Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE.cer
File:                     82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE.cer (raw, json)
Hash identifier:          zXn5hjTwuxrl/xdW5KEiI2VUAM2otmyJwNkrG6qh2eo=
Subject key identifier:   82:EF:B3:E4:98:25:D6:F5:FC:77:DA:46:06:C5:51:B3:C3:B8:6E:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       79B83CB0A252AAF5F861F83B7D047EA1A8074D51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/0/82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 19:31:34 +0000
Certificate not after:    Tue 09 Jul 2024 19:36:34 +0000
Subordinate resources:    AS: 53169
                          IP: 170.239.68.0/22
                          IP: 177.190.112.0/20
                          IP: 186.209.128.0/20
                          IP: 187.108.16.0/20
                          IP: 2804:1684::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:b8:3c:b0:a2:52:aa:f5:f8:61:f8:3b:7d:04:7e:a1:a8:07:4d:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 11 19:31:34 2023 GMT
            Not After : Jul  9 19:36:34 2024 GMT
        Subject: CN=82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:fb:85:7e:f4:9a:e9:e0:2c:c0:79:3d:00:
                    b0:37:ff:a4:9e:b6:b7:12:cb:b9:30:91:a9:2f:64:
                    01:06:1b:cc:2c:8d:6b:a6:51:40:b1:3d:d6:d3:dc:
                    13:ce:86:49:5b:1d:d8:ba:fe:48:37:25:8a:c1:c6:
                    46:af:02:93:8c:f6:41:4c:a9:68:54:f2:10:94:82:
                    ce:94:56:c5:a0:28:7b:1e:cb:35:ee:56:a7:27:48:
                    2a:2b:3c:2b:57:4e:5d:7d:ce:b1:ec:8f:0a:cb:7f:
                    d2:a2:65:4b:e6:1b:c0:5d:d5:af:6c:96:25:6d:17:
                    f5:72:19:e8:37:0e:13:04:5e:b2:f6:b6:7f:74:d9:
                    5a:10:ba:8e:38:7c:9d:14:af:90:20:ee:0c:44:4d:
                    ad:82:17:3a:e3:a6:64:bc:b7:6e:c5:49:42:e6:70:
                    44:c3:c1:74:23:a7:5d:c4:b6:90:9b:ee:47:ea:4e:
                    26:02:41:e9:2a:4e:c0:32:b6:17:9b:22:ab:94:1d:
                    a9:14:cd:0a:1b:86:a2:59:30:4d:c7:45:7c:cf:27:
                    aa:8c:db:25:aa:07:cc:fb:8e:a2:b9:d4:a6:c3:23:
                    a3:08:cf:79:50:69:37:51:c9:32:16:92:14:c4:0f:
                    65:2e:af:8c:a3:44:15:07:51:fb:37:b1:2f:9e:c0:
                    5d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:EF:B3:E4:98:25:D6:F5:FC:77:DA:46:06:C5:51:B3:C3:B8:6E:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G81J6aRi8gaguucAFXhd3nr6UG9V5434jLWQLtx9wPc6/0/82EFB3E49825D6F5FC77DA4606C551B3C3B86EFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.68.0/22
                  177.190.112.0/20
                  186.209.128.0/20
                  187.108.16.0/20
                IPv6:
                  2804:1684::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53169

    Signature Algorithm: sha256WithRSAEncryption
         25:d7:e3:99:46:90:58:15:ec:a1:72:8e:fc:73:8d:77:53:2b:
         56:27:ae:e8:df:3f:6d:8b:a0:ae:80:a0:ad:a8:11:27:82:ce:
         d8:7a:7a:c8:1b:36:60:9b:5e:86:c4:3a:c2:03:5a:97:de:62:
         19:2d:d4:7f:64:1e:b9:e0:bd:d9:65:9b:76:72:a9:cd:82:64:
         3f:42:5e:54:ca:60:bd:d3:81:51:9b:f4:e5:7e:ac:e2:a3:ef:
         22:b5:ed:92:d2:76:fc:5a:2b:f8:23:b1:84:73:26:f5:92:e9:
         53:2d:55:ed:48:fc:f1:94:9c:1b:ad:72:df:c1:98:1d:d1:c0:
         9c:6a:e7:e7:9c:50:f7:c0:dd:95:4a:e0:d1:0e:3a:80:68:d9:
         a0:0c:40:b6:4a:2f:8f:f1:1c:f9:32:65:87:fa:08:1c:1d:e5:
         a9:c3:09:f8:79:36:7b:16:b1:96:62:d7:43:ab:c0:4a:8a:1b:
         b1:4c:60:c0:32:55:67:ef:b3:0a:4f:c5:9e:ce:12:49:36:8a:
         9e:bd:29:46:1f:a7:ea:5a:c0:91:33:3d:81:cd:18:33:b7:5a:
         46:9b:92:68:96:01:45:f2:9b:50:16:4e:49:c7:69:70:bb:ac:
         7b:46:cf:17:8c:77:66:49:08:f8:41:16:da:6e:c5:3c:86:4e:
         f5:38:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:40 2024 by rpki-client on console-ams.rpki-client.org