af:7b:98:c3:d9:8a:37:51:31:
                    a5:36:c9:8e:c0:a5:d1:36:68:cc:f2:df:92:2b:bc:
                    fe:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:AF:31:FA:E0:EB:54:65:97:DD:84:82:09:C6:B7:1F:94:23:7A:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5HCqBqUWyQHW5EFkAwPPXDjPVbCBcF6oFQHSFrNpmmjT/0/32AF31FAE0EB546597DD848209C6B71F94237AE9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.120.0/22
                IPv6:
                  2804:7df0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271592

    Signature Algorithm: sha256WithRSAEncryption
         1d:af:c2:82:49:43:c4:e6:f5:52:b0:6a:ad:b3:86:e2:5e:c2:
         c6:60:3c:7e:b4:a0:c4:41:f6:04:70:0b:a3:b8:9f:00:7e:28:
         fa:be:aa:e2:ab:51:3e:6e:0b:80:a1:70:ee:5d:3a:d5:68:02:
         a4:62:5d:d4:2d:be:5e:18:51:89:c7:cf:40:9a:07:2b:94:e9:
         27:13:c7:88:8c:65:61:65:a3:09:a1:3a:5d:5b:9e:5f:5b:bd:
         6a:be:cd:b8:22:0e:82:24:fc:92:c6:92:a3:e2:aa:87:ee:ca:
         61:4b:7b:ef:89:78:52:08:7f:26:b8:78:c4:f4:4d:3b:ac:6a:
         a1:2f:e6:27:ad:4a:58:1a:72:07:c5:ce:ae:5e:f3:fc:19:f6:
         79:37:04:5c:ce:8e:ed:f5:25:65:f0:82:38:f5:db:a1:7e:35:
         d2:87:cc:9c:40:c9:02:83:ba:12:53:d6:39:63:73:a2:5b:8c:
         c7:7e:c2:9c:07:da:df:15:74:0a:2f:d0:12:a7:02:20:c5:f9:
         a9:35:42:0d:b1:15:ae:c3:13:ad:a5:85:59:df:20:42:c5:89:
         bb:de:ee:27:6c:d3:e5:e0:d0:4e:ae:0a:1d:65:fc:84:47:ce:
         cb:d2:58:e4:ba:38:60:71:a2:04:ae:46:81:db:1e:15:33:49:
         41:1f:5c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org