Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A14AE501A7E35BA9CBB1557490587EC334AA0C33.cer
File:                     A14AE501A7E35BA9CBB1557490587EC334AA0C33.cer (raw, json)
Hash identifier:          O6N7F+o/6eVcoBboux6bLjnZlICGIMromtp34eA4ZDA=
Subject key identifier:   A1:4A:E5:01:A7:E3:5B:A9:CB:B1:55:74:90:58:7E:C3:34:AA:0C:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3FD25AABBF3DB53049CDF7D3C4C7FDBE49DD05EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/A14AE501A7E35BA9CBB1557490587EC334AA0C33.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 26 May 2023 02:55:20 +0000
Certificate not after:    Fri 24 May 2024 03:00:20 +0000
Subordinate resources:    AS: 266611
                          IP: 128.201.28.0/22
                          IP: 2804:3ea4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:d2:5a:ab:bf:3d:b5:30:49:cd:f7:d3:c4:c7:fd:be:49:dd:05:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 26 02:55:20 2023 GMT
            Not After : May 24 03:00:20 2024 GMT
        Subject: CN=A14AE501A7E35BA9CBB1557490587EC334AA0C33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:d5:4a:4b:c2:a4:e4:a3:b7:88:92:93:dc:
                    df:4e:fa:19:ad:d2:6b:09:97:aa:82:42:51:4d:ec:
                    c5:ed:b2:f9:3b:5f:67:8a:ab:6a:0c:6f:73:85:4e:
                    55:57:99:dc:4d:9b:9e:6a:04:fc:db:2f:cf:f2:8c:
                    89:7d:0c:af:24:17:12:07:e0:af:ad:c3:3b:25:c9:
                    19:96:6e:b8:e6:93:4f:cc:79:07:77:10:ed:a6:02:
                    a3:1b:27:47:f4:82:b9:16:d0:cc:93:69:15:8b:c5:
                    ee:fe:45:b9:e9:63:fd:e0:dd:50:14:65:39:62:d4:
                    78:e3:7b:f9:b9:ad:8f:58:15:17:3e:2f:d7:60:1c:
                    0b:e4:38:31:3f:b7:f5:f1:9d:81:d1:5f:16:b7:56:
                    9d:b3:4f:26:57:95:98:43:67:11:b9:0c:3d:15:8a:
                    97:af:44:2e:b3:8d:bb:96:8a:4d:34:94:98:95:3a:
                    fc:e5:6b:a6:3d:1c:a4:e1:0f:0e:cc:a1:5b:8d:08:
                    47:51:bf:5c:62:9f:2b:9c:3c:c3:9d:33:a7:9e:b0:
                    5f:ab:7a:e3:d4:1e:b7:0f:67:73:f1:10:20:ad:d9:
                    cf:e6:d7:f2:5f:47:0b:ee:54:81:90:51:16:a9:4b:
                    11:73:7d:76:59:a5:df:8c:11:b6:d7:06:50:5e:4c:
                    0b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:4A:E5:01:A7:E3:5B:A9:CB:B1:55:74:90:58:7E:C3:34:AA:0C:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GsJebcBnKVV7LJWrEXgMyd544JvofJpEqP458FoSWYJe/0/A14AE501A7E35BA9CBB1557490587EC334AA0C33.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.28.0/22
                IPv6:
                  2804:3ea4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266611

    Signature Algorithm: sha256WithRSAEncryption
         58:37:01:36:2c:77:df:7b:e0:b9:ce:95:b6:5b:1e:50:3f:62:
         2d:c1:f6:f2:43:cb:7e:e8:c0:2a:8f:7b:62:c5:44:13:f6:a3:
         ba:e7:fe:70:4b:29:ee:a6:e2:3e:67:fa:50:a4:17:91:97:52:
         bb:15:1f:ec:f7:c8:b7:8d:c3:64:17:02:49:30:1c:13:b3:d4:
         b8:bd:6f:a8:56:43:90:72:1f:91:cf:c8:a5:a5:1a:6a:d8:3d:
         1f:0c:73:31:3e:ad:45:2c:d7:ec:81:4e:52:89:33:f1:3d:f3:
         11:5b:0f:bf:9e:c4:0c:2e:fc:18:3c:0e:ae:26:ff:c4:bf:30:
         e7:9e:09:17:bc:25:cc:04:0f:b5:52:6a:e4:e1:5c:e6:9f:21:
         47:15:85:eb:a9:23:eb:94:b1:a3:b6:bd:e2:87:f6:c3:20:08:
         f6:b4:04:f9:a1:7d:1a:1d:23:50:e6:1f:bd:8e:6d:fc:7d:05:
         6e:dc:62:10:4e:be:89:67:3f:f9:eb:5d:2c:2b:b5:f0:4c:0b:
         a6:78:a1:3e:7f:2a:55:2f:e6:b2:2e:48:d1:5f:71:0a:4c:ef:
         31:ba:45:f8:e2:6b:4d:c7:5a:02:4b:02:ba:1a:59:08:da:9a:
         78:b3:d8:8f:c6:12:d5:43:07:17:2b:b3:83:1f:52:57:6a:99:
         21:0e:f3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org