Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.cer
File:                     61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.cer (raw, json)
Hash identifier:          VGfmZXa4DfaFS0HA+fGJOWC9dc1t6vwmI+q8Z1RTzOo=
Subject key identifier:   61:E2:D2:B5:3D:81:87:1E:EF:CB:17:7D:BA:0D:5F:4E:D9:47:B7:90
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       36060609F1C1836526CC96BD642CF5692D0C8029
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 31 Mar 2024 21:29:47 +0000
Certificate not after:    Sun 30 Mar 2025 21:34:47 +0000
Subordinate resources:    AS: 267584
                          IP: 45.70.172.0/22
                          IP: 2804:43b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:06:06:09:f1:c1:83:65:26:cc:96:bd:64:2c:f5:69:2d:0c:80:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 31 21:29:47 2024 GMT
            Not After : Mar 30 21:34:47 2025 GMT
        Subject: CN=61E2D2B53D81871EEFCB177DBA0D5F4ED947B790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b0:73:fb:2c:c8:b6:37:5f:a7:08:86:87:ea:
                    06:d7:b6:87:89:13:18:81:d0:4e:44:c5:b6:76:21:
                    5a:96:48:e4:26:07:6f:44:12:6d:3e:e8:78:c7:fa:
                    d8:ab:af:49:73:fd:a2:1c:eb:cd:1e:33:67:d6:10:
                    b8:de:74:1c:93:bb:5d:2c:49:0a:db:6c:54:41:7c:
                    8d:a5:30:d5:59:fc:5e:91:32:ca:7e:f5:53:f6:ff:
                    36:f5:33:e8:89:32:5c:40:19:9c:5d:e4:b1:b3:f9:
                    03:97:07:e2:f7:bd:29:a4:1a:fe:7c:9f:c0:62:2e:
                    6c:49:a9:37:ec:27:14:8d:0e:d4:18:96:0d:50:99:
                    76:b7:d6:b0:22:f2:c9:9b:8c:74:30:b1:f9:ab:50:
                    a8:e5:ab:38:36:43:79:4e:d0:e2:db:45:55:bb:b5:
                    85:db:d5:f4:94:d6:8a:68:3c:df:71:12:5f:ca:d6:
                    b0:c7:82:b2:bf:48:ee:12:73:8c:de:95:04:4b:4d:
                    e4:eb:34:9b:08:4e:1b:04:c7:4b:04:54:0a:15:09:
                    3e:de:00:c9:e4:5e:e2:4c:cf:d6:1a:db:33:bc:ec:
                    1f:28:55:33:e1:68:a8:4c:5f:5e:59:7e:91:89:2f:
                    df:99:f2:0c:81:c8:33:5f:1f:d6:b5:99:ec:89:2f:
                    68:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:E2:D2:B5:3D:81:87:1E:EF:CB:17:7D:BA:0D:5F:4E:D9:47:B7:90
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ggwCtEcgn2A9CoDUkYHTrTAPnULgPo8jg9zpEq7JThA/0/61E2D2B53D81871EEFCB177DBA0D5F4ED947B790.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.172.0/22
                IPv6:
                  2804:43b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267584

    Signature Algorithm: sha256WithRSAEncryption
         60:08:34:25:b6:bb:f2:14:25:29:77:a6:8e:2a:79:8e:06:0f:
         5c:a8:9b:e4:8f:e7:11:ce:a2:88:a3:b0:b4:19:34:01:4e:55:
         7b:67:5f:7b:1d:53:e2:10:18:d7:19:b5:17:bd:74:43:e3:a3:
         57:66:72:9c:2c:1e:bb:51:09:ec:b2:7e:7f:59:3d:33:2f:e2:
         a1:76:4e:66:70:fb:94:43:0c:94:90:53:8f:cf:06:bb:8f:db:
         bb:0b:f6:05:d7:bf:de:b2:f5:56:ea:d5:88:4a:78:ba:51:5d:
         43:9f:b5:ee:66:8e:2d:cb:eb:e1:7a:8d:a1:79:af:a4:ee:94:
         2f:1c:52:c1:bf:83:97:21:89:70:4b:3f:88:42:29:e3:3b:ce:
         ae:7b:54:87:92:cd:58:70:68:6a:22:70:86:f5:23:f2:ed:43:
         41:5d:e6:24:e0:f3:d7:6c:58:3c:b1:34:d8:a3:f0:2d:ee:28:
         d4:e5:34:7f:92:12:da:22:7b:48:22:89:10:74:97:dd:24:b0:
         1b:53:d4:b2:f1:ff:25:4e:2d:0b:74:d1:c4:37:ec:dc:4b:6a:
         10:03:cb:db:b4:d2:fa:08:d0:69:33:03:bf:58:f9:11:aa:c3:
         ac:2b:22:cb:9f:64:2b:d3:36:bf:6a:9b:6e:be:b7:df:23:aa:
         59:e5:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org