Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.cer
File:                     541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.cer (raw, json)
Hash identifier:          TPtLNPinSQ1Wz2aFwIY7OTAJplofMCQE/IElmx6Q5I8=
Subject key identifier:   54:1A:C3:98:64:32:D1:4D:4E:D6:51:A3:CC:60:6E:EB:3E:9E:FC:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0513F0B8D902D8AD1AA92A1807C8A0333D8AD420
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 14:46:29 +0000
Certificate not after:    Wed 25 Sep 2024 14:51:29 +0000
Subordinate resources:    AS: 271624
                          IP: 177.73.128.0/22
                          IP: 2804:7e70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:13:f0:b8:d9:02:d8:ad:1a:a9:2a:18:07:c8:a0:33:3d:8a:d4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 14:46:29 2023 GMT
            Not After : Sep 25 14:51:29 2024 GMT
        Subject: CN=541AC3986432D14D4ED651A3CC606EEB3E9EFCEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:6c:5a:f5:78:54:e2:33:f2:84:e6:55:3a:
                    07:d8:f0:c0:fd:64:a4:f9:a5:d1:d0:da:d7:10:94:
                    b2:82:69:07:f1:34:fe:b6:08:8d:5b:04:16:17:51:
                    10:71:e1:e4:a4:aa:ba:51:f4:8b:ed:72:ed:f8:31:
                    81:07:b2:45:3d:86:85:7e:21:48:b3:e2:88:0a:dd:
                    64:50:8d:63:9b:6f:41:4a:3e:8a:f4:92:86:32:7e:
                    02:3a:54:fa:7b:94:6e:b8:20:58:bf:99:81:ce:07:
                    2a:90:cc:ed:59:b7:25:a0:50:fd:24:6b:40:09:42:
                    9c:cb:18:b9:29:fe:0e:75:0a:e4:86:f3:6f:0c:45:
                    3c:8f:9e:38:cb:b8:e0:2a:6b:65:b3:ae:52:0a:17:
                    29:d1:32:b3:3b:06:7b:80:5f:78:12:d6:21:fa:80:
                    6b:84:9c:8d:d6:4c:b1:cc:6e:a9:f4:ea:23:b8:d0:
                    ac:98:b6:14:b6:8b:c0:59:6a:72:db:b4:d9:ff:30:
                    04:fc:47:21:07:e1:1e:5d:7c:af:14:25:94:ae:dc:
                    b2:5f:87:66:e1:d6:73:f9:5a:2b:e5:53:ec:fc:19:
                    10:12:d4:1f:21:d1:39:7f:6e:87:56:89:dd:b4:fb:
                    d3:3c:a9:f4:e8:ef:9f:ab:5c:0b:ac:b2:04:1b:2a:
                    85:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:1A:C3:98:64:32:D1:4D:4E:D6:51:A3:CC:60:6E:EB:3E:9E:FC:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ErnJRWgc2cq5A7qrwLLPWJUqJPfU29mBJzKj25qXri7r/0/541AC3986432D14D4ED651A3CC606EEB3E9EFCEE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.73.128.0/22
                IPv6:
                  2804:7e70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271624

    Signature Algorithm: sha256WithRSAEncryption
         91:c2:92:1a:a0:79:c9:01:c4:7f:c6:99:29:1c:e4:d9:dc:71:
         d2:d5:71:48:37:01:50:03:78:68:47:e8:8e:b6:9c:5f:4a:ce:
         29:e5:93:6c:5e:2e:0a:50:66:cf:c4:3c:c1:cb:3f:30:4b:6c:
         4e:5a:5e:c7:4a:18:0f:ab:89:22:d7:39:bf:44:b9:12:c1:4a:
         3c:bc:10:84:9a:9a:ab:00:61:c5:e9:08:1b:2e:c7:93:13:23:
         71:a0:1a:73:14:78:7d:de:4d:5a:f6:d4:11:4c:89:df:72:83:
         de:0b:10:36:33:42:e6:20:b1:e4:c2:27:18:31:4a:36:97:28:
         35:0e:56:da:c0:64:40:6d:29:06:ca:57:bf:1f:43:85:f3:f3:
         df:85:4f:c5:5f:27:8e:29:f3:9f:b1:28:97:87:e3:bc:3c:7f:
         8e:f6:41:1f:65:37:50:be:3f:d0:b2:24:ac:9d:91:b0:3a:3c:
         2c:1e:de:41:e3:57:06:21:eb:cc:bf:f0:8a:e5:c7:10:1b:00:
         51:be:f1:6f:6d:63:03:c5:81:78:7e:34:a1:29:31:04:7c:eb:
         85:7f:2b:d7:74:78:32:38:17:d1:5d:f4:ef:a4:30:02:a6:cf:
         2f:5c:62:54:20:ed:e7:e1:25:50:a2:1a:4c:e6:3d:01:f5:5b:
         b0:e4:fc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org