Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/529515031490959891D741C128697E9213EE57D3.cer
File:                     529515031490959891D741C128697E9213EE57D3.cer (raw, json)
Hash identifier:          b6Ku3BXZ1ftRKW38nrmzt+AsF5FNnykMMN5urcJdmHA=
Subject key identifier:   52:95:15:03:14:90:95:98:91:D7:41:C1:28:69:7E:92:13:EE:57:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FFC69E5147379134C8E4880EB5E1CAB17986D8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/529515031490959891D741C128697E9213EE57D3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Jun 2023 02:35:10 +0000
Certificate not after:    Fri 07 Jun 2024 02:40:10 +0000
Subordinate resources:    AS: 271019
                          IP: 200.52.232.0/22
                          IP: 2804:7508::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fc:69:e5:14:73:79:13:4c:8e:48:80:eb:5e:1c:ab:17:98:6d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  9 02:35:10 2023 GMT
            Not After : Jun  7 02:40:10 2024 GMT
        Subject: CN=529515031490959891D741C128697E9213EE57D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:09:2a:35:d5:7c:7d:6e:df:66:49:0c:97:
                    5f:e7:7b:f3:29:60:f5:6d:93:5b:77:cd:d5:a5:41:
                    36:67:7e:ad:91:76:71:ab:ea:a3:8d:3a:a3:d9:eb:
                    cf:37:84:75:f6:cd:25:ec:1d:ee:a2:5f:a7:61:d9:
                    e3:ac:69:b9:6a:99:10:81:80:1d:84:38:10:5b:7b:
                    5e:47:9c:22:8a:23:79:c3:b9:8b:2b:7c:1b:f6:4a:
                    bb:bd:7d:8e:94:d3:aa:26:a1:35:8e:da:ff:d4:b7:
                    a9:0d:38:06:1d:88:8d:4a:9c:b6:37:d0:fb:8d:10:
                    e1:f7:a7:78:79:5a:47:4f:18:3c:0f:87:85:a2:9f:
                    5a:f8:cd:cc:f5:f5:df:fe:0f:1b:46:56:ef:f2:66:
                    f7:ac:78:29:3e:0a:3c:f0:4d:09:85:ba:60:dc:2e:
                    a4:64:d0:e1:47:cf:a0:54:bb:83:dc:ab:5b:45:3b:
                    c7:fc:68:53:c8:ac:4b:36:7e:27:66:f6:85:90:9c:
                    8f:dd:c7:41:0a:67:b4:c1:4a:cc:71:24:c6:7c:11:
                    46:25:67:78:21:4c:6f:f7:88:ac:3e:76:a7:c3:02:
                    fe:b5:eb:ab:82:b4:cf:89:fc:97:e4:22:47:cc:91:
                    e6:7c:54:ea:14:f9:38:fd:d6:ac:fd:36:0a:55:6e:
                    02:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:95:15:03:14:90:95:98:91:D7:41:C1:28:69:7E:92:13:EE:57:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CTEta9MAcLMQYJCTRbb382LwQqUn57ioCtoTpyqwGbZ5/0/529515031490959891D741C128697E9213EE57D3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.52.232.0/22
                IPv6:
                  2804:7508::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271019

    Signature Algorithm: sha256WithRSAEncryption
         81:55:40:80:d2:c8:63:56:6c:a9:07:ce:46:6a:3e:88:d7:96:
         04:3b:37:6b:b2:25:7d:f6:d1:dd:1b:d1:01:b9:92:ea:3f:73:
         b9:a5:fd:4e:f1:a7:e3:59:db:d1:64:4d:29:7a:62:95:17:e5:
         7c:b6:f7:b5:9e:b7:f2:f8:4d:d8:59:b4:6d:81:bb:0b:33:f2:
         09:d7:ef:34:c0:8d:3c:57:7b:42:a3:94:ff:e3:24:fc:42:6d:
         08:c6:39:b1:fe:02:bb:2a:32:cd:c6:b0:07:e1:6a:a0:d6:e3:
         e0:62:75:db:e5:2a:71:fb:e6:09:15:34:8a:49:df:b2:53:93:
         66:71:99:54:36:88:13:26:43:27:bd:94:4a:3e:dc:fc:ad:67:
         79:f8:3a:e8:98:57:1f:34:d3:a0:41:ec:29:a1:ca:08:3a:61:
         ab:1c:b2:4d:04:01:25:3a:86:fe:4c:e0:89:bb:1e:10:d4:73:
         0c:0d:7b:61:31:53:3f:7b:1a:46:d3:5c:e4:56:2b:cb:ce:33:
         3d:a5:e6:8f:31:aa:ac:63:8a:05:28:69:a3:91:cc:73:cc:4e:
         a8:9b:66:44:0b:b8:ec:fa:51:e9:9b:6e:d5:4c:4d:c0:07:64:
         f6:cc:43:f5:23:9f:c2:bc:a5:55:b2:0c:de:69:d6:8c:57:5a:
         2d:8f:fe:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org