Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.cer
File:                     712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.cer (raw, json)
Hash identifier:          HSD+cPuGHgko1qe22fLysJ9jdfS+K5HNUkcMXOOi6GY=
Subject key identifier:   71:21:43:F5:59:1A:A8:BD:BF:21:E7:E0:33:1E:C7:F5:A5:04:9D:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7296AD658664EF43BDB2C9C5602B72A8C724A920
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 17 Oct 2023 09:45:27 +0000
Certificate not after:    Tue 15 Oct 2024 09:50:27 +0000
Subordinate resources:    AS: 263280
                          IP: 179.109.88.0/21
                          IP: 2804:164c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:96:ad:65:86:64:ef:43:bd:b2:c9:c5:60:2b:72:a8:c7:24:a9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 17 09:45:27 2023 GMT
            Not After : Oct 15 09:50:27 2024 GMT
        Subject: CN=712143F5591AA8BDBF21E7E0331EC7F5A5049DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:7e:4e:04:0a:68:66:a2:8c:50:e6:37:21:b3:
                    e7:45:37:5c:c2:7e:7f:ba:b7:52:25:5c:64:e2:7e:
                    c3:8e:a7:b5:56:17:aa:d0:b4:8e:bf:30:5a:7b:57:
                    37:7c:30:a6:26:aa:5a:34:bb:1d:4b:aa:7b:49:07:
                    62:08:55:63:e7:f1:1d:6a:cc:4d:51:82:a3:f7:75:
                    0e:5a:99:69:7b:fb:06:65:71:18:91:21:35:d5:71:
                    ce:1d:e0:f8:63:d1:fa:c6:7d:44:78:b8:b9:cc:c5:
                    c8:64:b7:5d:3f:e5:3f:b0:aa:c9:c4:78:06:e6:88:
                    de:e2:f2:91:e4:9e:35:1d:b1:e4:ea:2d:c9:41:04:
                    52:35:9a:fc:4b:45:67:24:e3:6a:94:37:7d:85:96:
                    42:d0:e2:95:02:ae:d1:a0:07:88:51:55:1d:6b:dc:
                    40:ce:42:f9:a2:c9:25:c5:4a:82:55:d3:b7:8c:13:
                    ab:7a:53:02:82:2e:1d:1a:4d:84:79:a1:c3:d4:03:
                    19:68:e2:b7:84:10:dc:ea:19:87:5d:81:08:fe:6d:
                    85:8f:3b:30:71:1b:49:a3:6d:b8:69:d0:be:f4:e3:
                    c2:fe:91:cd:ac:03:32:0d:b4:fa:f9:9e:56:0f:bf:
                    bd:b4:4a:74:45:bb:69:2a:fd:6b:f3:1c:dd:d1:2f:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                71:21:43:F5:59:1A:A8:BD:BF:21:E7:E0:33:1E:C7:F5:A5:04:9D:C6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/0/712143F5591AA8BDBF21E7E0331EC7F5A5049DC6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.88.0/21
                IPv6:
                  2804:164c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263280

    Signature Algorithm: sha256WithRSAEncryption
         69:e1:80:53:4c:77:ad:b5:fb:1a:1b:b8:a2:b9:df:12:c8:9f:
         87:e6:01:8f:37:5f:a4:09:d4:aa:38:02:dc:86:f2:7d:44:3d:
         a7:3c:a7:21:22:1a:8c:0d:f2:70:b4:2b:cb:b7:0f:c5:76:a6:
         06:75:1f:0e:27:c3:0f:1e:dc:3e:b2:0f:3a:82:10:c1:45:fd:
         d4:cd:05:c7:ff:67:3b:bd:c1:07:55:91:04:1d:fa:06:22:24:
         96:85:9a:81:c5:91:0b:27:ee:69:25:4b:64:ec:29:b2:7d:68:
         69:8c:dc:86:1b:5f:f3:83:f2:dc:15:1a:41:66:3b:67:b3:b8:
         42:2c:c7:09:0e:48:1e:1e:c8:af:a0:75:c9:dc:8a:9b:a1:49:
         21:f4:dc:01:d7:8b:3d:26:f7:02:55:2c:08:35:da:03:28:fb:
         c0:a4:e2:dd:ec:e5:6d:0e:ca:47:34:d5:60:a0:53:39:c1:30:
         b6:05:f1:eb:44:1a:3a:1d:cd:00:39:6c:de:d2:82:0b:0a:b4:
         67:40:94:02:56:f3:57:eb:b0:8d:5c:ed:55:b4:7f:3f:6f:b9:
         60:ef:1c:27:43:e1:d7:06:68:3d:b2:df:59:c5:91:83:3c:02:
         40:2b:cd:44:78:eb:af:4e:a5:e0:a4:89:ae:df:b3:a5:f6:35:
         3a:d1:f3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org