Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/851FB15B600F8E7DA5D5054E369228A7E196CA81.cer
File:                     851FB15B600F8E7DA5D5054E369228A7E196CA81.cer (raw, json)
Hash identifier:          1bzUh91K6Hxr6nDP+bVVGbW7A2KAI4FgJCS1x7UUMyk=
Subject key identifier:   85:1F:B1:5B:60:0F:8E:7D:A5:D5:05:4E:36:92:28:A7:E1:96:CA:81
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60347377FB58CEC057E4119976587FDBE9838F2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/851FB15B600F8E7DA5D5054E369228A7E196CA81.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 19:18:13 +0000
Certificate not after:    Tue 21 May 2024 19:23:13 +0000
Subordinate resources:    AS: 271566
                          IP: 179.63.172.0/22
                          IP: 2804:7d84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:34:73:77:fb:58:ce:c0:57:e4:11:99:76:58:7f:db:e9:83:8f:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 19:18:13 2023 GMT
            Not After : May 21 19:23:13 2024 GMT
        Subject: CN=851FB15B600F8E7DA5D5054E369228A7E196CA81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:cf:00:0c:48:15:35:96:48:1d:7c:1e:68:
                    55:4a:ec:b1:63:29:18:64:69:00:64:62:34:c8:2a:
                    e1:54:85:f0:0a:b2:6b:72:16:be:b9:0d:ed:c3:d9:
                    79:52:15:ba:b4:f2:01:f6:29:ec:68:b3:fb:12:e3:
                    41:93:34:14:ca:e1:eb:84:6c:7e:55:08:db:80:3e:
                    4f:61:65:94:dc:f0:be:59:90:a7:a0:cc:12:54:63:
                    4d:31:97:3c:75:bc:25:1d:7b:91:8b:65:e1:2b:c8:
                    bc:1f:db:6d:33:22:c4:96:bf:cd:d2:14:3b:a4:85:
                    f7:3c:ca:d3:5e:90:06:17:38:7f:b0:60:66:9b:46:
                    49:3b:ad:c7:06:6f:04:99:be:25:51:24:62:cc:f1:
                    9d:02:27:e0:6b:9b:08:b8:26:6f:d9:df:5f:ce:bc:
                    cc:9c:e0:f3:a9:a4:8c:ed:55:2e:b2:cb:e6:bb:68:
                    ab:db:8f:11:83:b5:5a:9c:27:56:5c:2f:d2:0f:6a:
                    da:d0:63:a6:cb:1e:53:12:9e:12:dd:42:39:71:88:
                    46:c8:60:8b:82:78:ae:b9:4b:41:bb:8a:da:18:93:
                    41:d1:cf:70:3e:ab:70:ec:e4:3f:22:ce:07:f5:c1:
                    5f:3b:c3:98:2d:1d:52:77:5d:ab:bf:27:20:eb:c2:
                    7c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:1F:B1:5B:60:0F:8E:7D:A5:D5:05:4E:36:92:28:A7:E1:96:CA:81
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F6QMEAScoRfEsVdLYoBW2XQkXUAn19FiRR3ytvxihSgh/0/851FB15B600F8E7DA5D5054E369228A7E196CA81.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.172.0/22
                IPv6:
                  2804:7d84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271566

    Signature Algorithm: sha256WithRSAEncryption
         06:67:20:14:e0:22:67:b4:5b:c2:6e:02:51:42:83:26:f4:0f:
         f6:34:00:df:f8:67:ba:7b:6d:ee:db:ad:a6:90:71:8e:57:52:
         07:68:eb:51:ac:3f:72:44:e2:bf:c8:34:02:d2:5b:32:81:f7:
         6d:22:82:df:d9:7d:b4:63:40:10:2b:5d:91:8a:fa:f0:ed:ef:
         e0:eb:89:6e:af:ae:d7:a9:1f:63:83:da:63:03:e2:a6:5f:0e:
         46:13:79:38:42:c8:78:da:40:43:56:79:bb:59:39:7c:d5:50:
         80:ac:58:88:54:da:09:d8:2f:46:c4:8c:34:84:2b:d5:a1:13:
         8e:b9:2d:ca:a3:4c:1f:5b:eb:ce:40:ce:0c:91:07:5b:0d:81:
         9f:88:c0:78:2a:58:9e:a1:39:e8:35:a3:93:ac:ed:33:2e:fd:
         81:a4:96:51:2e:9b:eb:a8:42:e0:7f:9f:42:4a:3c:0d:b4:ff:
         fd:1b:90:ff:c8:c8:d0:31:d9:f4:e1:cf:52:32:22:26:68:50:
         2e:af:bc:1b:59:61:90:74:93:74:5e:d9:19:1f:97:d8:f5:f8:
         b6:4c:0a:8f:5b:2e:d5:72:16:fa:5a:f2:0d:cd:c0:31:e5:33:
         d0:a1:2d:64:3e:5b:55:00:77:ab:7f:19:6d:fa:6e:0d:27:0e:
         c1:09:d1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org