Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/61B3B30AF1C85AD09C8A4D8E236BD1409AD38031.cer
File:                     61B3B30AF1C85AD09C8A4D8E236BD1409AD38031.cer (raw, json)
Hash identifier:          I3aW/k9TJ144aSByyYBjt6O/7zZ4IS1FPtq+9WyLDmo=
Subject key identifier:   61:B3:B3:0A:F1:C8:5A:D0:9C:8A:4D:8E:23:6B:D1:40:9A:D3:80:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2F4B92D75EE7E34EB56142448F10EF0B7793DBC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GPQTbGaitkkqm2mFnGjVUzYRNZM8M6SY2hUPzuiyCvUj/0/61B3B30AF1C85AD09C8A4D8E236BD1409AD38031.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GPQTbGaitkkqm2mFnGjVUzYRNZM8M6SY2hUPzuiyCvUj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 12:21:13 +0000
Certificate not after:    Thu 18 Apr 2024 12:26:13 +0000
Subordinate resources:    AS: 267646
                          IP: 45.224.4.0/22
                          IP: 2804:44ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4b:92:d7:5e:e7:e3:4e:b5:61:42:44:8f:10:ef:0b:77:93:db:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 20 12:21:13 2023 GMT
            Not After : Apr 18 12:26:13 2024 GMT
        Subject: CN=61B3B30AF1C85AD09C8A4D8E236BD1409AD38031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d5:0a:6c:79:f5:87:a8:b6:27:2f:3b:cf:8d:
                    35:a3:91:2c:34:db:fa:5e:ea:f4:50:6b:ea:20:a2:
                    61:26:93:c7:7b:ab:e2:ac:04:46:a2:b6:18:ad:13:
                    d1:e7:9a:96:2c:64:0e:89:6d:2d:2f:69:e4:1e:2e:
                    cb:03:4b:d3:b2:a5:93:dc:55:46:af:52:77:7f:c8:
                    4b:eb:f7:a4:e3:e4:6d:0d:56:d4:16:5f:d5:4e:48:
                    34:60:3a:04:8f:99:9a:d0:03:6f:2a:c5:1d:56:5b:
                    98:f8:db:1a:9d:15:a8:66:8b:e7:c7:43:0c:52:79:
                    9d:c8:ee:e6:63:d3:40:d5:d8:15:1c:79:df:59:4a:
                    71:dd:dd:dc:61:45:4f:b5:25:53:51:42:76:28:35:
                    09:bc:75:de:50:19:9d:9f:ed:ea:ad:76:57:fd:f3:
                    6e:09:4f:7b:68:8a:8a:c0:a0:90:9e:cc:9c:91:66:
                    94:df:0c:38:4d:64:dd:9a:79:f5:df:d0:5a:06:11:
                    f3:b6:af:99:04:25:d9:9f:c1:14:32:b7:b8:20:2c:
                    0a:cb:42:38:a3:4e:82:69:cc:96:6c:40:af:ac:5e:
                    45:e8:ee:e1:29:44:c1:79:d0:1a:41:d1:eb:7f:b4:
                    a7:83:fe:2f:15:d2:1f:cf:13:33:da:9b:4d:1c:d6:
                    bf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:B3:B3:0A:F1:C8:5A:D0:9C:8A:4D:8E:23:6B:D1:40:9A:D3:80:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GPQTbGaitkkqm2mFnGjVUzYRNZM8M6SY2hUPzuiyCvUj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GPQTbGaitkkqm2mFnGjVUzYRNZM8M6SY2hUPzuiyCvUj/0/61B3B30AF1C85AD09C8A4D8E236BD1409AD38031.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.4.0/22
                IPv6:
                  2804:44ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267646

    Signature Algorithm: sha256WithRSAEncryption
         a6:b6:2f:55:e7:5c:be:3a:ba:d4:61:19:bc:40:09:16:66:97:
         30:6c:cc:b8:67:44:7d:16:cf:73:9e:88:0c:4b:4e:8f:fb:5e:
         19:65:3d:0a:b3:4d:50:41:f5:31:2f:c3:a4:9e:b3:cb:e8:31:
         4f:3f:da:c1:cf:23:e4:ca:3c:fc:d9:9a:ed:4f:1a:16:28:09:
         1c:b0:6b:00:06:f0:aa:c9:69:23:a5:54:92:cf:6d:97:7f:b1:
         d2:82:4a:28:cb:ef:de:26:3c:90:13:9e:2f:07:99:0a:d6:8e:
         de:53:83:b5:8e:05:63:d7:70:8b:e6:1c:0d:1d:d7:f6:90:d0:
         30:a6:db:6b:a0:11:62:09:f7:99:ef:77:80:0e:e7:f0:f8:db:
         be:25:cd:2c:dd:a5:72:89:14:94:3e:96:32:b7:08:24:b5:3c:
         9d:b4:c5:18:2a:70:7f:f0:16:ec:c4:6a:85:52:d2:48:ec:e2:
         e2:43:16:32:5f:3a:12:12:db:84:8b:61:41:57:b7:a4:d9:da:
         28:f7:ab:7d:75:64:c6:48:1e:4f:a1:a3:7d:d2:3a:0b:b4:a7:
         7e:14:a0:7e:55:cc:bc:b9:ab:ba:cb:ac:4f:3e:fd:9d:ab:c6:
         63:92:48:5c:a5:8b:c3:d6:6a:22:49:02:ba:43:cb:2d:52:b7:
         d8:ab:1e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org