Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/352873C94E804AB5EFC4631A59D56FDD73DA22C9.cer
File:                     352873C94E804AB5EFC4631A59D56FDD73DA22C9.cer (raw, json)
Hash identifier:          2zpn5hJLW/I/C91u+PgVoP8yHeH2xzKHP6jgIIS9gsw=
Subject key identifier:   35:28:73:C9:4E:80:4A:B5:EF:C4:63:1A:59:D5:6F:DD:73:DA:22:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3216EFC56586C4AEA57A2A941FA9D94603263AB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/352873C94E804AB5EFC4631A59D56FDD73DA22C9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2024 12:32:22 +0000
Certificate not after:    Tue 18 Mar 2025 12:37:22 +0000
Subordinate resources:    AS: 61895
                          IP: 177.91.16.0/20
                          IP: 2804:1184::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:16:ef:c5:65:86:c4:ae:a5:7a:2a:94:1f:a9:d9:46:03:26:3a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 19 12:32:22 2024 GMT
            Not After : Mar 18 12:37:22 2025 GMT
        Subject: CN=352873C94E804AB5EFC4631A59D56FDD73DA22C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:93:60:7a:c1:71:b8:a6:a7:81:56:b9:d0:
                    37:ac:5c:c9:bd:ab:03:c7:ac:68:43:63:23:13:95:
                    96:37:6d:c9:fa:f6:74:b2:b3:aa:7d:20:2f:77:3e:
                    fc:67:9f:49:3a:9a:f3:80:d4:8f:b4:9d:a5:4a:c8:
                    59:8b:c8:f8:5c:1f:8d:0d:51:16:3a:98:a4:05:a4:
                    80:fb:c6:0a:11:96:3e:e9:92:4e:b6:9b:40:c8:8c:
                    5e:e5:ee:0b:6a:b8:5e:b7:3f:6a:bf:58:29:5f:a6:
                    f1:8b:f4:8d:e5:64:7c:63:d5:dc:5e:89:39:8b:32:
                    76:41:60:3d:91:4c:13:9e:f1:f8:ce:d0:b9:17:f8:
                    f3:4e:03:f2:a2:84:03:fc:a3:fe:37:03:87:d6:03:
                    cf:57:c1:cc:22:5d:05:3d:d9:eb:58:6c:e2:c2:cc:
                    8a:8f:47:26:c4:ed:60:ac:d3:07:6d:b2:51:22:41:
                    48:d0:6d:c7:d9:0c:31:ee:5d:45:4b:b1:59:23:2c:
                    71:71:a1:85:cb:0c:8f:5a:e5:89:44:36:69:79:e3:
                    51:59:9c:f6:44:b7:70:4d:65:87:48:83:38:7c:57:
                    ea:32:4c:15:0a:54:00:d3:d0:90:05:d0:df:5b:77:
                    dd:a9:29:48:78:dd:06:10:7a:d9:6a:a1:b0:31:12:
                    b8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:28:73:C9:4E:80:4A:B5:EF:C4:63:1A:59:D5:6F:DD:73:DA:22:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6xsVWJk6gz5tm3UEmCCBRKe67Xi2wWeK3iZyyjJrCyyV/0/352873C94E804AB5EFC4631A59D56FDD73DA22C9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.91.16.0/20
                IPv6:
                  2804:1184::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61895

    Signature Algorithm: sha256WithRSAEncryption
         87:80:43:69:96:1e:4b:df:55:26:72:31:86:9b:d0:13:cc:88:
         fd:4d:29:61:f5:31:c4:75:04:64:c3:9a:02:a3:eb:b3:7a:93:
         7f:4a:16:fa:68:c0:79:e2:15:98:c8:a3:15:29:31:18:23:5d:
         27:98:3b:fd:37:6b:08:18:46:6b:6d:9e:4d:5c:5b:3f:03:57:
         07:0d:7f:b6:bc:9a:19:3b:37:ff:b2:ce:9b:89:95:78:5a:05:
         4c:f5:71:26:0c:26:71:54:ad:f3:e7:d9:99:a2:a4:5c:6c:37:
         1e:7c:f0:41:3f:12:58:2f:0f:53:8b:72:83:c4:47:24:1e:32:
         b6:1d:c1:ca:dc:77:b2:52:87:45:7c:e2:f9:28:d4:ea:08:82:
         94:2c:3e:7b:5a:a5:54:c3:d8:d2:82:b3:b8:39:dd:6c:8e:6b:
         7a:d1:86:49:83:da:10:4f:ab:0b:4c:ee:d5:1d:14:98:f3:9d:
         93:1f:64:dd:dd:19:5e:e9:31:aa:3c:43:a4:c5:89:56:8f:4a:
         49:e9:96:4a:15:2f:7f:48:ac:fc:cf:20:a9:81:1b:38:1a:39:
         44:be:5d:29:55:16:37:6b:5a:00:d2:48:4d:4d:7b:3d:f3:61:
         6c:92:26:8b:af:0b:a7:a4:6f:96:ba:4f:e3:d2:c4:0c:63:39:
         47:ab:a9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org