Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.cer
File:                     551FF95B2328867EC2F8D3A8E213AF61D7EC076F.cer (raw, json)
Hash identifier:          Yds6jkXwqY5kHfHUu+93I2U8kXQeHIqkecaUtUXY5J0=
Subject key identifier:   55:1F:F9:5B:23:28:86:7E:C2:F8:D3:A8:E2:13:AF:61:D7:EC:07:6F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       08F402DD2C27DF05563F138D0365007C70D0D620
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 19:50:03 +0000
Certificate not after:    Mon 10 Mar 2025 19:55:03 +0000
Subordinate resources:    AS: 263641
                          AS: 271420
                          IP: 168.205.60.0/22
                          IP: 179.127.152.0/21
                          IP: 181.233.44.0/22
                          IP: 2804:1094::/32
                          IP: 2804:7b40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f4:02:dd:2c:27:df:05:56:3f:13:8d:03:65:00:7c:70:d0:d6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 19:50:03 2024 GMT
            Not After : Mar 10 19:55:03 2025 GMT
        Subject: CN=551FF95B2328867EC2F8D3A8E213AF61D7EC076F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:aa:32:df:0a:f8:23:ac:f8:e8:e3:c8:e3:42:
                    6d:13:5a:d4:7c:3f:f9:ab:d6:8c:c9:21:db:cb:01:
                    5d:7c:04:b0:27:de:d1:36:89:c3:89:92:da:89:93:
                    08:fa:d9:4f:02:f0:ed:10:c2:14:6b:6f:18:f6:0f:
                    17:6a:13:1f:e5:26:83:21:89:2c:3f:d5:74:af:74:
                    21:21:00:0e:54:65:fd:90:35:95:e9:45:1f:f1:25:
                    f7:62:20:fb:ce:b9:bd:49:ef:a5:3f:ed:94:df:e9:
                    9f:e1:b2:43:50:54:34:ae:12:28:e5:e7:6d:e0:cf:
                    c7:88:b8:95:07:f6:e5:f3:55:1d:16:69:65:7b:9d:
                    b0:a6:48:0a:f4:8e:1a:8e:a8:38:af:8b:0b:55:04:
                    80:b4:3e:2e:82:40:37:d0:35:4a:b6:2c:ff:56:b7:
                    74:54:cc:30:ca:73:4e:6d:7e:f9:36:17:03:c8:3f:
                    18:a1:4c:91:9e:dc:40:11:32:aa:aa:83:f6:72:96:
                    07:2b:f4:56:84:19:ac:13:dc:6a:0c:1c:8e:e0:36:
                    70:a8:68:df:95:a2:db:bb:db:a8:ae:23:2d:e4:1f:
                    9c:54:84:12:dd:1a:35:4a:0f:d2:56:7a:a3:17:90:
                    53:2c:93:3e:a7:35:57:f0:ee:a4:90:23:04:c4:90:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                55:1F:F9:5B:23:28:86:7E:C2:F8:D3:A8:E2:13:AF:61:D7:EC:07:6F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/551FF95B2328867EC2F8D3A8E213AF61D7EC076F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.60.0/22
                  179.127.152.0/21
                  181.233.44.0/22
                IPv6:
                  2804:1094::/32
                  2804:7b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263641
                  271420

    Signature Algorithm: sha256WithRSAEncryption
         af:5b:7a:1c:9e:91:3f:99:71:3d:b5:04:e5:12:63:37:73:a6:
         a4:d6:7e:7e:21:9e:ed:39:a1:c8:9b:20:72:4c:53:ab:ce:e0:
         99:33:cb:8e:11:8c:46:f5:ba:c2:00:44:9f:86:28:a3:45:4f:
         9a:9c:05:f8:13:cd:31:36:0f:23:20:e0:eb:cc:4f:d0:f7:7c:
         45:b2:62:09:1f:72:44:55:f0:67:9d:d3:f8:b0:12:30:bb:eb:
         39:4f:0f:d6:8d:0d:f6:83:2f:f2:9c:51:39:7b:c5:c0:7b:24:
         36:33:e2:9f:f8:78:83:53:c2:47:ec:52:06:49:23:97:0c:6b:
         12:39:bc:21:f5:16:75:b8:03:bf:d9:9c:3b:13:85:4f:d8:40:
         07:13:de:2a:1b:41:59:de:60:c3:ec:ef:79:b2:49:64:38:08:
         ad:44:51:23:79:e8:e6:0b:48:24:72:9e:1f:37:71:2f:0a:32:
         97:b8:2b:c3:e6:cb:06:10:cc:1f:ef:9f:5e:0b:ef:14:28:fb:
         6b:82:01:53:a4:ad:c8:15:ee:08:01:62:30:c9:ba:b6:da:65:
         ee:6c:dc:bf:34:14:35:29:da:47:1d:7f:82:44:24:e3:30:89:
         b5:3c:12:6e:a0:b2:15:c3:49:14:97:d7:01:c1:c9:b3:bc:75:
         bb:e9:5e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org