Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/869F06292831A01521243CA24882F2D83807942B.cer
File:                     869F06292831A01521243CA24882F2D83807942B.cer (raw, json)
Hash identifier:          m5/PADIc0bdM63EzHoc5fh0SeKM5oRCpd5U+/3qEOC4=
Subject key identifier:   86:9F:06:29:28:31:A0:15:21:24:3C:A2:48:82:F2:D8:38:07:94:2B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0ADFDF104CF07AF79D29CB29B2EE2D96AF5C67F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/869F06292831A01521243CA24882F2D83807942B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 28 Oct 2023 16:08:40 +0000
Certificate not after:    Sat 26 Oct 2024 16:13:40 +0000
Subordinate resources:    AS: 61884
                          IP: 131.0.116.0/22
                          IP: 2804:1ac4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:df:df:10:4c:f0:7a:f7:9d:29:cb:29:b2:ee:2d:96:af:5c:67:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 28 16:08:40 2023 GMT
            Not After : Oct 26 16:13:40 2024 GMT
        Subject: CN=869F06292831A01521243CA24882F2D83807942B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f7:c6:4c:b7:2b:64:8b:5c:0f:45:bd:74:f0:
                    28:db:ed:aa:fa:ae:19:27:e1:a4:e9:e6:53:40:61:
                    35:9d:20:a2:fa:ae:74:2f:bf:08:e4:57:7f:90:fd:
                    df:e2:de:7b:8b:b7:19:86:4d:e8:bb:0d:e3:de:91:
                    be:ac:0c:c5:37:47:45:b0:83:13:08:60:db:7e:c7:
                    b3:0b:f4:1e:e5:b6:3c:a7:e4:ca:b1:7c:e5:bd:ac:
                    eb:73:e8:a2:ef:98:79:53:e4:77:ba:31:72:9f:d2:
                    c8:cc:ca:3d:7f:fa:bb:a3:d7:d8:2a:c2:61:2d:85:
                    9b:4d:74:0b:31:a8:4c:fa:9c:da:66:4d:7a:9e:5e:
                    76:b6:7d:c5:1f:70:72:b6:2e:d6:c5:86:59:58:bc:
                    89:9a:4a:7e:d4:35:c7:9a:61:9f:fd:11:74:50:3d:
                    1f:9d:46:ea:71:da:77:7a:b1:30:e4:55:28:07:1b:
                    e6:8d:fb:b2:da:c1:a0:2b:0c:33:5c:29:2d:96:b2:
                    60:4f:b8:28:2a:eb:88:77:7e:51:26:28:84:9b:13:
                    4e:fe:33:75:9c:78:6a:d1:66:d4:0c:b8:e6:67:89:
                    38:2b:ec:57:bf:79:15:a7:97:3a:8c:32:00:0e:57:
                    dc:6d:38:b6:7d:ce:24:8f:01:98:05:41:95:47:95:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:9F:06:29:28:31:A0:15:21:24:3C:A2:48:82:F2:D8:38:07:94:2B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/983zgg5FRbnE8RjXykU89GT1BekKfnQ2iSeBsuPS1C9A/0/869F06292831A01521243CA24882F2D83807942B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.116.0/22
                IPv6:
                  2804:1ac4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61884

    Signature Algorithm: sha256WithRSAEncryption
         0a:96:bc:54:4c:d6:d7:ac:92:15:a1:81:40:c9:c9:79:cf:e7:
         b4:79:58:d1:23:ad:67:d1:28:67:db:15:95:63:cf:5a:5a:31:
         a7:9a:7f:e9:a3:3d:3d:c3:09:b2:54:39:2e:4a:a5:d8:9b:eb:
         78:d0:09:62:cd:de:4c:42:76:c7:d3:0b:57:46:e7:83:e8:31:
         72:bc:21:d2:55:8c:ca:6f:37:14:20:82:c8:fb:6d:37:e2:4c:
         e5:24:39:33:c2:e0:a5:a0:71:7c:a0:ae:a2:df:8b:8f:a5:c2:
         10:25:48:10:79:f7:02:8b:21:5d:ff:e0:44:c1:9a:83:a4:52:
         17:71:0a:d3:5a:2f:e1:7b:f0:37:6f:77:43:db:cf:29:c1:40:
         61:fa:65:d8:f6:1f:b9:9c:43:c5:56:8e:4b:bb:8c:8a:70:97:
         6a:0e:58:de:38:75:26:13:18:ee:01:23:21:03:59:70:6a:0c:
         3a:d4:5f:1e:a3:50:5d:de:d5:80:dc:b5:f6:78:ca:8e:82:6d:
         95:97:af:fa:7d:46:51:55:f5:84:3a:14:d4:81:6d:57:18:50:
         05:82:a7:b6:f0:5a:48:d9:80:25:6e:2c:ea:17:84:dd:e5:19:
         8b:b5:f0:5c:25:41:bd:a2:1c:7f:ff:a4:55:4a:96:45:4f:33:
         74:34:e7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org