Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/835C14CFB8B603CCCA76EA942BA566861EC99E00.cer
File:                     835C14CFB8B603CCCA76EA942BA566861EC99E00.cer (raw, json)
Hash identifier:          j4494ScF8xFPs5NLzHBsTkd4bPE7+Ff3miUrQloPZz4=
Subject key identifier:   83:5C:14:CF:B8:B6:03:CC:CA:76:EA:94:2B:A5:66:86:1E:C9:9E:00
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1232983B17D9D346F2755E70481117C97A857432
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/835C14CFB8B603CCCA76EA942BA566861EC99E00.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 21:03:31 +0000
Certificate not after:    Fri 25 Oct 2024 21:08:31 +0000
Subordinate resources:    AS: 271204
                          IP: 45.236.60.0/22
                          IP: 179.49.188.0/22
                          IP: 2804:77dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:32:98:3b:17:d9:d3:46:f2:75:5e:70:48:11:17:c9:7a:85:74:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 27 21:03:31 2023 GMT
            Not After : Oct 25 21:08:31 2024 GMT
        Subject: CN=835C14CFB8B603CCCA76EA942BA566861EC99E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:27:dc:5f:5a:0d:af:00:35:59:1e:54:af:
                    31:2d:59:18:d0:f0:c4:4f:5a:64:3a:d8:5c:d8:24:
                    14:e2:a1:3f:aa:11:88:22:0d:c2:a2:f2:5b:b6:a6:
                    11:63:6b:31:ba:f7:93:83:aa:dd:7d:4b:57:1e:04:
                    d4:91:59:d0:68:c2:9e:14:1b:c6:6e:6a:1a:7f:60:
                    eb:83:12:b7:44:ff:95:4a:ff:a5:4a:76:3a:33:b8:
                    82:63:3b:d8:62:12:9c:ac:e1:af:a3:12:05:9d:c8:
                    63:26:9e:12:be:89:02:c0:ba:9e:9c:9b:b3:e0:7e:
                    7f:5e:09:5d:ef:cb:99:7f:e2:ab:20:0d:57:22:c5:
                    86:31:69:b3:7d:ce:83:20:cd:22:6b:4d:83:d2:ad:
                    fb:b0:f2:d1:ff:d1:88:02:bd:e2:0d:42:88:d2:d7:
                    f4:f7:50:32:6a:66:ab:ef:63:e2:27:f2:89:f0:e6:
                    75:ea:6a:bb:38:fc:d3:77:80:b8:5d:56:8d:d5:34:
                    bb:47:dd:9f:f4:a4:dc:5c:e9:e8:8a:8f:e3:57:0b:
                    52:17:f6:d8:08:af:39:89:33:66:6b:04:d2:ce:78:
                    8b:3e:53:57:06:88:b6:c1:50:e0:e3:b0:1f:dd:cf:
                    73:43:92:9b:96:db:26:d7:83:50:08:c5:75:3d:b4:
                    f7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:5C:14:CF:B8:B6:03:CC:CA:76:EA:94:2B:A5:66:86:1E:C9:9E:00
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/0/835C14CFB8B603CCCA76EA942BA566861EC99E00.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.60.0/22
                  179.49.188.0/22
                IPv6:
                  2804:77dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271204

    Signature Algorithm: sha256WithRSAEncryption
         46:76:1b:c4:06:4f:91:b8:46:30:10:8b:91:08:75:f3:fe:7e:
         15:76:84:c9:b7:41:2d:2c:f1:02:33:ad:a1:4c:8c:38:96:8e:
         c4:11:5d:2d:fc:ff:a5:eb:5e:4f:e6:8a:02:8e:10:0e:73:fa:
         33:20:a0:7e:79:60:46:95:d9:71:7d:cf:ad:52:d1:86:c7:cd:
         63:f0:b3:44:f1:11:e4:f9:c8:d8:5e:6b:f0:af:2a:4b:f1:ae:
         7d:0d:6c:ad:89:65:52:81:d4:13:e3:f4:23:73:db:0c:1b:8c:
         71:36:c8:49:0e:b4:dc:75:61:4b:af:31:4c:20:64:b3:88:aa:
         28:d3:10:be:f1:03:f6:1d:cc:85:f6:6f:54:a6:a2:81:b5:8b:
         e8:b2:17:06:03:a0:33:99:16:dd:30:d9:51:78:20:be:1a:2e:
         1f:04:d0:67:a9:be:88:56:91:4b:8c:e9:96:d4:c3:b6:12:f4:
         02:16:df:bc:ee:02:16:9c:04:de:c0:37:3b:0d:18:5c:2b:2d:
         d7:a0:49:bc:fe:42:07:05:f7:3b:e3:b1:0a:e7:38:cf:3a:f8:
         b0:f8:e4:ea:30:8c:8f:33:6a:81:f2:18:a3:4e:79:dd:2d:6c:
         15:da:f1:3c:44:5a:bc:6f:98:e4:35:75:95:0d:e4:b5:ce:6a:
         80:fe:40:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:40 2024 by rpki-client on console-ams.rpki-client.org