Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/98171986E705F0C265EABC3EA68E34637BD3BEF3.cer
File:                     98171986E705F0C265EABC3EA68E34637BD3BEF3.cer (raw, json)
Hash identifier:          IVZIPLSJh8lvTD2GoCa/nPjTLVNKnvYPnd5fPt8sHoI=
Subject key identifier:   98:17:19:86:E7:05:F0:C2:65:EA:BC:3E:A6:8E:34:63:7B:D3:BE:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       63842165EC158092515EBCA6136339FFB6488CAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/98171986E705F0C265EABC3EA68E34637BD3BEF3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Jun 2023 19:29:08 +0000
Certificate not after:    Thu 13 Jun 2024 19:34:08 +0000
Subordinate resources:    AS: 270810
                          IP: 200.219.16.0/22
                          IP: 2804:71c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:84:21:65:ec:15:80:92:51:5e:bc:a6:13:63:39:ff:b6:48:8c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 15 19:29:08 2023 GMT
            Not After : Jun 13 19:34:08 2024 GMT
        Subject: CN=98171986E705F0C265EABC3EA68E34637BD3BEF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:e2:3c:8c:98:d2:9a:d2:0c:18:ea:a6:ad:
                    40:72:5a:18:79:39:f7:5c:79:71:5e:21:7b:8a:cb:
                    b3:b1:f9:ef:3a:b3:02:4e:c0:86:b6:f4:71:d6:ff:
                    9b:42:6d:3a:f3:85:fb:3b:f4:bf:fa:e7:a4:06:71:
                    56:a2:01:46:9f:da:73:d9:53:d5:4c:c1:46:e6:b1:
                    67:29:fe:3e:ec:f1:4c:07:09:e4:76:f3:db:88:b8:
                    39:5e:73:ed:17:4e:d4:f7:0f:21:da:93:9b:66:f0:
                    d8:d0:33:bf:3e:d6:9c:9c:86:2f:f5:ff:8f:5c:9d:
                    89:38:65:b2:79:13:48:72:74:75:b8:4a:98:8b:4e:
                    69:22:08:8b:d2:db:48:80:97:77:da:79:d5:dc:8b:
                    8f:98:50:c3:7e:01:27:d7:51:0f:c8:1d:2f:be:6e:
                    e2:ac:c1:41:86:fb:10:d2:57:4a:28:6a:9f:75:65:
                    76:4f:10:fe:33:ed:19:a9:39:fe:dc:6d:86:7f:1c:
                    53:26:fa:a2:66:ec:da:37:31:25:5c:ac:50:ac:3a:
                    3f:e7:ea:51:fc:26:88:34:de:c0:c1:9f:2c:05:80:
                    83:fc:f4:af:48:39:c3:0d:dd:c9:ee:5c:31:cc:24:
                    d2:d0:ea:12:e7:fa:cb:cc:76:5a:d6:94:04:7e:ae:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:17:19:86:E7:05:F0:C2:65:EA:BC:3E:A6:8E:34:63:7B:D3:BE:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVneTnFdCXTygfcjoeA8ocNNNTvgYscctxJMpxKDX5uT/1/98171986E705F0C265EABC3EA68E34637BD3BEF3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.16.0/22
                IPv6:
                  2804:71c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270810

    Signature Algorithm: sha256WithRSAEncryption
         14:e6:81:7b:f3:9a:e1:b6:f8:08:2e:65:44:c9:66:7e:46:54:
         cc:7f:a6:13:6a:30:05:4d:79:52:8c:e9:6f:49:8b:46:19:f5:
         20:66:5b:e6:42:c3:ba:bf:1a:b2:d0:e2:52:40:ee:96:95:4a:
         7b:4e:a1:77:f4:6b:12:a0:f2:8e:6b:60:64:b5:46:ee:e2:78:
         59:c4:26:4f:78:93:cf:54:8f:f8:d1:0f:96:f0:3e:6c:08:54:
         12:3b:c9:f9:cc:95:0a:d5:af:54:37:5b:c9:0b:81:35:79:ad:
         15:57:6e:25:5f:6e:a0:01:3d:35:e1:9f:04:a1:d4:52:cc:28:
         00:0a:f8:a0:d6:6e:f4:00:d5:3d:d0:ea:ae:aa:6b:51:37:3c:
         3c:68:cf:93:6e:52:69:bc:83:62:9e:79:04:78:4b:f1:74:f4:
         11:eb:f1:c4:1f:69:ce:03:1e:ce:e2:3c:6b:41:7d:0e:4a:b2:
         ba:fb:4b:cd:f8:51:23:6e:ae:cd:12:e2:77:34:7b:cb:06:15:
         3b:d9:8a:fe:57:4b:be:fe:f9:b1:2f:24:67:02:8d:70:d1:eb:
         a0:21:0b:4e:48:cf:76:dd:1d:7d:d0:86:02:eb:17:be:81:14:
         da:d9:d8:38:14:62:c6:fa:d2:b3:06:2d:be:fb:e4:0f:47:d3:
         c3:0b:1a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org