Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/61F5EEE5F36D62616A5B068B35FB230002695C0B.cer
File:                     61F5EEE5F36D62616A5B068B35FB230002695C0B.cer (raw, json)
Hash identifier:          d5mf32pfBuTo2d4sKH4wEstmRhWLqvroSwjCyn0vaNU=
Subject key identifier:   61:F5:EE:E5:F3:6D:62:61:6A:5B:06:8B:35:FB:23:00:02:69:5C:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       263942537F1DDD1313AC951FBDAD05A85470577D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/0/61F5EEE5F36D62616A5B068B35FB230002695C0B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Sep 2023 23:55:08 +0000
Certificate not after:    Sat 07 Sep 2024 00:00:08 +0000
Subordinate resources:    AS: 271328
                          IP: 200.9.116.0/22
                          IP: 2804:79cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:39:42:53:7f:1d:dd:13:13:ac:95:1f:bd:ad:05:a8:54:70:57:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  8 23:55:08 2023 GMT
            Not After : Sep  7 00:00:08 2024 GMT
        Subject: CN=61F5EEE5F36D62616A5B068B35FB230002695C0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:9d:96:fa:9e:f1:13:eb:19:6c:71:cc:70:
                    30:d5:26:d7:55:d7:d6:43:e9:98:f8:3f:84:30:03:
                    90:eb:66:61:1d:15:69:99:41:42:ca:4f:44:ed:de:
                    ee:91:cb:62:0f:d3:bc:89:a7:d0:a2:03:26:d5:33:
                    b1:84:3c:24:72:35:35:19:35:dc:5a:52:32:f5:41:
                    36:59:aa:6a:53:36:23:cb:54:71:7a:5b:6e:c2:6d:
                    27:55:19:4a:5e:fa:65:06:98:f2:61:24:3f:eb:e2:
                    6a:16:59:34:b1:ae:bb:e3:f6:cd:09:16:c6:e9:79:
                    07:ef:92:41:00:9e:91:bb:51:8e:20:eb:61:3f:f4:
                    52:fb:d0:2e:c5:38:4c:aa:d6:6e:7b:af:5b:ee:d3:
                    d4:c1:d3:ed:1a:d7:c7:b0:81:f6:3c:0b:f9:85:86:
                    1f:eb:fc:e9:b3:40:fe:de:5a:c9:5a:ed:c3:30:c9:
                    3d:30:55:b4:06:0b:d6:07:b9:dd:2b:05:30:9d:90:
                    28:65:42:94:a4:58:46:ee:8d:fd:06:8a:6a:42:1f:
                    26:d8:ae:f8:00:bf:b7:63:26:de:e7:b9:6b:8e:b6:
                    87:36:a2:0b:36:e9:8f:9a:74:4e:e8:17:1d:f1:d9:
                    47:76:a2:2c:f5:b1:93:2d:3f:cb:bc:2b:1b:9b:df:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:F5:EE:E5:F3:6D:62:61:6A:5B:06:8B:35:FB:23:00:02:69:5C:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JEY3Ho7GEcEbMEgkseRF6orZQ9bAp9WXVRV9z2a2Dbd/0/61F5EEE5F36D62616A5B068B35FB230002695C0B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.116.0/22
                IPv6:
                  2804:79cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271328

    Signature Algorithm: sha256WithRSAEncryption
         80:46:d0:79:b7:98:c4:8b:23:d2:15:d9:99:6e:69:12:c8:3e:
         74:67:9e:f5:c2:f0:9f:7e:2c:40:75:d9:9a:a6:23:c9:88:f6:
         a5:64:bf:72:d0:48:04:22:d1:45:77:40:60:dd:1c:62:f8:ca:
         be:28:f5:57:8f:74:ba:5c:47:ae:93:29:58:2d:9b:5c:ee:11:
         d5:6f:78:5d:5c:c4:1d:6d:9d:c4:02:35:01:47:2c:3f:b7:fa:
         63:59:64:c7:d3:3f:42:1b:e5:8e:7d:97:72:57:7c:22:46:9b:
         8c:2c:80:29:86:bd:50:4a:6c:6e:dc:f9:1e:0e:b0:47:04:77:
         57:ad:24:45:ba:c5:28:60:82:24:c5:7c:b5:fd:12:a8:45:6f:
         f6:ef:46:e8:ed:44:54:bc:f3:cd:64:6c:c1:f3:3a:cb:6d:a5:
         9e:de:23:6e:85:55:85:80:a8:12:59:15:87:1a:76:e6:9b:a2:
         d1:ee:81:63:a4:25:c1:cf:8c:da:8d:f5:c0:7c:6a:72:37:3b:
         e6:d7:63:b4:1e:ae:23:2a:cd:b7:02:2d:29:ed:42:71:91:f1:
         2b:27:b8:5c:92:33:07:17:cf:17:91:f6:06:9a:12:12:38:16:
         45:bc:0a:63:f2:5c:84:3d:4c:8c:c9:18:2e:dd:d3:38:53:1b:
         b9:bf:49:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org