Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/411194BD84722FD252C79F3307A7C3ACFDC84782.cer
File:                     411194BD84722FD252C79F3307A7C3ACFDC84782.cer (raw, json)
Hash identifier:          1ASE2ywC1bSTv+hdRAGSUbEYCUhqhv0aZkeiqjasMX4=
Subject key identifier:   41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6C7FBEEE0E3B19DB3512976287CEEBBE266A754A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 23:22:40 +0000
Certificate not after:    Fri 12 Jul 2024 23:27:40 +0000
Subordinate resources:    AS: 263421
                          IP: 168.121.156.0/22
                          IP: 168.195.220.0/22
                          IP: 179.191.240.0/20
                          IP: 2804:1600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7f:be:ee:0e:3b:19:db:35:12:97:62:87:ce:eb:be:26:6a:75:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 14 23:22:40 2023 GMT
            Not After : Jul 12 23:27:40 2024 GMT
        Subject: CN=411194BD84722FD252C79F3307A7C3ACFDC84782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ea:20:2f:a7:b7:8c:7d:3a:42:6f:26:04:17:
                    a3:f8:b5:60:9a:84:53:81:8f:bc:97:a0:e6:53:f9:
                    b2:ee:7a:54:90:20:e6:dd:d1:20:88:fc:b9:aa:3e:
                    e0:fb:f6:6d:3d:f4:3e:33:91:55:f5:78:f3:e1:13:
                    6c:9f:b1:a1:8e:c9:89:b0:b2:32:89:d9:8c:75:f9:
                    bb:89:9d:d7:0b:de:a9:7f:81:2d:11:50:b0:2b:ff:
                    4c:46:bb:f7:7c:39:4b:4b:4a:29:7d:db:34:48:b1:
                    57:ac:cc:9e:2a:01:1b:e0:77:9d:bf:fc:de:0d:85:
                    a4:28:e2:f6:95:10:c8:2b:c0:92:1f:cc:bd:da:21:
                    68:d1:45:80:d7:47:a7:2c:a5:1d:94:15:65:ca:99:
                    4a:a1:f1:2a:0a:ef:10:07:89:55:03:11:15:1f:f1:
                    19:53:1a:f8:0a:33:ce:9f:bf:1a:dc:36:68:3c:a7:
                    d3:c1:46:e7:24:03:01:b7:c4:bd:c8:99:80:45:af:
                    79:d4:00:56:bb:f0:4c:65:0f:4c:a8:d7:d1:e3:0a:
                    2d:65:7a:19:a0:72:f1:35:77:74:04:8f:ca:08:a1:
                    3c:03:bb:22:c8:56:0e:01:6b:62:b2:99:2f:e1:ba:
                    98:58:f5:be:5c:ff:e0:4e:37:40:1a:a8:ef:a5:8c:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:11:94:BD:84:72:2F:D2:52:C7:9F:33:07:A7:C3:AC:FD:C8:47:82
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BnwUHpu6rWLBqpzdFWXVvUAEmFYXvx7anSLtWhqjgLyF/0/411194BD84722FD252C79F3307A7C3ACFDC84782.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.156.0/22
                  168.195.220.0/22
                  179.191.240.0/20
                IPv6:
                  2804:1600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263421

    Signature Algorithm: sha256WithRSAEncryption
         76:79:4e:8b:77:54:d2:54:aa:16:d3:11:cb:80:e7:57:c4:b8:
         16:3d:9f:52:8b:04:79:ce:bd:05:bc:d5:5b:94:a3:d5:1f:48:
         d8:ac:6b:5f:79:81:b2:20:6a:ff:19:27:55:c7:5a:cd:06:90:
         ae:b9:f0:3f:6a:69:3d:4b:c3:13:07:02:7d:87:98:64:80:5e:
         0a:14:83:b9:d7:34:43:af:f5:98:b0:52:ca:4b:ff:fa:1d:14:
         e5:07:fd:ac:ba:07:f5:9c:1d:60:ae:59:5e:4b:63:cc:39:5d:
         30:99:91:67:33:cf:41:c1:0f:f1:ed:57:a7:67:72:71:a0:c7:
         50:a7:81:a4:20:58:37:51:bd:93:d1:63:0a:4d:da:83:33:ae:
         bd:3e:b0:0e:dc:4f:8f:5f:5d:05:82:03:14:42:f6:fa:7d:ac:
         83:4c:f3:92:97:ec:85:38:87:6d:e4:bb:f8:c8:e1:36:7a:5d:
         b5:e1:74:f6:7f:f6:a6:16:2e:cb:ea:cc:32:c0:37:aa:b2:30:
         a0:00:ce:4b:8f:1c:86:d3:1e:3b:d0:9d:80:15:e2:bb:bd:fd:
         cc:af:fd:68:27:29:ea:22:d3:9a:13:af:60:b9:15:d4:78:3d:
         0f:41:7d:e1:d8:a8:d7:6a:fc:92:58:0d:7d:52:cc:06:13:b0:
         83:24:12:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org