Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/81308E19F000DE7D42EACA02CB40E08EFD5B36B0.cer
File:                     81308E19F000DE7D42EACA02CB40E08EFD5B36B0.cer (raw, json)
Hash identifier:          GppgnbXyjUfAibweWvzllOTNsJFKAPmjP6dRWSOrxPQ=
Subject key identifier:   81:30:8E:19:F0:00:DE:7D:42:EA:CA:02:CB:40:E0:8E:FD:5B:36:B0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A99B54E07000FA78652DA6340BC59F5CB08352D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G1C21N8skK9Fhz8tRzGWekutfPfkkutFhSU3ao9X5H5r/0/81308E19F000DE7D42EACA02CB40E08EFD5B36B0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G1C21N8skK9Fhz8tRzGWekutfPfkkutFhSU3ao9X5H5r/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 14:11:19 +0000
Certificate not after:    Mon 23 Sep 2024 14:16:19 +0000
Subordinate resources:    AS: 266496
                          IP: 170.244.20.0/22
                          IP: 2804:38b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:99:b5:4e:07:00:0f:a7:86:52:da:63:40:bc:59:f5:cb:08:35:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 14:11:19 2023 GMT
            Not After : Sep 23 14:16:19 2024 GMT
        Subject: CN=81308E19F000DE7D42EACA02CB40E08EFD5B36B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:99:08:3a:a0:97:41:ba:b4:55:83:6d:5f:
                    14:e3:f3:85:19:47:07:e1:e5:23:ca:74:9b:d9:ed:
                    ae:82:ef:b1:14:71:12:b2:e4:1d:e8:cd:f7:a9:c7:
                    19:08:ba:e1:19:e0:1e:f1:e0:bc:66:86:09:1f:b2:
                    69:a5:61:f4:f5:3c:0d:d6:84:73:a3:c1:9d:b1:25:
                    68:cd:d2:5e:c5:73:43:5a:a1:c8:51:0a:30:bc:94:
                    ae:43:10:e6:9f:1f:e1:13:a9:07:1d:b3:c9:56:36:
                    6f:6a:b3:04:64:42:d7:9b:2a:6e:6a:e0:a1:50:a7:
                    1d:ea:60:13:ed:25:76:44:61:66:9f:1f:0d:c4:84:
                    ec:ae:84:3f:81:1c:19:1a:f1:90:80:ec:b8:23:08:
                    5a:9e:60:c4:80:71:b7:dc:54:22:51:da:68:60:a6:
                    1a:5a:78:f8:13:fb:ee:f3:57:2a:28:ac:31:89:6a:
                    a2:7e:2a:3d:ca:10:f5:63:df:81:16:cb:1b:08:cd:
                    87:1a:9f:b0:68:1b:21:ba:d7:37:1f:60:73:58:25:
                    84:a8:ec:42:f1:6d:4b:f7:ce:1e:68:96:c6:a2:6f:
                    dc:15:1c:c9:a6:a1:96:b6:60:7b:bd:44:73:da:34:
                    4b:f9:54:e4:1e:3c:09:8a:58:eb:37:7a:8a:67:3f:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:30:8E:19:F0:00:DE:7D:42:EA:CA:02:CB:40:E0:8E:FD:5B:36:B0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G1C21N8skK9Fhz8tRzGWekutfPfkkutFhSU3ao9X5H5r/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G1C21N8skK9Fhz8tRzGWekutfPfkkutFhSU3ao9X5H5r/0/81308E19F000DE7D42EACA02CB40E08EFD5B36B0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.20.0/22
                IPv6:
                  2804:38b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266496

    Signature Algorithm: sha256WithRSAEncryption
         aa:e6:3c:8d:76:57:ce:83:a5:aa:45:a8:fc:09:8a:78:ba:76:
         6b:4c:25:b4:bc:de:35:14:14:a8:d9:26:08:48:01:01:b4:3f:
         83:df:9f:11:17:5f:04:39:c8:06:88:e5:d5:e7:75:0d:05:ee:
         6e:ab:b2:22:30:02:a1:e0:45:e2:fa:53:4e:82:ce:57:a6:e1:
         a7:8d:52:3b:bb:94:77:c9:34:a3:54:ef:46:a7:cf:f7:6e:5a:
         74:f6:76:5b:34:88:e3:70:80:f2:c8:f9:17:16:7e:bb:b8:89:
         42:90:9d:72:3f:7a:28:2d:50:59:27:70:c0:13:5e:ae:3e:e0:
         4d:0b:ba:bc:d9:5d:7f:dd:04:6c:c2:fa:12:a1:7a:29:a1:65:
         fa:14:e3:ee:70:72:b0:74:b9:c2:34:17:9f:54:b0:2c:57:02:
         16:a5:e9:2b:98:43:b7:59:0a:ef:28:8f:17:00:db:42:95:0e:
         0f:1d:27:c0:62:b6:31:99:96:9c:31:c7:a9:0e:82:5e:da:ff:
         d4:54:c3:5c:a4:9a:41:14:66:06:15:44:ac:4a:18:41:03:eb:
         07:10:06:87:dc:6f:be:74:a3:76:0a:64:ab:2b:dc:c0:cb:1d:
         53:76:44:bb:d4:5e:52:37:a4:b8:60:37:88:66:c9:1c:66:6e:
         17:41:63:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org