Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer
File:                     615E06B249FD712C336D6DBD87713D5A2B7D4C44.cer (raw, json)
Hash identifier:          CYu1yhvSsute8R4MWRzGfL/+ZXGXi8gnYkshyqiogu8=
Subject key identifier:   61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       364CAD47F4BAC75F0694BAE0AD257E0DB3B19A5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Mar 2024 16:15:09 +0000
Certificate not after:    Tue 04 Mar 2025 16:20:09 +0000
Subordinate resources:    AS: 28338
                          IP: 177.87.24.0/22
                          IP: 189.45.0.0/20
                          IP: 189.84.224.0/20
                          IP: 2804:74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4c:ad:47:f4:ba:c7:5f:06:94:ba:e0:ad:25:7e:0d:b3:b1:9a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  5 16:15:09 2024 GMT
            Not After : Mar  4 16:20:09 2025 GMT
        Subject: CN=615E06B249FD712C336D6DBD87713D5A2B7D4C44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:15:a2:f2:4d:d1:ce:e3:ef:d5:c4:f5:04:
                    36:61:82:19:a7:5f:ab:72:d7:62:4f:a0:54:0c:69:
                    1e:7e:a3:c0:01:3c:6b:18:0f:19:04:24:cb:b8:ec:
                    9a:1b:c6:97:d4:07:9c:d7:23:32:11:67:67:22:4f:
                    c0:34:1d:f1:5c:18:d2:18:98:0f:26:f5:1e:b7:7e:
                    20:90:4d:3d:bb:bc:55:c4:58:a3:c0:5d:b1:fd:63:
                    bf:15:59:b4:71:72:61:01:65:62:5f:51:10:ed:f7:
                    75:07:0b:47:c0:ae:85:8d:eb:76:eb:e5:fe:1b:73:
                    94:3a:0f:ce:ce:40:bd:db:f1:1f:c5:8b:8e:80:1a:
                    11:dd:43:c9:8e:57:9f:39:c6:ee:7f:4c:3e:e4:52:
                    bd:65:23:39:66:07:29:26:6e:25:95:da:ae:2c:a1:
                    bd:7b:f7:01:ee:57:3b:24:64:a7:81:53:43:e4:4c:
                    23:20:f2:ed:64:ed:86:6f:fe:5b:d8:49:58:de:07:
                    0a:d8:00:f9:db:70:60:da:49:bc:c7:77:1c:55:44:
                    5e:aa:c4:9c:82:d9:7b:8c:89:de:44:43:97:4e:1b:
                    32:10:1b:a6:8a:80:e2:1c:46:f1:da:5f:87:12:92:
                    bb:b8:d0:f5:68:8c:0c:b6:7c:d1:21:f7:33:ff:fc:
                    12:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:5E:06:B2:49:FD:71:2C:33:6D:6D:BD:87:71:3D:5A:2B:7D:4C:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4Bx88FXe8n5R749pWgrkAS3deyr5mdyyfxBNiWz5yvvM/0/615E06B249FD712C336D6DBD87713D5A2B7D4C44.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.87.24.0/22
                  189.45.0.0/20
                  189.84.224.0/20
                IPv6:
                  2804:74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28338

    Signature Algorithm: sha256WithRSAEncryption
         57:58:f8:90:df:41:b3:e3:9b:71:bb:53:dd:7e:b8:e2:d6:9b:
         0a:29:2c:1b:6a:82:5b:e4:6c:47:bb:83:12:ae:53:16:3d:33:
         e5:0b:b5:a2:74:30:3b:7b:22:84:e3:74:f3:a5:0a:2b:af:4f:
         05:83:3c:2d:9a:6c:93:4c:b6:8b:aa:40:cd:f7:d9:db:23:17:
         2d:ee:49:85:6a:76:bd:ef:cf:c6:a5:a4:3c:9a:87:00:0d:2c:
         8f:5f:c9:e4:ee:62:be:78:47:8f:5d:ca:9b:2e:20:05:4d:6c:
         4e:75:6f:ac:65:c0:14:db:b4:47:30:ce:71:d9:e9:55:09:33:
         dc:81:eb:32:87:cd:01:ee:8a:2f:fb:4e:22:58:82:ea:88:dd:
         5d:34:f0:eb:63:d1:e6:db:17:76:87:b6:42:f2:6b:9c:2b:1f:
         ea:d2:1a:c9:78:1e:6a:1a:54:d4:01:5d:73:8b:69:47:a2:47:
         e3:0b:38:76:e0:78:59:e7:1b:61:90:93:b1:e7:26:8d:ba:b9:
         90:51:b6:b6:49:22:d6:14:2f:4c:52:ed:e9:3c:7f:8b:b3:24:
         96:ea:a3:d8:27:a8:57:42:a1:99:67:e5:7d:30:8e:e5:37:c0:
         8e:77:c7:ed:df:80:17:2e:a0:1b:1f:08:06:eb:4e:66:9f:4f:
         37:14:f7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org