Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/951AE056EA191708C1417B7F9956EA6704D459D0.cer
File:                     951AE056EA191708C1417B7F9956EA6704D459D0.cer (raw, json)
Hash identifier:          grucsQNn2Shi9eENB1m40B4ifl3kjCt7Am2s/6qYr4c=
Subject key identifier:   95:1A:E0:56:EA:19:17:08:C1:41:7B:7F:99:56:EA:67:04:D4:59:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       28DBDD69ABA4FB93C8DA29171B5DCB513D33CAD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/951AE056EA191708C1417B7F9956EA6704D459D0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 May 2023 15:08:29 +0000
Certificate not after:    Mon 27 May 2024 15:13:29 +0000
Subordinate resources:    AS: 271177
                          IP: 179.51.184.0/22
                          IP: 2804:776c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:db:dd:69:ab:a4:fb:93:c8:da:29:17:1b:5d:cb:51:3d:33:ca:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 15:08:29 2023 GMT
            Not After : May 27 15:13:29 2024 GMT
        Subject: CN=951AE056EA191708C1417B7F9956EA6704D459D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:cd:bb:72:84:19:a6:a1:d5:ec:1e:03:2a:
                    67:26:13:ff:c1:ea:34:f5:df:6d:fc:cd:fb:d0:59:
                    70:0f:a0:cd:c9:ff:41:be:b9:d6:a2:8b:1f:7c:18:
                    9e:96:a3:ac:b1:05:03:4e:41:9a:e3:8d:28:77:b0:
                    50:b5:be:ef:2a:81:a7:de:d2:91:da:7e:44:cc:66:
                    9d:64:a2:1d:76:f6:6e:6e:db:82:f9:b8:18:cb:2c:
                    af:53:6f:bb:3e:9a:d4:5c:ed:28:91:ec:43:70:a1:
                    63:20:eb:48:29:1d:c6:95:c1:35:f6:37:da:f4:16:
                    0b:3c:b7:46:bb:f6:23:a1:06:32:15:e0:78:60:c3:
                    2c:a8:3c:34:82:a9:e4:f3:a5:41:f3:e7:15:96:7f:
                    f0:0d:f8:03:8d:af:e7:64:5d:41:f2:50:46:e6:da:
                    b9:a9:b4:90:e5:56:fd:74:2a:4c:08:e9:04:2e:18:
                    b4:b2:67:cb:fb:8c:fe:6d:da:52:36:42:1b:57:d3:
                    3e:73:ea:a0:2d:30:09:ec:88:c1:e3:71:27:71:5f:
                    0b:cf:d6:af:cb:e3:19:05:64:0b:8a:79:b4:69:d0:
                    98:5e:10:32:97:76:2f:a3:77:e9:d2:63:ba:8e:ae:
                    25:75:01:9c:8f:92:a9:02:ca:7b:32:aa:94:f8:7f:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:1A:E0:56:EA:19:17:08:C1:41:7B:7F:99:56:EA:67:04:D4:59:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CZKiMUJh2XMCjjM67UVQ5T6wBqrBu5a6Rur1LQeQ1ANP/0/951AE056EA191708C1417B7F9956EA6704D459D0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.184.0/22
                IPv6:
                  2804:776c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271177

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:4c:a6:6f:92:95:dd:28:c1:3f:63:4c:7e:72:33:a4:40:
         1b:16:35:4b:23:82:44:e2:9b:bd:a3:38:c9:24:f7:d3:01:34:
         5b:d3:0b:e0:b1:ec:c1:fb:93:c1:1c:62:3d:ae:66:b5:16:f3:
         72:a7:d3:7f:47:ae:40:b5:af:35:46:2c:22:54:e5:57:08:38:
         4b:26:e5:22:ca:92:07:95:96:c0:95:b4:34:60:37:39:91:de:
         22:08:c7:76:1c:ec:dc:ce:7b:5f:04:56:3e:f2:1f:62:da:7f:
         e3:6f:1b:2a:8b:94:6e:fd:3c:5f:d0:61:bf:6d:db:fb:0c:22:
         01:0f:27:76:f4:97:2e:8a:4a:21:fe:af:19:c0:e5:ce:32:c3:
         47:af:10:16:7f:22:44:a6:bd:45:d1:21:f7:e5:9b:05:a3:09:
         43:b4:04:ca:3e:62:17:14:3d:b0:fa:44:f2:e9:94:e7:8c:2a:
         e4:13:51:6d:e7:5c:70:9f:5c:37:6f:1a:5a:b3:91:44:92:ce:
         1b:9d:02:1c:7e:06:1d:f6:e1:cd:58:71:1a:79:f8:c7:67:7b:
         dd:fc:6b:cd:77:6b:b8:a6:81:e9:08:21:4b:39:28:2b:5b:e2:
         d5:70:b4:28:e6:7c:98:6f:8f:39:ee:39:f2:c6:d6:8b:96:f0:
         66:93:2f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org