Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/51D461C8BCBD1444B3B937F71C5F29B600836A17.cer
File:                     51D461C8BCBD1444B3B937F71C5F29B600836A17.cer (raw, json)
Hash identifier:          V/UsF2At5ACA3zrzigdNFRLxl0M4iPmNOIZqKs/Ug2w=
Subject key identifier:   51:D4:61:C8:BC:BD:14:44:B3:B9:37:F7:1C:5F:29:B6:00:83:6A:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B5B9CFA901AB4D4FFFB099CB3A4AA6204F5D0FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CLSMZh9Y9wQJxza3vzpbbUeA7VmVrXAiSBWrb3ENuNKg/0/51D461C8BCBD1444B3B937F71C5F29B600836A17.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CLSMZh9Y9wQJxza3vzpbbUeA7VmVrXAiSBWrb3ENuNKg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 14:41:37 +0000
Certificate not after:    Tue 21 Jan 2025 14:46:37 +0000
Subordinate resources:    AS: 262450
                          IP: 177.52.192.0/21
                          IP: 2804:3478::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5b:9c:fa:90:1a:b4:d4:ff:fb:09:9c:b3:a4:aa:62:04:f5:d0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 14:41:37 2024 GMT
            Not After : Jan 21 14:46:37 2025 GMT
        Subject: CN=51D461C8BCBD1444B3B937F71C5F29B600836A17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:61:4e:16:70:44:b6:96:f6:31:d4:fe:5b:c3:
                    07:36:9a:44:89:af:10:6d:2b:f3:5e:3f:48:a9:39:
                    47:32:ba:c1:22:87:ce:0b:8c:fe:d6:9a:7d:ee:e8:
                    30:8f:58:74:8b:18:1c:ae:12:7d:33:e8:6c:87:99:
                    e9:a2:9a:03:8f:ef:f9:38:c8:a4:a6:9e:67:5d:30:
                    f4:9f:b2:cb:76:45:44:84:7e:64:09:fa:c0:00:05:
                    2f:af:e2:f3:8c:3a:36:ea:0f:bc:89:a2:1b:1a:c8:
                    63:b4:4f:fe:c1:15:93:22:4a:6c:9d:b8:39:7c:ce:
                    2c:25:ae:76:4e:f6:00:40:cb:0c:91:63:3b:05:29:
                    c2:92:b9:f2:88:73:77:cf:18:90:b6:23:cd:9e:da:
                    dc:d8:d0:15:4a:b9:93:ae:49:fe:22:bd:54:9d:e9:
                    ba:1a:71:39:1e:01:73:ce:bd:cd:40:cb:fc:d9:c2:
                    d5:7d:6a:85:d1:3f:a6:90:a4:88:42:8e:b2:57:06:
                    9b:af:40:f1:64:43:84:63:9a:2b:6f:8f:ec:05:f7:
                    97:13:ea:04:73:6b:cd:ae:70:62:86:db:79:3b:c2:
                    28:24:94:c9:6e:0e:cb:40:5d:d5:19:17:a9:bf:cb:
                    b7:21:65:b1:bd:6c:8d:86:d1:e6:f5:55:7d:04:a0:
                    15:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:D4:61:C8:BC:BD:14:44:B3:B9:37:F7:1C:5F:29:B6:00:83:6A:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CLSMZh9Y9wQJxza3vzpbbUeA7VmVrXAiSBWrb3ENuNKg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CLSMZh9Y9wQJxza3vzpbbUeA7VmVrXAiSBWrb3ENuNKg/0/51D461C8BCBD1444B3B937F71C5F29B600836A17.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.192.0/21
                IPv6:
                  2804:3478::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262450

    Signature Algorithm: sha256WithRSAEncryption
         b0:42:b8:87:ef:89:74:bb:48:cf:14:27:95:9e:97:2a:8e:bb:
         86:6d:08:13:cc:fa:95:d3:2e:a5:9e:cc:0f:05:84:8c:e7:90:
         95:6d:8f:bf:99:bb:57:27:13:5a:70:cc:86:dc:60:56:cc:09:
         6b:f5:0f:61:5f:e8:5a:b7:83:b2:00:f4:04:75:fc:3f:83:17:
         81:a8:18:1e:85:e6:ce:6e:bb:09:fc:1e:c1:4e:ce:18:58:72:
         69:8c:37:7c:a7:9f:6a:11:37:73:d3:0e:e8:8f:0c:58:89:6f:
         d4:a9:4a:54:a5:f9:3e:f8:b9:21:1c:eb:61:fb:ac:7b:88:d1:
         42:f0:80:da:ba:5a:0d:69:c8:18:70:e4:29:2b:79:0c:54:4c:
         56:10:8e:3d:4d:67:99:8d:bb:a9:4e:86:9b:42:5d:99:c4:d4:
         3e:ce:d0:3d:44:12:f2:2b:b7:17:f9:f7:7b:be:ef:06:35:31:
         01:20:a7:77:cb:02:8b:af:ea:05:72:b5:57:99:a8:6a:e4:39:
         73:a9:8b:34:df:9f:cf:9b:a4:bd:7d:fb:86:74:a3:13:83:fe:
         38:2b:cf:28:4f:28:1a:17:ec:5c:ff:45:8f:de:99:88:ed:19:
         a3:ef:d8:b1:54:6e:26:40:a9:5f:6e:91:2d:4b:d0:08:cd:0b:
         2e:12:25:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org