Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.cer
File:                     576C14ED9BA857F93E783A5ABE071846F54CDE21.cer (raw, json)
Hash identifier:          KyI7zi8j05zM542fbWsiGBKw7UaqYy6EEJPOscdbhJA=
Subject key identifier:   57:6C:14:ED:9B:A8:57:F9:3E:78:3A:5A:BE:07:18:46:F5:4C:DE:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       42E3E02DF63E4457512EA4BD482BB4429791C157
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Dec 2023 12:15:36 +0000
Certificate not after:    Thu 05 Dec 2024 12:20:36 +0000
Subordinate resources:    AS: 267513
                          IP: 168.194.56.0/22
                          IP: 186.227.72.0/22
                          IP: 186.251.248.0/21
                          IP: 2804:5614::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e3:e0:2d:f6:3e:44:57:51:2e:a4:bd:48:2b:b4:42:97:91:c1:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 12:15:36 2023 GMT
            Not After : Dec  5 12:20:36 2024 GMT
        Subject: CN=576C14ED9BA857F93E783A5ABE071846F54CDE21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:fa:c4:29:a2:e8:b0:60:0d:4b:9e:81:a0:ac:
                    af:03:f0:b9:d9:7c:42:28:a2:1b:08:08:db:ac:81:
                    af:c1:0a:0a:30:93:5a:0a:59:3d:cf:66:85:21:aa:
                    bd:17:00:63:09:40:a2:09:7d:ca:64:08:a1:f7:1e:
                    e6:9f:ff:57:6a:7d:c2:00:3c:ec:4f:87:13:f8:67:
                    5a:f2:d5:78:d5:20:4e:e5:e7:f5:f2:2b:80:a7:0f:
                    5a:ce:30:af:4d:eb:d5:86:4d:ef:52:9c:a1:d6:be:
                    d2:20:ac:09:b4:ae:6c:bf:a0:3f:0f:eb:95:b2:2e:
                    42:fe:72:4e:bc:57:df:35:ba:91:1f:a6:dd:43:2d:
                    e9:9a:ad:f1:15:21:29:2c:c3:c7:18:bd:ad:06:cb:
                    ea:b0:36:30:3b:87:0b:d8:6e:f4:55:aa:23:94:60:
                    44:43:a6:80:95:d5:27:68:73:5c:95:57:5f:47:3f:
                    8c:18:14:c6:72:be:44:40:c6:af:b4:a8:35:41:16:
                    35:ad:eb:5b:31:5c:8e:4f:62:00:36:59:1d:91:ec:
                    9d:df:a2:53:b7:0e:57:24:23:f3:7e:46:ca:68:8d:
                    2c:98:6f:50:b6:cc:c4:a8:e3:ad:8e:67:41:07:b4:
                    00:26:6c:08:2c:3d:ce:f2:cf:50:a5:ea:f8:6a:f5:
                    c0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                57:6C:14:ED:9B:A8:57:F9:3E:78:3A:5A:BE:07:18:46:F5:4C:DE:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Buoc1orGkC6SvAuvxH1JKjwi3KPwHRKRaLs8sfBNXzJG/0/576C14ED9BA857F93E783A5ABE071846F54CDE21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.56.0/22
                  186.227.72.0/22
                  186.251.248.0/21
                IPv6:
                  2804:5614::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267513

    Signature Algorithm: sha256WithRSAEncryption
         30:c7:59:d6:b2:11:4e:2e:e5:1a:e1:98:43:99:64:75:07:a2:
         1c:a6:91:5d:43:e4:e0:ad:74:04:3a:6c:55:83:59:71:3e:87:
         c2:7a:b1:0b:88:a1:c0:16:2e:d6:25:39:12:79:57:03:d9:8a:
         94:8b:27:64:30:b0:c9:e0:48:14:c9:4e:e9:15:61:35:0e:62:
         7e:fe:f7:15:42:9c:23:1f:02:08:c3:95:a9:cd:d1:d8:aa:7e:
         30:20:da:0c:76:fa:e0:40:3e:60:ac:ae:d1:bb:9e:9d:35:23:
         4d:e8:70:dd:f3:2b:b3:d6:3a:b7:11:73:ac:c3:9e:5f:48:13:
         7c:a2:ee:dc:90:21:7d:90:dd:55:3f:08:99:26:3c:1f:37:b0:
         bc:94:78:41:b0:76:0d:d9:35:85:14:86:fe:e4:1e:b4:58:97:
         45:c1:b2:36:10:b8:16:72:73:47:23:d5:cb:52:e1:8e:52:18:
         81:b0:d4:f5:04:f0:b4:2d:f1:1a:f6:58:d2:0d:a0:25:91:d3:
         3d:25:fb:a3:a0:b7:2c:41:fd:a5:c0:78:f1:df:f7:60:1f:ee:
         57:a0:0e:ac:f9:b3:9d:41:9d:49:12:bf:74:43:d9:a4:ab:bb:
         e0:26:19:ab:8a:04:8f:27:7c:d9:32:7e:d8:60:03:c3:20:cf:
         1b:cb:de:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org