Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/85CE4330E3308022DBE77EBC481C4AAF39692E70.cer
File:                     85CE4330E3308022DBE77EBC481C4AAF39692E70.cer (raw, json)
Hash identifier:          u+o1OYu1z5m2KSgZ9BqsXIT4qnP5hhCFQ+94CWGlUfg=
Subject key identifier:   85:CE:43:30:E3:30:80:22:DB:E7:7E:BC:48:1C:4A:AF:39:69:2E:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A53BA6EA3900AF80C03B195C8FB916FB74BCEC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/85CE4330E3308022DBE77EBC481C4AAF39692E70.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jan 2024 19:55:09 +0000
Certificate not after:    Mon 13 Jan 2025 20:00:09 +0000
Subordinate resources:    AS: 271240
                          IP: 179.48.48.0/22
                          IP: 2804:7868::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:53:ba:6e:a3:90:0a:f8:0c:03:b1:95:c8:fb:91:6f:b7:4b:ce:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 15 19:55:09 2024 GMT
            Not After : Jan 13 20:00:09 2025 GMT
        Subject: CN=85CE4330E3308022DBE77EBC481C4AAF39692E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:72:84:77:02:41:9f:5a:ab:e3:bc:4c:6c:4b:
                    82:28:53:b6:ee:81:f8:5d:68:fc:7f:cf:df:87:aa:
                    d8:bc:74:30:c5:96:08:16:98:8b:51:32:27:38:d5:
                    2e:58:20:e9:88:f9:70:e5:5f:1a:cb:2e:29:31:e8:
                    1a:a9:62:a0:e7:de:a1:c2:1e:85:47:67:77:7c:a9:
                    a5:03:aa:04:d5:4e:7a:63:ca:3a:6a:b4:32:63:9b:
                    cc:ab:bc:39:b2:4b:2c:ce:82:3d:1c:e2:89:68:ea:
                    63:ec:55:9e:a0:67:af:0d:2f:09:f1:43:65:e6:fa:
                    12:16:85:4c:3c:a3:ae:12:3c:c2:88:8d:3e:73:b3:
                    19:a9:00:9a:4f:e3:5b:e6:1c:d3:97:97:9d:bd:14:
                    5e:25:8c:bd:1d:11:39:ac:51:ed:e2:e2:50:62:18:
                    cf:bf:71:84:97:79:a6:2e:6b:54:c3:b5:2c:6e:05:
                    2b:37:c9:fb:f3:e9:8c:32:7b:e3:ee:2b:45:46:5a:
                    51:a0:b0:33:8f:3a:58:d4:96:f1:b6:75:31:c8:97:
                    1a:c3:ea:72:dd:12:cc:14:e0:b1:17:a8:a6:86:e0:
                    8a:fb:2d:e5:ed:fa:a7:eb:7e:7c:77:a5:3a:19:8e:
                    06:cb:e2:34:f9:5d:8b:5a:cd:4a:58:c8:82:91:6d:
                    89:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                85:CE:43:30:E3:30:80:22:DB:E7:7E:BC:48:1C:4A:AF:39:69:2E:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4fLCXriGoH53pvSZ48FLP2keRxhpgUoY5CuZV3DU8hoT/0/85CE4330E3308022DBE77EBC481C4AAF39692E70.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.48.0/22
                IPv6:
                  2804:7868::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271240

    Signature Algorithm: sha256WithRSAEncryption
         68:4d:51:61:77:93:f9:2b:ec:e4:b3:71:42:2c:50:c8:52:15:
         d8:8d:a1:3a:dc:2d:11:98:27:a2:ac:8c:b7:ff:0f:be:45:b7:
         6c:e6:f3:c0:aa:7c:3e:69:58:0e:55:86:4b:b0:96:83:4f:06:
         be:69:96:a0:9a:87:28:15:80:cd:4e:be:c7:5f:98:d2:32:d8:
         23:c9:7c:52:7d:dc:aa:49:42:90:d4:5a:5c:11:9a:69:61:5e:
         0b:65:56:f9:0b:df:92:82:5a:a8:30:d9:c4:2f:33:47:64:d4:
         6a:7f:a2:55:2c:72:44:32:74:f7:7a:6c:f2:96:fd:9d:8e:74:
         27:69:64:5f:da:0b:b6:9d:8f:8f:f5:3e:1a:b6:fe:42:cb:e2:
         5d:3a:c1:7e:8a:a6:31:af:9a:cc:34:e9:31:7f:08:e7:c4:bd:
         a8:27:88:7a:52:3a:3d:31:f1:3b:a4:ac:ef:c4:14:20:48:a7:
         81:b6:8d:e6:95:0e:dc:15:a1:e4:ad:ad:da:70:a8:c5:32:14:
         62:c4:97:ac:7b:55:d9:75:d5:f4:e0:33:65:44:b5:c4:70:37:
         7f:4f:ca:af:e1:9d:ae:7b:3f:6e:4b:0f:e4:d8:a4:e6:b5:3c:
         ea:0f:cf:c7:ef:9d:de:c1:1b:2f:d2:d8:e3:90:24:88:d8:64:
         66:e7:28:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org