Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer
File:                     514A8DDF85E26D45A530C92F183967F8EA1F56A9.cer (raw, json)
Hash identifier:          oeXgRN5ztrdZJfSRtLqM8bjlbGx6EIwK76zqAItZbkI=
Subject key identifier:   51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1310FED1CE9081EBF7A5289C034E0C462D9FE953
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Jan 2024 23:05:09 +0000
Certificate not after:    Fri 03 Jan 2025 23:10:09 +0000
Subordinate resources:    AS: 61888
                          IP: 186.235.184.0/21
                          IP: 2804:e60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:10:fe:d1:ce:90:81:eb:f7:a5:28:9c:03:4e:0c:46:2d:9f:e9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 23:05:09 2024 GMT
            Not After : Jan  3 23:10:09 2025 GMT
        Subject: CN=514A8DDF85E26D45A530C92F183967F8EA1F56A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4c:63:7e:22:f4:f3:bd:1b:41:fc:3c:78:03:
                    39:57:9d:0a:e7:75:fb:cf:8a:15:22:56:46:99:50:
                    ef:3a:60:c2:15:8d:3a:59:a9:55:11:d7:11:b7:2d:
                    d0:c6:ea:be:54:87:61:01:6e:08:eb:cf:fa:0c:33:
                    96:a0:c3:10:27:d4:8e:3b:81:e1:20:07:ec:bd:83:
                    2d:5e:19:67:aa:1c:46:ca:fb:94:f9:8b:27:41:d3:
                    21:93:33:3a:11:49:f7:81:bc:eb:42:ed:8d:8b:e7:
                    5d:2e:08:68:7e:07:3f:52:26:e9:fb:77:0b:13:2f:
                    6a:4b:fa:be:98:31:68:fe:e9:1e:1d:0c:09:e8:35:
                    ea:80:e3:6d:3a:eb:bf:88:5b:25:ae:73:a7:28:73:
                    11:46:3f:b3:a8:40:90:01:90:d2:20:0e:36:27:17:
                    4e:49:97:a5:fb:6f:34:05:2e:e1:37:fb:1c:f3:5d:
                    d7:a0:88:8f:e7:9c:b4:a1:58:48:0e:5f:ed:bc:a1:
                    20:6c:6c:93:29:25:0f:b3:ac:5a:05:ce:fe:a3:9f:
                    bd:af:43:71:85:f9:2e:a7:bf:48:c7:c8:b5:19:11:
                    50:92:d1:60:5f:6a:20:9b:e9:49:e6:a4:8a:8f:66:
                    80:fd:d7:db:7f:5e:72:0d:68:68:96:e8:7f:43:36:
                    a1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:4A:8D:DF:85:E2:6D:45:A5:30:C9:2F:18:39:67:F8:EA:1F:56:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/0/514A8DDF85E26D45A530C92F183967F8EA1F56A9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.235.184.0/21
                IPv6:
                  2804:e60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61888

    Signature Algorithm: sha256WithRSAEncryption
         35:f6:b7:71:ac:11:33:49:8a:7f:32:9a:2b:5f:0b:0f:d2:21:
         84:e7:43:dd:42:fb:0e:7f:2f:5b:64:3f:39:67:e4:83:e3:1f:
         78:87:54:75:c6:84:ca:7b:5e:2e:13:14:27:70:37:68:dc:93:
         0c:87:1f:22:6c:d9:6f:a4:a4:9b:24:ad:18:4c:6d:8f:ec:e8:
         9b:17:35:b7:79:86:ed:cc:9d:b1:7a:1a:3b:61:10:d8:4c:6f:
         73:10:62:fc:7f:f4:5a:ca:e2:a6:1f:83:6a:b3:b0:6f:27:67:
         0f:2a:cf:07:57:5c:4e:d7:15:24:1d:00:3c:8f:6d:ed:94:17:
         ac:28:73:70:d0:c8:65:1e:97:ab:cc:01:38:a8:c4:14:2b:fe:
         23:95:db:98:2f:40:e0:7f:1d:ed:59:a7:5e:c7:03:76:20:4e:
         4b:be:0b:cb:af:74:79:26:2f:ab:aa:f1:08:fa:84:5d:cb:65:
         75:b5:bc:8c:67:89:e7:13:a8:f5:36:dd:11:17:c7:15:a9:c9:
         a3:28:67:ab:48:40:98:80:84:8d:94:6b:29:94:18:52:8e:fa:
         cf:01:09:ef:9d:c6:22:ec:6e:a6:dc:1e:56:a4:bd:f0:38:35:
         d0:2e:a6:e7:98:81:90:bc:01:a8:6a:94:21:fd:f6:c9:38:0d:
         a8:cc:e4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org