Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/862941EC30CF6C4087C51A295774CEEE37A888E1.cer
File:                     862941EC30CF6C4087C51A295774CEEE37A888E1.cer (raw, json)
Hash identifier:          4dEI7jAkQQSioleQG+LcWrfeCqz8yPc/lXlboFH1rno=
Subject key identifier:   86:29:41:EC:30:CF:6C:40:87:C5:1A:29:57:74:CE:EE:37:A8:88:E1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A48E338825B41ED492C9C4781255EE6A5AFFB31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/0/862941EC30CF6C4087C51A295774CEEE37A888E1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2023 19:21:56 +0000
Certificate not after:    Fri 15 Nov 2024 19:26:56 +0000
Subordinate resources:    AS: 271005
                          IP: 190.124.52.0/22
                          IP: 2804:74d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:48:e3:38:82:5b:41:ed:49:2c:9c:47:81:25:5e:e6:a5:af:fb:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 19:21:56 2023 GMT
            Not After : Nov 15 19:26:56 2024 GMT
        Subject: CN=862941EC30CF6C4087C51A295774CEEE37A888E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4e:97:bf:0a:e7:a9:11:68:fb:4c:ed:c0:a3:
                    d1:14:dd:7e:e1:dd:18:80:ba:59:45:36:59:c5:92:
                    02:2c:77:ad:c0:b6:f1:15:17:1c:7a:db:df:1d:0e:
                    ba:ae:6b:78:27:05:cc:75:8c:38:dc:9b:c9:af:98:
                    f7:69:e2:bf:84:b7:51:a3:67:88:54:9f:4e:0d:6b:
                    bc:a1:db:9d:a4:46:38:6f:bf:6b:4e:e2:da:11:a6:
                    91:ec:c5:eb:16:4f:36:b1:ba:6d:d0:c2:a9:bf:cd:
                    e2:33:a8:0a:5d:78:96:85:40:3e:20:b3:ac:41:96:
                    6e:c1:1f:f9:f8:ba:78:3e:75:24:fc:ac:24:63:05:
                    6d:34:81:6c:cf:d5:e5:08:48:15:08:01:d7:6a:56:
                    a1:8a:ff:ae:fd:e1:68:9a:6e:cb:f0:d5:e7:4a:6c:
                    00:e8:88:b9:4b:e1:28:50:99:21:01:ae:5d:6a:96:
                    2b:bf:ed:58:3b:f6:a1:94:7b:b3:bf:54:e5:b7:24:
                    8e:e0:20:3e:c2:87:68:86:04:a2:c3:cc:60:f0:d7:
                    46:a8:1e:1b:22:48:67:b2:2f:54:75:d0:99:14:b1:
                    eb:cb:a1:29:eb:f2:7b:c7:4d:3f:b5:9f:58:a2:69:
                    cb:a6:a5:83:fc:a1:91:70:50:28:f0:bb:08:bc:46:
                    47:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:29:41:EC:30:CF:6C:40:87:C5:1A:29:57:74:CE:EE:37:A8:88:E1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FTkYUbdg2NnDcz7UnJ3xLP59LemcFRLHqd1zMsmDPSCD/0/862941EC30CF6C4087C51A295774CEEE37A888E1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.52.0/22
                IPv6:
                  2804:74d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271005

    Signature Algorithm: sha256WithRSAEncryption
         7e:82:f6:37:5e:0a:fe:25:25:de:06:77:43:bc:64:44:eb:75:
         6a:4e:0d:ec:4d:3f:41:5a:6c:48:ab:29:42:2d:23:93:1f:74:
         ce:b5:fd:b0:bd:83:ef:2c:5c:58:68:91:2a:a8:21:2b:95:00:
         80:61:08:8f:0b:c2:ae:92:d3:a0:dd:f1:00:2c:4d:44:99:44:
         75:03:7b:e8:6e:ad:65:6a:31:9f:72:7e:5e:4a:0f:a3:82:6d:
         7e:fd:8f:80:83:0a:a4:55:02:51:d6:97:c4:b2:a0:6a:eb:94:
         d2:d3:ea:27:cc:67:77:7f:5a:75:b5:a8:da:bc:7f:c8:62:a4:
         2d:89:2a:db:6b:25:4b:4a:61:9d:7d:69:be:bd:80:9a:a2:20:
         de:ad:51:59:86:70:a4:58:77:02:ae:4a:77:06:48:db:ca:75:
         72:e5:49:71:fb:74:98:c0:27:2a:31:4b:bb:24:bc:48:8e:42:
         9d:e3:a7:93:6d:57:34:27:21:a5:89:2c:06:aa:4b:2a:7f:50:
         d9:69:73:28:17:41:dc:5f:18:41:c7:f8:2a:ff:68:1e:5c:9f:
         dc:3d:bf:0d:ab:c2:c8:9d:e4:66:de:39:ca:68:e7:90:01:24:
         db:8f:5c:bc:e2:43:91:2c:45:6d:6b:8b:28:b3:31:61:1b:bb:
         49:db:28:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org