Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/94B74DE4C2A175B5C0C534858586F16D8BB4851D.cer
File:                     94B74DE4C2A175B5C0C534858586F16D8BB4851D.cer (raw, json)
Hash identifier:          cHfqqJomsIlSrEuY9WWjAtPvyGesUaUtiDViYwRI2w8=
Subject key identifier:   94:B7:4D:E4:C2:A1:75:B5:C0:C5:34:85:85:86:F1:6D:8B:B4:85:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6D0AE1DAD05523A812A21FE28DCBCA07027FD969
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5G7bbsLf2KKF3YqtCSEtGdfBMwZyBH8MX1NiGSKfbPj1/0/94B74DE4C2A175B5C0C534858586F16D8BB4851D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5G7bbsLf2KKF3YqtCSEtGdfBMwZyBH8MX1NiGSKfbPj1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 16:51:15 +0000
Certificate not after:    Thu 20 Feb 2025 16:56:15 +0000
Subordinate resources:    AS: 52900
                          IP: 131.221.252.0/22
                          IP: 138.186.52.0/22
                          IP: 186.251.156.0/22
                          IP: 2804:26c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:0a:e1:da:d0:55:23:a8:12:a2:1f:e2:8d:cb:ca:07:02:7f:d9:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 16:51:15 2024 GMT
            Not After : Feb 20 16:56:15 2025 GMT
        Subject: CN=94B74DE4C2A175B5C0C534858586F16D8BB4851D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:01:aa:8a:5d:1c:e7:3e:70:ce:7f:b6:84:
                    53:25:8e:4d:c6:34:6f:70:5d:37:7c:8e:65:15:59:
                    ed:82:9c:71:c9:17:20:dc:0c:84:05:55:10:32:ef:
                    b5:98:23:be:41:bd:87:0c:55:05:72:32:25:ee:80:
                    a6:48:3b:00:51:4e:b1:a7:ab:33:b3:1b:0c:84:96:
                    03:e1:15:be:05:1e:e6:1d:63:f2:4f:4c:09:48:05:
                    87:d4:e6:ad:15:32:c9:46:dc:e0:18:28:f7:2a:c9:
                    e9:04:b2:52:d0:cc:ee:84:f2:59:90:a0:74:4c:fb:
                    03:f5:78:cf:69:5e:d8:30:a2:d6:1a:44:d2:df:89:
                    72:c8:92:c9:e1:7c:55:40:7a:1c:f4:56:0c:d0:32:
                    12:cb:04:d8:00:4e:80:f9:d3:b1:43:49:98:7b:61:
                    08:3a:f1:46:d8:4a:10:3f:c6:d4:a8:1b:f6:73:a4:
                    87:fe:51:d9:af:8c:37:91:42:fe:9a:cd:05:97:3a:
                    e0:5f:b8:d9:d8:c9:32:ef:f7:64:46:2a:38:39:dc:
                    fd:a4:7a:22:2d:c3:f6:2e:4a:47:3e:13:3d:6a:d4:
                    5a:42:e4:22:38:77:19:22:12:7b:3d:d3:37:d2:14:
                    88:55:c9:57:95:07:69:5b:75:a7:71:8a:71:e7:3f:
                    eb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:B7:4D:E4:C2:A1:75:B5:C0:C5:34:85:85:86:F1:6D:8B:B4:85:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5G7bbsLf2KKF3YqtCSEtGdfBMwZyBH8MX1NiGSKfbPj1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5G7bbsLf2KKF3YqtCSEtGdfBMwZyBH8MX1NiGSKfbPj1/0/94B74DE4C2A175B5C0C534858586F16D8BB4851D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.252.0/22
                  138.186.52.0/22
                  186.251.156.0/22
                IPv6:
                  2804:26c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52900

    Signature Algorithm: sha256WithRSAEncryption
         7a:fa:a4:a1:44:5e:69:c7:67:b5:b6:68:fb:c7:21:3b:92:49:
         57:3c:73:d0:45:89:de:af:d7:0f:57:0d:a9:79:63:87:be:45:
         74:be:bd:a7:24:2e:07:cb:a1:d3:4f:47:7a:18:2d:6e:3f:bd:
         95:d7:8d:4f:9d:6a:d6:b9:bc:88:58:00:48:6e:ca:ab:ca:52:
         ab:7a:9b:b3:76:ed:b0:b6:24:43:b6:15:94:e5:6e:4a:b3:8f:
         b2:6e:c8:51:56:fb:66:ff:9b:7c:36:1d:7f:d0:4b:3c:e5:e4:
         d7:91:04:71:fc:b5:5a:67:d9:fe:94:33:30:98:6a:8b:fd:bc:
         35:8c:81:77:e1:25:4a:26:7f:b8:15:5a:9e:c5:9b:42:da:e1:
         67:fb:cc:04:9b:f5:be:19:a7:ea:9f:f9:58:2c:30:35:34:47:
         c7:9f:68:11:fc:71:fd:79:bf:d5:4e:fd:1e:16:55:78:46:02:
         41:f1:e4:a3:35:79:f8:12:c7:88:5d:e5:a4:7e:3d:d7:17:5e:
         03:71:cf:b1:96:b1:a7:69:55:45:36:40:91:aa:d3:f7:fb:8a:
         6a:8f:c3:d9:f0:da:e9:1d:73:77:3c:f8:b0:d6:af:0e:86:42:
         69:e6:cc:e1:ce:27:1b:f8:40:02:9a:43:e1:b1:b6:8a:4b:c3:
         95:b6:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org