Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer
File:                     486B0A016919FF614B0BDA23F974C7BB3EECDA00.cer (raw, json)
Hash identifier:          sKqpl0g213je+Ce1KnCS+PIsNxbLeVjJGnWBkUrv6sA=
Subject key identifier:   48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01A302949CC56F733BEEE3EEB2470ED88DC2C955
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 14:31:31 +0000
Certificate not after:    Thu 18 Apr 2024 14:36:31 +0000
Subordinate resources:    AS: 262709
                          IP: 187.111.0.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a3:02:94:9c:c5:6f:73:3b:ee:e3:ee:b2:47:0e:d8:8d:c2:c9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 20 14:31:31 2023 GMT
            Not After : Apr 18 14:36:31 2024 GMT
        Subject: CN=486B0A016919FF614B0BDA23F974C7BB3EECDA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6e:1d:2d:57:b8:dc:57:85:91:98:10:cd:0e:
                    b7:a2:52:42:49:07:14:b6:42:ad:b2:a7:b5:a4:05:
                    4a:16:d5:28:f3:e7:c1:8e:c4:5f:79:bb:65:88:2b:
                    0b:36:75:b1:9f:aa:c2:7d:bb:84:d7:16:27:e2:c1:
                    79:4d:11:ae:8e:92:75:a5:5b:91:1b:ae:e6:42:b4:
                    19:47:04:0b:64:ce:1c:23:4b:3a:5a:7e:49:77:af:
                    fe:a2:87:3a:46:56:00:27:ea:81:8a:07:1f:d9:d6:
                    5f:04:4f:ec:a6:af:da:61:3d:0d:06:2f:ac:1b:42:
                    17:24:cf:d7:37:34:08:a6:51:df:a1:30:12:af:8e:
                    78:4f:38:31:42:14:bb:2b:12:ec:0c:c7:82:d5:d4:
                    66:e6:69:2c:20:8a:6c:12:89:2d:b0:67:be:54:bd:
                    53:af:79:a8:e4:d5:a1:a0:bd:63:a1:e4:3c:92:5e:
                    90:6a:cb:2e:c1:4b:dd:72:bd:99:e5:1e:be:46:7c:
                    8f:f9:6c:b4:76:11:6e:06:80:9d:e3:83:bc:9e:70:
                    45:27:c7:c7:48:67:e9:d0:0e:05:6a:48:d8:95:55:
                    f7:1d:d6:77:03:c1:88:f3:b9:44:68:0f:c5:d5:b7:
                    e1:5a:bb:78:27:63:e3:d0:6d:69:54:19:57:55:f1:
                    46:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:6B:0A:01:69:19:FF:61:4B:0B:DA:23:F9:74:C7:BB:3E:EC:DA:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Hh8i3JLqn8mj9rmEZed2onhmjQjbvW5NySnaJwDKX8bq/1/486B0A016919FF614B0BDA23F974C7BB3EECDA00.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.0.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262709

    Signature Algorithm: sha256WithRSAEncryption
         45:1c:30:57:24:79:3f:37:4f:42:6c:95:53:20:28:5c:82:c5:
         20:09:e5:4e:a9:ad:d7:ac:9b:ba:49:c4:2a:85:f6:00:97:a5:
         79:e3:b9:35:65:e2:de:36:35:7c:8c:22:99:74:2e:21:80:64:
         f7:1d:db:87:87:e1:28:13:79:6c:d8:19:c0:1e:58:e1:a3:8b:
         7f:b1:ab:bb:18:94:50:58:b1:72:74:cb:72:f8:5d:7c:34:5d:
         4e:63:1b:70:a4:8d:6b:58:4c:58:50:de:09:7b:2a:5e:74:6f:
         7c:69:d9:01:3d:a3:13:18:4b:ff:ba:d6:ad:13:e9:f0:a2:c2:
         70:16:12:fa:45:ba:78:aa:91:71:5d:10:d0:85:ad:69:55:0e:
         a9:cf:0b:66:2c:76:c3:97:4d:01:ad:4d:a8:92:31:eb:e3:53:
         75:f6:fb:2b:79:be:c4:d6:16:f6:16:db:99:74:6b:34:f0:4a:
         7d:de:d4:d0:94:cc:ea:8a:33:22:d4:8d:04:13:e0:d1:bb:09:
         5a:4a:c2:9a:b1:73:07:4b:3e:4e:78:e0:b3:02:52:54:5b:d2:
         21:b1:da:44:b6:b8:6a:7a:97:0d:bb:68:36:0f:64:19:2d:9d:
         ff:ab:d2:d7:17:d0:1c:e4:76:a0:fb:ba:18:44:a7:6a:36:89:
         34:dd:d7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org