Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/851AE993A8C9FB95FFC90A307B454F18C398DCEA.cer
File:                     851AE993A8C9FB95FFC90A307B454F18C398DCEA.cer (raw, json)
Hash identifier:          yyQTnMFEzHwy0jgPg8vjaeNmFsoozzb8rPtkRmH5hFI=
Subject key identifier:   85:1A:E9:93:A8:C9:FB:95:FF:C9:0A:30:7B:45:4F:18:C3:98:DC:EA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1088F61FCCF77EE76D91661D75D045D3B925BCDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/47Vs5mJ5W2NmbeRfyZKuE4bRKbNMnHASaMzf8cfhGfzp/0/851AE993A8C9FB95FFC90A307B454F18C398DCEA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/47Vs5mJ5W2NmbeRfyZKuE4bRKbNMnHASaMzf8cfhGfzp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:24 +0000
Certificate not after:    Tue 21 May 2024 09:25:24 +0000
Subordinate resources:    AS: 271319
                          IP: 179.0.68.0/22
                          IP: 2804:79a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:88:f6:1f:cc:f7:7e:e7:6d:91:66:1d:75:d0:45:d3:b9:25:bc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:24 2023 GMT
            Not After : May 21 09:25:24 2024 GMT
        Subject: CN=851AE993A8C9FB95FFC90A307B454F18C398DCEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:92:be:3e:bf:65:82:42:9f:12:a2:bf:62:0d:
                    4d:42:7f:7c:2f:28:9c:69:2c:5f:41:6b:fd:95:71:
                    ac:f1:7a:38:ec:e5:20:11:12:48:20:a3:68:9a:d2:
                    4a:73:53:d2:60:d6:2d:7b:f1:4e:0a:2e:a2:76:7e:
                    26:0d:bd:c8:ef:f7:9b:d4:d2:fc:f5:af:94:3b:cb:
                    2a:a0:db:8b:34:00:7b:1e:93:19:c3:8d:8b:bd:a3:
                    37:77:94:72:69:eb:5f:e1:c9:4c:1d:d3:87:06:c8:
                    3f:94:78:49:36:e0:85:ae:8e:27:b2:63:37:c8:1e:
                    b5:b3:72:23:87:c8:46:c5:9f:43:82:8e:13:d3:df:
                    d5:fa:3b:ca:13:08:26:e1:ba:96:71:87:8d:fe:6f:
                    08:f2:99:1d:d6:38:3f:a7:33:40:58:40:85:e5:3e:
                    a8:5c:63:5c:98:23:ea:c6:5e:b7:d7:81:ee:59:cb:
                    e9:27:ca:05:51:5d:af:64:7e:c1:4f:b7:68:3b:31:
                    b2:93:41:66:7f:e1:d0:76:55:ad:dc:5f:89:70:71:
                    f6:29:cf:0c:0a:39:80:17:98:e2:5f:d1:b6:1d:de:
                    0b:d8:e9:02:6e:51:74:e7:8f:11:1a:79:8d:59:81:
                    67:cb:41:40:c4:e5:02:1b:25:b2:13:2a:fa:cb:a9:
                    47:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:1A:E9:93:A8:C9:FB:95:FF:C9:0A:30:7B:45:4F:18:C3:98:DC:EA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/47Vs5mJ5W2NmbeRfyZKuE4bRKbNMnHASaMzf8cfhGfzp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/47Vs5mJ5W2NmbeRfyZKuE4bRKbNMnHASaMzf8cfhGfzp/0/851AE993A8C9FB95FFC90A307B454F18C398DCEA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.68.0/22
                IPv6:
                  2804:79a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271319

    Signature Algorithm: sha256WithRSAEncryption
         b3:af:2a:01:cd:65:55:84:7e:80:66:28:38:db:83:6b:86:d3:
         10:cc:72:78:03:54:78:22:19:0a:f9:68:65:6e:08:57:b2:1b:
         ee:df:77:b6:b3:da:a9:85:bd:55:44:11:8d:6f:1f:7a:52:e1:
         f4:2e:16:b2:de:fc:12:ff:c4:0f:a7:e8:3a:aa:39:74:25:a1:
         44:40:24:bf:f9:3d:9d:9a:88:be:fd:5d:2f:02:db:6c:dd:94:
         c8:3f:fb:3c:5d:1e:b8:c2:98:d4:c6:31:13:ff:ce:64:49:6e:
         3c:a2:fa:6c:ad:32:12:af:aa:41:72:6d:1d:f9:8e:68:91:63:
         35:ed:dd:1d:36:9a:f2:4d:ea:84:88:85:f6:f5:bf:11:fb:c3:
         68:48:da:f3:31:fe:05:36:76:e1:dd:48:38:96:85:e8:a1:ec:
         e4:ef:bf:c8:43:fe:3e:58:17:b6:49:5a:cb:f2:9d:2b:56:70:
         5e:2d:af:71:b0:01:53:85:2c:8e:89:da:5a:b8:3d:a4:4a:d1:
         69:ea:1a:57:de:57:29:14:12:18:b4:c0:3e:18:64:4c:9a:ff:
         91:a2:af:f3:3a:39:54:9b:61:a6:a3:09:2d:c2:a0:95:15:6d:
         ba:3c:f7:67:05:b3:c9:4a:f2:0a:21:ff:6b:39:11:6b:b3:de:
         54:96:0a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org