Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer
File:                     818DDB0D2DF0A6D1B534A098FAC04773983F7971.cer (raw, json)
Hash identifier:          bN4bjt0H6EV7oLi8M0KS8L7NrrGZLZ9pW11DcHx/txM=
Subject key identifier:   81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4CA40A2BBB8DDA71794E50321900FCD39B14FBE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 19:25:08 +0000
Certificate not after:    Tue 18 Jun 2024 19:30:08 +0000
Subordinate resources:    AS: 262755
                          IP: 138.0.32.0/22
                          IP: 168.0.248.0/22
                          IP: 170.81.188.0/22
                          IP: 170.238.88.0/22
                          IP: 186.224.0.0 -- 186.224.23.255
                          IP: 2804:19c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:a4:0a:2b:bb:8d:da:71:79:4e:50:32:19:00:fc:d3:9b:14:fb:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 20 19:25:08 2023 GMT
            Not After : Jun 18 19:30:08 2024 GMT
        Subject: CN=818DDB0D2DF0A6D1B534A098FAC04773983F7971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0a:e7:95:02:9d:b6:e0:b9:a5:b0:f6:1f:9e:
                    4b:14:e2:f3:43:41:38:5f:f3:05:53:97:c6:58:53:
                    14:38:1d:a7:bd:8b:ad:e7:98:9c:79:c5:30:4f:bc:
                    e2:75:1d:f7:fb:43:7a:9f:58:ba:54:ac:a8:7a:09:
                    e1:e3:89:cc:23:80:4d:95:5e:f3:e7:c5:a3:0a:59:
                    c1:a4:90:c4:10:d2:a4:3f:ec:d3:76:ac:de:e9:c6:
                    a5:ec:29:28:49:81:9d:cc:13:1f:b1:9a:ab:b3:ce:
                    36:88:fa:19:d4:5c:37:b7:11:dd:52:a0:68:9a:d9:
                    ba:a0:1e:1c:d0:4c:9e:d0:7b:db:2a:05:d9:4b:17:
                    f1:e6:b2:8a:ac:47:59:1a:f1:ff:7c:13:f2:99:59:
                    47:ed:84:1a:33:71:c2:6e:c7:7a:f0:53:f2:80:0e:
                    1e:6b:36:94:28:64:e3:01:71:9c:1b:6a:7d:5c:8f:
                    d7:9f:9e:06:ce:c1:3e:7f:e7:81:fe:dd:55:9b:96:
                    3a:e7:2a:d1:5f:13:cb:0f:b7:61:07:7c:b1:f7:35:
                    10:10:78:22:78:13:e7:d6:83:71:67:27:42:a1:6f:
                    d7:f8:98:66:83:34:c8:cf:03:2b:d4:b6:8a:2b:f3:
                    08:58:07:0a:74:74:be:bd:3e:26:dc:16:9f:6f:a3:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:8D:DB:0D:2D:F0:A6:D1:B5:34:A0:98:FA:C0:47:73:98:3F:79:71
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CPf1F14qWiWUkrf42jeh1s4bmWB2ezasLgwjyjUd9xXs/0/818DDB0D2DF0A6D1B534A098FAC04773983F7971.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.32.0/22
                  168.0.248.0/22
                  170.81.188.0/22
                  170.238.88.0/22
                  186.224.0.0-186.224.23.255
                IPv6:
                  2804:19c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262755

    Signature Algorithm: sha256WithRSAEncryption
         34:55:3f:4a:f3:35:14:69:66:c3:5f:db:1e:bf:55:7d:b9:0d:
         50:21:c5:28:48:2d:4d:f4:0b:76:dd:67:22:64:57:33:01:f5:
         b0:fc:7c:37:8f:e8:77:cb:b1:35:92:1f:c2:2a:4d:9d:b3:99:
         ee:2f:54:0f:5b:aa:35:b0:43:f6:23:70:0d:be:6c:66:34:6d:
         5c:3e:49:72:bb:e6:d0:ec:b0:b7:49:7d:33:0c:b5:0d:9b:5a:
         7e:87:85:67:db:00:b3:cb:83:41:8c:1d:ab:9d:8d:fb:5a:01:
         b0:29:69:e4:19:81:88:ef:e9:41:58:3b:9b:55:a0:38:4c:20:
         8b:75:a8:7f:71:e1:7d:e4:79:8b:4f:7f:68:3d:f9:ef:21:56:
         4c:72:f4:5b:ff:c9:0e:de:09:ce:89:6b:cb:57:a5:26:3e:91:
         3f:d2:36:25:52:38:59:58:38:46:cc:7c:d7:c8:f3:5d:2e:a2:
         8c:6f:07:fa:0a:80:21:c2:65:5e:83:dc:08:18:55:98:04:28:
         c6:a3:cb:16:fd:fc:8a:7c:5b:24:09:e8:10:0e:bb:55:b6:ec:
         4b:4b:3c:d6:fe:70:3c:e4:b3:41:8d:4f:4a:a1:e2:0d:9b:03:
         04:c0:27:d3:89:38:06:a8:3e:79:9b:b5:2f:22:c7:2b:36:bc:
         d9:fc:e7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org