Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/895319749718933407E89602C41B7343E53F19D4.cer
File:                     895319749718933407E89602C41B7343E53F19D4.cer (raw, json)
Hash identifier:          7wXh4COk9rQx2Hv5w+mxjp+yg/wRkshoD0py/ks27R0=
Subject key identifier:   89:53:19:74:97:18:93:34:07:E8:96:02:C4:1B:73:43:E5:3F:19:D4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C6C4AC8B9C1466FEE55A8AC82CB6341F8F91FB2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/895319749718933407E89602C41B7343E53F19D4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:31 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:31 +0000
Subordinate resources:    AS: 263101
                          IP: 186.225.208.0/21
                          IP: 2804:5d08::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6c:4a:c8:b9:c1:46:6f:ee:55:a8:ac:82:cb:63:41:f8:f9:1f:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:31 2024 GMT
            Not After : Mar 31 11:03:31 2025 GMT
        Subject: CN=895319749718933407E89602C41B7343E53F19D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:96:72:8b:76:c4:64:51:b2:3a:dd:1d:8f:
                    3b:31:a8:6e:4e:ab:34:24:4c:e0:c8:0c:fc:68:d0:
                    45:34:56:76:72:c4:bb:f6:01:55:b4:39:c2:96:f4:
                    bf:4f:30:14:31:90:3c:f0:0b:ed:9a:f0:f2:53:f7:
                    5f:c5:7a:e8:ea:b7:ef:6f:0f:d3:6d:5b:5f:d2:45:
                    40:a8:0b:46:76:cb:e4:bc:db:e9:d0:f8:c2:b2:3f:
                    6d:f0:91:4e:1f:b1:73:b2:ab:e0:4a:5c:d0:0a:52:
                    87:51:58:97:53:26:15:7f:37:e0:25:2e:76:73:a9:
                    9c:76:05:17:c1:1c:75:54:a4:db:47:b0:bf:c1:6a:
                    e6:f8:cf:bd:14:2c:59:fc:46:66:fd:b0:7d:41:97:
                    a3:35:4d:11:4d:f5:0b:8b:5a:9b:f0:6d:1c:ce:54:
                    2f:97:80:fa:2d:a9:60:4d:b4:69:67:20:23:aa:40:
                    15:5b:4d:81:4a:a2:30:0c:8b:42:2b:21:32:07:2b:
                    6c:61:bc:82:84:5c:d9:4e:05:ff:f1:13:88:b8:0f:
                    f3:62:ff:99:5f:ba:c1:72:10:23:01:4a:cf:4f:76:
                    bf:e2:28:4e:ab:aa:76:a4:da:f8:45:42:41:5d:8b:
                    28:2d:38:e2:d0:0b:f4:27:d4:ea:b3:01:c9:4f:32:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:53:19:74:97:18:93:34:07:E8:96:02:C4:1B:73:43:E5:3F:19:D4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Atf5LJECazpDavSNHzwrm18hXDXKJRhLi9BaLV61VAc3/0/895319749718933407E89602C41B7343E53F19D4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.225.208.0/21
                IPv6:
                  2804:5d08::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263101

    Signature Algorithm: sha256WithRSAEncryption
         93:49:ed:98:68:dd:f4:ab:d5:01:00:a9:48:05:c5:93:1c:b6:
         27:8c:d7:c3:7a:98:de:e5:e8:de:e5:29:71:80:3d:da:a0:73:
         3f:9b:ea:61:9e:e2:e2:9a:d4:05:e1:7b:16:b8:1e:63:c8:a1:
         cb:06:47:0f:0e:1f:40:95:f1:62:0d:4e:7d:da:ab:fa:6f:4d:
         fc:3e:3b:25:c9:8f:ac:ce:04:fe:a4:99:90:f4:38:51:3c:a9:
         0c:46:59:f4:b4:b0:4f:6a:0b:46:5a:db:99:35:2e:68:ae:27:
         99:7a:3f:8a:47:42:20:45:2c:49:52:6e:b5:5c:2f:0a:1a:69:
         9d:4a:a9:98:5a:96:cf:45:9e:38:ab:6d:fd:c5:8e:f2:02:6d:
         4f:46:f4:a7:d5:42:3e:82:28:d6:62:1d:f7:96:57:20:b7:2f:
         32:e9:84:63:9a:ec:58:28:1a:97:4d:88:23:e4:8e:e7:55:c1:
         8d:b4:75:e5:7e:90:de:90:95:71:3c:58:0a:23:af:7c:bd:0b:
         1a:8a:64:75:25:09:0a:a9:ce:30:2a:01:45:77:92:f2:00:c8:
         90:e5:a3:2b:e5:b6:13:ed:99:4d:ba:bd:5b:d4:b4:79:29:4b:
         65:74:69:d0:ee:54:64:93:c6:18:6f:16:e1:50:03:38:0f:36:
         16:06:53:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org