Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/86D72561641EDDB824839C4F967D551D74F96C39.cer
File:                     86D72561641EDDB824839C4F967D551D74F96C39.cer (raw, json)
Hash identifier:          z5OZioLMGTLI95UxzxIkAO6uDtIdn9a08GWpoXpHFo4=
Subject key identifier:   86:D7:25:61:64:1E:DD:B8:24:83:9C:4F:96:7D:55:1D:74:F9:6C:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56B0F1DCF385C01E202E4E1DBA18E6EAB69797FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/0/86D72561641EDDB824839C4F967D551D74F96C39.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Mar 2024 14:35:18 +0000
Certificate not after:    Mon 24 Mar 2025 14:40:18 +0000
Subordinate resources:    AS: 53098
                          IP: 187.103.0.0/20
                          IP: 2804:2b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:b0:f1:dc:f3:85:c0:1e:20:2e:4e:1d:ba:18:e6:ea:b6:97:97:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 14:35:18 2024 GMT
            Not After : Mar 24 14:40:18 2025 GMT
        Subject: CN=86D72561641EDDB824839C4F967D551D74F96C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:85:96:b6:70:ad:61:e4:f7:34:32:15:20:
                    75:fa:aa:29:a6:d8:e5:c9:b7:7e:d7:0f:e0:89:9f:
                    32:1c:9e:4c:24:04:bd:50:c5:8a:b6:a7:01:c4:8f:
                    58:de:dd:c0:64:e2:68:6a:14:57:b3:4b:30:fd:c9:
                    dc:03:ea:ac:fd:5f:36:34:d4:49:f0:aa:7b:3d:9f:
                    43:bf:24:43:ac:f1:b3:59:85:02:94:2d:0b:e9:da:
                    1e:50:e6:27:07:06:8b:6e:20:14:96:fc:40:f5:2e:
                    2b:44:e2:bb:69:2d:40:8e:13:1d:a9:ee:e8:2a:7c:
                    98:da:68:94:b2:1d:1f:e3:ce:2f:d3:1f:0c:97:57:
                    9a:44:84:f6:b6:a6:61:2b:0a:41:cf:a7:b6:fa:0c:
                    78:58:eb:8c:c3:a5:b7:e6:3f:d6:55:20:47:fa:1e:
                    2c:0d:55:cd:8c:2f:c7:48:90:f7:28:d3:fc:8a:43:
                    b6:5c:cf:6d:c3:5b:a1:22:d8:78:44:95:77:0c:91:
                    9e:a5:10:65:d8:fe:89:a1:1f:51:8f:3d:83:98:1c:
                    b4:8e:67:ea:38:47:7b:61:4f:13:dc:19:f0:9c:ff:
                    84:25:80:1d:44:4f:67:0d:a7:55:2d:95:a8:9c:14:
                    56:ac:e0:4e:87:f6:64:f8:75:2a:bd:1e:e2:dc:33:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:D7:25:61:64:1E:DD:B8:24:83:9C:4F:96:7D:55:1D:74:F9:6C:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EJsx8PFdLFWr1kR5z8PmfKcbwfUByYH877Yi8RngVYFv/0/86D72561641EDDB824839C4F967D551D74F96C39.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.0.0/20
                IPv6:
                  2804:2b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53098

    Signature Algorithm: sha256WithRSAEncryption
         a3:12:a9:32:f3:bd:90:2f:51:5f:3a:09:b4:9b:93:7a:e2:cd:
         a5:89:26:81:10:cb:0a:38:fa:ec:e1:11:eb:b1:9f:86:64:f7:
         90:85:05:e9:72:dc:53:68:a8:4c:59:e8:ea:8c:80:91:56:0e:
         c6:12:ca:27:67:7d:ae:af:3c:7a:8a:9c:e4:81:3b:f4:fd:dd:
         d6:d9:a3:9e:a4:80:9a:69:b9:24:6b:14:ea:5b:2c:28:ea:72:
         7f:ec:7a:56:99:ed:92:ba:62:7b:dc:32:e5:76:ba:26:31:ae:
         c6:de:b3:9c:e6:c3:4f:69:3a:b7:76:eb:4a:0c:b7:46:66:c7:
         f5:5d:e7:83:bc:67:f3:76:f1:29:d4:7b:1c:5e:f0:2a:1c:4e:
         17:82:4b:ac:44:d2:d7:07:44:ca:2a:14:2c:f8:44:47:71:30:
         f9:0e:57:cf:b8:cc:05:48:e2:9d:8e:14:ff:10:11:8a:54:d6:
         d6:d3:19:eb:ba:94:ee:d1:dd:9b:62:a8:3f:99:0b:52:2b:e9:
         1e:be:56:e3:af:21:0e:b6:15:e6:cf:78:05:5f:c3:b7:18:a5:
         20:87:23:f8:88:1c:2f:fe:ed:91:9a:a9:e9:8c:db:ca:fa:6e:
         e6:d2:6a:db:e0:2e:f1:5d:d1:8d:c8:1a:f1:6b:b9:29:cd:9c:
         f1:79:c1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org