Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A14E6DB3148B88981BD9B9B60D2D427FE06F7C72.cer
File:                     A14E6DB3148B88981BD9B9B60D2D427FE06F7C72.cer (raw, json)
Hash identifier:          8S9vvsJLVppQUsI/TImK0SNLbo38X8a7fcki3i5yYNE=
Subject key identifier:   A1:4E:6D:B3:14:8B:88:98:1B:D9:B9:B6:0D:2D:42:7F:E0:6F:7C:72
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0740EFDE5270394DADE1E4AC5A4A2AF688611BF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/A14E6DB3148B88981BD9B9B60D2D427FE06F7C72.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 20:05:12 +0000
Certificate not after:    Wed 23 Oct 2024 20:10:12 +0000
Subordinate resources:    AS: 28576
                          IP: 187.73.128.0/20
                          IP: 189.38.16.0/20
                          IP: 200.220.144.0/20
                          IP: 2804:3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:40:ef:de:52:70:39:4d:ad:e1:e4:ac:5a:4a:2a:f6:88:61:1b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 20:05:12 2023 GMT
            Not After : Oct 23 20:10:12 2024 GMT
        Subject: CN=A14E6DB3148B88981BD9B9B60D2D427FE06F7C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:da:e7:71:88:4b:85:05:8c:8f:26:e6:fe:
                    4b:17:18:92:68:ca:82:3a:7d:33:2b:fd:93:a3:50:
                    5b:cb:59:4d:d0:65:74:74:84:18:36:78:c9:c6:0e:
                    73:fb:b7:a3:93:f1:b2:38:dd:62:6c:59:28:a3:d8:
                    b1:df:0d:c2:d1:67:1c:e0:4b:95:ea:a6:62:63:9b:
                    1e:ef:3e:a2:f1:d7:39:3f:2c:5e:a4:86:fd:5f:62:
                    9d:f0:49:18:0e:48:76:17:fc:6b:06:af:6e:36:3c:
                    39:57:28:af:0a:8a:e8:02:64:65:3c:af:0c:02:af:
                    f0:79:c6:37:eb:b4:a9:0f:a5:b2:39:55:d4:93:ef:
                    c3:40:ce:78:9d:00:7b:22:f6:3a:11:2c:80:a9:ba:
                    ed:ff:6f:a3:0e:53:7b:b8:d0:31:10:f9:2c:d2:99:
                    55:a7:87:71:e9:f9:e4:83:07:a1:35:70:07:ed:90:
                    a4:44:26:be:f6:b6:cd:60:f2:41:8e:b9:a0:7b:ac:
                    1d:70:d6:4d:98:b2:8e:38:42:01:0b:ce:07:65:f9:
                    61:8e:a0:9b:0d:94:f6:4e:9e:16:3f:96:03:48:37:
                    d5:3b:cb:e0:02:c6:92:54:d5:f0:d7:bc:ed:f5:95:
                    68:3c:cf:0f:e1:3e:13:25:5b:29:ce:80:dc:29:27:
                    1c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:4E:6D:B3:14:8B:88:98:1B:D9:B9:B6:0D:2D:42:7F:E0:6F:7C:72
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7CGWLuamWBRSZrzyAVg6rwPa8d65ho7ag4F9ZyxZBc5N/0/A14E6DB3148B88981BD9B9B60D2D427FE06F7C72.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.128.0/20
                  189.38.16.0/20
                  200.220.144.0/20
                IPv6:
                  2804:3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28576

    Signature Algorithm: sha256WithRSAEncryption
         7d:52:a1:53:4d:ff:63:8b:53:9a:1a:ea:a5:4b:7c:99:d0:4a:
         a8:4e:f9:9f:23:90:0c:67:05:df:db:78:52:ef:58:e1:75:7c:
         dc:82:90:da:58:3c:0d:c9:d1:7f:6d:b1:c9:f0:70:01:0e:8b:
         6f:bd:29:68:87:7a:47:c3:79:92:39:9a:0c:08:b5:c4:d7:f8:
         60:b6:98:a7:0b:c9:43:eb:f4:80:f9:3b:45:cc:6c:af:5d:6a:
         6e:e4:bd:c8:c4:fc:b1:e4:0f:d0:e9:84:06:b6:dc:8e:7c:40:
         9a:e0:33:9e:5e:ab:09:d9:51:cb:3f:76:db:3d:72:38:44:33:
         2e:20:f2:71:ea:33:b4:15:6f:36:6c:98:c4:e1:ad:f5:88:c7:
         ed:0c:01:90:47:55:9c:20:e9:6b:a9:ce:91:1d:34:22:17:5c:
         a2:a9:58:a5:3e:a0:2d:15:96:c3:3c:cf:3d:8f:d6:22:54:ca:
         b5:af:35:c0:b3:09:ef:e4:ad:aa:27:c2:60:fd:5e:77:05:b6:
         f2:93:9e:2a:67:e3:42:e1:87:97:e3:17:56:86:41:2e:d7:48:
         97:ee:c5:32:0d:e5:f5:79:b9:f6:ae:5f:e8:33:db:67:41:87:
         50:f0:b0:c3:81:bb:fd:86:c2:ce:12:03:72:08:e1:c5:8a:06:
         d2:ca:8d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org