Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/92CE67CDDA2D78D48E6518613D3ECE35C6BDE183.cer
File:                     92CE67CDDA2D78D48E6518613D3ECE35C6BDE183.cer (raw, json)
Hash identifier:          r8k0C8z732fnfCbVqlmGW4gTf3XeNUkJb5G7fLMhG4g=
Subject key identifier:   92:CE:67:CD:DA:2D:78:D4:8E:65:18:61:3D:3E:CE:35:C6:BD:E1:83
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       296C7247FCA602F6A47CF691262B934B137A8152
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/92CE67CDDA2D78D48E6518613D3ECE35C6BDE183.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:21:45 +0000
Certificate not after:    Tue 21 May 2024 09:26:45 +0000
Subordinate resources:    AS: 263650
                          IP: 138.255.148.0/22
                          IP: 170.79.80.0/22
                          IP: 177.74.152.0/21
                          IP: 2804:10cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6c:72:47:fc:a6:02:f6:a4:7c:f6:91:26:2b:93:4b:13:7a:81:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:21:45 2023 GMT
            Not After : May 21 09:26:45 2024 GMT
        Subject: CN=92CE67CDDA2D78D48E6518613D3ECE35C6BDE183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:f8:7f:2a:19:95:ee:46:48:b2:d0:12:77:
                    74:88:b8:77:d9:af:e8:e8:c3:cb:d7:7f:97:03:f6:
                    f7:23:3d:26:b4:55:91:d0:78:71:2e:fe:60:4e:5d:
                    ba:b2:26:52:4b:37:8b:04:3e:a8:6e:41:7f:7a:ef:
                    44:0f:48:2e:33:b8:2b:60:66:a9:6f:1b:99:66:88:
                    61:2e:da:4d:28:5c:d4:ac:86:03:9c:79:29:26:2f:
                    47:c9:bf:8b:36:cc:29:8c:e2:3f:e2:e9:38:84:16:
                    2c:d0:ed:20:69:00:18:17:c9:5e:0f:57:f8:3b:78:
                    77:a9:55:9f:28:25:97:c3:72:5a:72:a6:5a:6d:11:
                    98:b1:b3:38:9c:5b:15:f2:88:a5:d0:d4:09:f9:35:
                    a0:70:f2:9e:c9:74:68:45:17:90:32:43:2a:27:78:
                    00:e6:1b:fa:c2:39:07:4f:9f:cc:57:3b:76:29:4f:
                    51:83:a6:cb:18:d4:ee:5b:60:cb:e7:0e:1e:6d:69:
                    2a:80:b4:8d:eb:7d:a9:1a:72:0d:0a:2b:7f:81:37:
                    04:1c:34:92:9f:93:56:fc:95:b0:42:45:5f:48:5c:
                    92:60:ae:bc:a4:8d:38:a4:42:2c:9f:ee:71:2d:41:
                    fd:ad:5b:fb:04:8c:91:27:db:f2:bb:88:68:c2:54:
                    a5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:CE:67:CD:DA:2D:78:D4:8E:65:18:61:3D:3E:CE:35:C6:BD:E1:83
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5L1jWNLigWYM9xm39zeZYxyrLjTYfyqkGCeoE3XXhZzL/0/92CE67CDDA2D78D48E6518613D3ECE35C6BDE183.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.148.0/22
                  170.79.80.0/22
                  177.74.152.0/21
                IPv6:
                  2804:10cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263650

    Signature Algorithm: sha256WithRSAEncryption
         81:67:37:78:d9:81:e3:4d:b4:14:3d:2e:e7:75:02:28:5d:5b:
         c2:05:d5:d4:2a:4a:95:4d:3d:71:3e:c9:61:68:8c:59:e7:2c:
         4c:8a:cf:4c:f9:a5:88:3c:80:4b:bc:3d:36:fb:56:5e:f3:bb:
         69:95:d7:c3:f2:4c:93:5b:b3:c6:e4:c1:de:40:e1:a8:05:25:
         04:62:e1:8e:a4:2f:11:7d:a4:54:a5:c3:5c:b6:7c:57:b2:5d:
         f1:7c:81:10:d6:27:ee:9c:22:37:eb:3c:ff:56:ce:95:ca:8b:
         25:32:1f:91:85:d2:a5:53:e6:fb:df:5a:c5:9d:8e:08:0c:6a:
         8f:8c:62:e6:98:50:5b:9a:0f:4a:66:ce:04:72:11:97:f3:63:
         1a:7e:2d:bd:ee:18:51:1c:8e:dd:06:86:33:69:90:a0:4f:b0:
         df:83:7f:3e:6c:89:eb:f5:28:ba:9a:56:12:7e:16:25:ce:e6:
         06:46:47:72:ee:94:a4:39:83:f7:45:90:c8:31:b1:f2:c9:ab:
         a0:3d:f0:09:c6:26:7f:0f:4b:56:f7:54:d9:2f:73:98:e1:8e:
         3a:a4:93:0f:fb:76:4f:56:ac:b5:c6:39:2b:76:ab:5a:10:04:
         d3:6b:22:73:c1:24:ae:fe:37:02:76:c6:32:fa:4e:2b:dd:80:
         f5:e8:f8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org