Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/419A2E42DF188ACEF915C715DAE3757B6ACA80C1.cer
File:                     419A2E42DF188ACEF915C715DAE3757B6ACA80C1.cer (raw, json)
Hash identifier:          y1mnT3MJrYECdGPnJkeYpjcEJqODaz9iHFlzo8ErplA=
Subject key identifier:   41:9A:2E:42:DF:18:8A:CE:F9:15:C7:15:DA:E3:75:7B:6A:CA:80:C1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0F06821839A3669599BE31E1BE442F6349A9D1A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/419A2E42DF188ACEF915C715DAE3757B6ACA80C1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 23:19:28 +0000
Certificate not after:    Tue 03 Dec 2024 23:24:28 +0000
Subordinate resources:    AS: 53107
                          IP: 131.100.24.0/22
                          IP: 131.100.228.0/22
                          IP: 143.137.188.0/23
                          IP: 177.53.148.0/22
                          IP: 177.93.104.0/21
                          IP: 181.191.208.0/22
                          IP: 186.209.112.0/21
                          IP: 187.108.192.0/20
                          IP: 2804:1740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:06:82:18:39:a3:66:95:99:be:31:e1:be:44:2f:63:49:a9:d1:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 23:19:28 2023 GMT
            Not After : Dec  3 23:24:28 2024 GMT
        Subject: CN=419A2E42DF188ACEF915C715DAE3757B6ACA80C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ce:fa:53:09:d6:4c:f1:fc:5e:5e:23:2d:f9:
                    c1:13:3f:20:f6:2b:b9:8d:69:48:12:26:56:41:47:
                    af:e5:d4:88:29:82:10:0e:d1:1f:e0:5f:94:3e:93:
                    ba:4a:f4:b7:d9:cf:bc:55:82:0d:2a:92:59:ac:8c:
                    3f:92:34:b3:e6:27:ed:b3:0f:fc:75:30:fd:27:e2:
                    99:5f:35:d7:fd:a3:33:dd:71:6f:c1:87:c4:89:24:
                    5f:aa:8d:c8:87:b1:d6:da:c5:bf:73:0c:7e:06:e6:
                    9a:46:2d:2f:a6:b2:33:3f:31:b8:42:12:4b:07:93:
                    0d:a2:72:58:8e:63:11:d1:f0:a4:46:d5:81:98:0c:
                    03:3f:9f:2a:d1:5a:51:7c:a2:04:a4:df:6a:96:9b:
                    7d:30:b3:c8:9a:60:7c:6b:c5:18:2f:92:ca:19:67:
                    bd:f0:f7:b1:93:50:1f:45:63:cd:3d:78:f7:19:87:
                    52:83:ec:30:8b:a9:83:fd:cf:3d:2b:e2:37:0e:5c:
                    11:a5:4a:1d:cd:e5:3c:93:61:0f:30:05:a3:5e:12:
                    a9:15:b0:46:df:99:cb:d0:38:81:9d:70:09:e8:ad:
                    2d:45:c6:c8:9e:3c:12:dd:90:4f:f2:35:2b:83:62:
                    42:07:61:73:56:83:47:fd:38:35:ac:ee:56:ba:46:
                    82:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:9A:2E:42:DF:18:8A:CE:F9:15:C7:15:DA:E3:75:7B:6A:CA:80:C1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H6SCuP4sb64xsrsBu4woAeqV3mF4XktwJRPZET6P54Mu/0/419A2E42DF188ACEF915C715DAE3757B6ACA80C1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.24.0/22
                  131.100.228.0/22
                  143.137.188.0/23
                  177.53.148.0/22
                  177.93.104.0/21
                  181.191.208.0/22
                  186.209.112.0/21
                  187.108.192.0/20
                IPv6:
                  2804:1740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53107

    Signature Algorithm: sha256WithRSAEncryption
         6e:a2:8e:5a:01:5f:32:15:10:56:0f:08:69:bc:92:9d:4b:78:
         e4:75:cb:7a:42:e5:9b:6d:c5:bc:88:0f:64:d0:7a:f0:3a:dd:
         7e:03:d6:2b:de:2f:68:1b:bf:6c:19:a2:a6:f9:50:27:77:ad:
         ff:0d:83:db:07:d5:11:9f:eb:8d:b9:cd:2c:e0:e5:32:35:ee:
         8c:b2:9f:a5:4f:f9:97:6b:61:46:e1:cf:b2:24:26:54:e0:14:
         07:69:4e:94:97:4c:2b:21:ac:a7:9f:ea:61:cd:23:91:38:ca:
         dc:cf:50:30:bf:8a:d5:66:51:a6:5a:f4:9b:3f:00:45:fa:18:
         69:10:fd:cc:cf:c6:49:da:e9:24:18:3c:9e:4c:6c:2a:af:4e:
         42:5e:b5:d6:bf:63:f6:66:35:8e:a6:6a:47:7c:c5:5e:cc:c9:
         72:63:61:a8:1b:d4:51:21:ce:4e:3a:3b:e4:6c:c4:e2:40:e3:
         d0:de:b6:52:e0:4b:00:44:50:69:92:a6:79:8d:d9:32:b4:5e:
         7c:74:c2:54:c7:ce:11:49:3c:30:5c:8a:64:7b:aa:70:37:40:
         4d:c5:fa:aa:0a:4e:0d:c0:54:61:af:f9:f2:b5:44:0e:95:8e:
         c1:f6:22:60:9d:80:07:77:b8:7e:fe:4e:2f:71:64:7c:7b:bc:
         67:24:89:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org