Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/60781BF2D2205D576FB50D862C9AC51343849EC4.cer
File:                     60781BF2D2205D576FB50D862C9AC51343849EC4.cer (raw, json)
Hash identifier:          6GDaubGIeQmUJLXy03YclJknVY7vPm9WsgC+WFmCzlo=
Subject key identifier:   60:78:1B:F2:D2:20:5D:57:6F:B5:0D:86:2C:9A:C5:13:43:84:9E:C4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4B683C65ACC20F5FF526577AA64D5DFEE34DDE5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4n8kKszPV1BB7PtoTMmPFPXjTefHxMVt5CkghBy9Tzpc/0/60781BF2D2205D576FB50D862C9AC51343849EC4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4n8kKszPV1BB7PtoTMmPFPXjTefHxMVt5CkghBy9Tzpc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Dec 2023 22:28:21 +0000
Certificate not after:    Fri 06 Dec 2024 22:33:21 +0000
Subordinate resources:    AS: 265019
                          IP: 170.84.36.0/22
                          IP: 2804:3180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:68:3c:65:ac:c2:0f:5f:f5:26:57:7a:a6:4d:5d:fe:e3:4d:de:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  8 22:28:21 2023 GMT
            Not After : Dec  6 22:33:21 2024 GMT
        Subject: CN=60781BF2D2205D576FB50D862C9AC51343849EC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ce:2d:cb:e4:5c:e4:9b:ed:d8:0c:23:ec:e2:
                    48:39:5c:f5:a6:51:a1:ca:81:a4:f5:21:81:d2:92:
                    4a:9b:57:bc:1d:92:ab:40:da:cb:a6:63:48:e1:8f:
                    42:ed:92:12:f0:7e:3e:c7:ce:30:90:ce:11:cd:38:
                    57:ed:06:5a:0d:24:bc:f5:b4:4e:24:80:ea:8e:23:
                    31:10:a5:3b:9a:a5:50:d0:1b:12:7d:c4:df:2b:22:
                    05:52:28:b5:99:1d:e5:ae:a8:13:37:ee:f1:8e:e6:
                    39:77:15:d4:a0:22:2e:f1:60:05:c7:9b:dd:ef:c9:
                    21:0f:56:92:94:2c:ef:69:17:d4:22:45:97:5b:db:
                    6b:52:f8:a3:ce:68:33:18:81:66:ee:5f:38:95:9c:
                    cd:9b:e6:96:2d:80:32:cc:1d:35:1e:3b:2c:78:fc:
                    b7:13:ee:69:48:20:85:98:30:ed:ba:19:b7:f9:84:
                    42:81:c4:1b:67:36:93:61:51:7d:69:c0:65:97:74:
                    ca:4f:96:a7:d7:13:9e:75:b0:6c:59:57:35:23:af:
                    38:4e:bb:fa:63:a3:14:0f:ad:d8:34:96:26:65:64:
                    09:6f:7d:ff:a7:2d:ef:1e:db:ca:be:28:5b:cb:6f:
                    9f:80:a9:be:88:b9:de:e5:10:74:4f:0f:aa:f9:40:
                    c1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                60:78:1B:F2:D2:20:5D:57:6F:B5:0D:86:2C:9A:C5:13:43:84:9E:C4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4n8kKszPV1BB7PtoTMmPFPXjTefHxMVt5CkghBy9Tzpc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4n8kKszPV1BB7PtoTMmPFPXjTefHxMVt5CkghBy9Tzpc/0/60781BF2D2205D576FB50D862C9AC51343849EC4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.36.0/22
                IPv6:
                  2804:3180::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265019

    Signature Algorithm: sha256WithRSAEncryption
         94:c1:5b:9d:41:31:41:2e:97:18:c2:f4:1b:e3:a2:96:a1:35:
         91:22:f8:80:28:73:31:0a:86:a1:4d:91:01:22:32:66:bf:0b:
         4e:5d:6f:e0:76:17:b9:1a:d2:28:20:86:e3:e7:1c:b5:3e:69:
         6f:64:57:9c:b9:fa:f4:5c:6e:8c:87:36:29:d2:a2:26:7e:6f:
         af:46:63:9f:7e:95:f4:85:12:3f:2e:a9:41:eb:b0:80:f0:87:
         48:c1:07:8a:69:65:5d:be:06:d3:c1:89:da:bd:ca:5a:d7:30:
         a3:aa:9d:69:9d:f8:fe:3b:5f:17:2b:00:d4:65:8e:64:d8:97:
         a8:11:f7:98:e1:41:ad:27:e9:51:80:20:52:85:9c:94:f7:78:
         77:52:c9:13:25:cc:6b:1d:9b:45:85:09:32:a7:5c:70:2d:18:
         46:dd:db:a7:7d:d1:0f:4f:9c:b2:d2:b0:eb:b9:a2:dd:d1:06:
         9d:79:f7:12:e8:7e:41:30:76:93:1d:64:4d:7d:8d:c1:f3:79:
         6d:8c:2e:8e:46:4b:75:f6:a1:31:8f:25:a8:bb:f8:bd:d2:17:
         d5:b7:6e:b1:55:0f:f7:74:59:c7:54:88:dd:62:ef:79:8a:37:
         e9:0b:f1:59:80:94:58:1d:b7:4d:cc:a3:fb:c7:05:6c:d4:fe:
         4b:00:34:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org