Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A1830908DD3CD0E29BC047F438C65F6BB6BF700B.cer
File:                     A1830908DD3CD0E29BC047F438C65F6BB6BF700B.cer (raw, json)
Hash identifier:          pXvgXxK1XFRy6KQf6aSF8yPKIomE2BdEjgvXOZIVT0k=
Subject key identifier:   A1:83:09:08:DD:3C:D0:E2:9B:C0:47:F4:38:C6:5F:6B:B6:BF:70:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2735001EAA85B278DCD177F97B2CC981E53972AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/0/A1830908DD3CD0E29BC047F438C65F6BB6BF700B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Feb 2024 12:55:10 +0000
Certificate not after:    Thu 06 Feb 2025 13:00:10 +0000
Subordinate resources:    AS: 270994
                          IP: 138.59.136.0/22
                          IP: 2804:74a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:35:00:1e:aa:85:b2:78:dc:d1:77:f9:7b:2c:c9:81:e5:39:72:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  8 12:55:10 2024 GMT
            Not After : Feb  6 13:00:10 2025 GMT
        Subject: CN=A1830908DD3CD0E29BC047F438C65F6BB6BF700B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b6:50:e0:a1:26:67:6b:f0:bb:97:6e:2c:80:
                    ea:0c:5a:23:c8:3b:7b:a7:cf:86:6b:f4:2d:08:93:
                    7f:5f:98:81:f2:c6:ed:d8:a6:e5:57:05:54:a4:50:
                    a3:34:0d:4a:de:15:ea:07:aa:44:5b:bb:ef:52:a5:
                    4f:e6:8a:4c:1c:aa:51:fa:7e:74:49:a2:74:4f:14:
                    c9:30:42:a5:e4:5a:b9:e5:b0:17:2e:41:2e:11:f6:
                    d0:88:1c:4b:c1:65:e8:95:1b:0c:58:d3:87:2e:c2:
                    62:19:fc:96:b0:eb:ad:c0:75:57:2a:13:03:7b:95:
                    e2:c0:cc:6d:71:2d:8a:94:e0:d8:92:4c:da:05:5d:
                    08:68:7f:9b:e6:fb:4a:0b:39:27:b3:26:c7:ce:ef:
                    1a:c2:73:08:10:67:c6:6a:a7:87:81:b3:7b:60:b1:
                    39:4a:b3:e4:33:23:1f:d2:fa:81:48:dd:84:e4:75:
                    dc:23:26:22:19:27:67:25:65:67:fd:0f:4b:8a:e7:
                    a1:19:13:a3:08:56:bd:ec:59:1d:6a:a0:55:37:34:
                    c8:92:6a:fb:d2:91:60:b8:b8:26:6b:12:5c:7c:38:
                    e5:2c:e5:b5:d6:80:73:94:c9:20:66:17:c1:f6:b0:
                    93:64:cd:64:79:6a:a3:b8:c6:1f:39:e2:1b:91:9d:
                    e1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:83:09:08:DD:3C:D0:E2:9B:C0:47:F4:38:C6:5F:6B:B6:BF:70:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FYnK7LE5WiKFC7cehnN5taLQcjCHvuhoXoJBPiwpBZb9/0/A1830908DD3CD0E29BC047F438C65F6BB6BF700B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.136.0/22
                IPv6:
                  2804:74a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270994

    Signature Algorithm: sha256WithRSAEncryption
         42:02:13:0f:29:22:3b:e7:2a:63:3e:89:29:43:7b:e1:89:6e:
         1d:99:d7:b7:04:da:6c:89:9a:33:43:a4:70:02:d0:56:bf:59:
         49:bd:e5:ca:7f:8a:d0:a7:04:8c:06:61:a0:2a:28:0c:9f:bb:
         92:58:cc:05:8e:36:56:20:9b:38:9d:4c:00:cd:0f:f4:70:17:
         1a:66:24:a7:b3:1f:bb:90:21:6a:5c:5b:89:ac:62:1d:12:a5:
         8a:07:00:1e:49:9b:5f:9e:db:85:a6:d1:b7:61:61:59:ef:a9:
         b4:8a:a1:ad:a3:a8:d4:95:66:94:21:3d:f7:20:29:7a:93:3d:
         2f:20:9b:3d:11:19:ba:9c:a2:54:63:17:71:2f:4b:a0:73:5e:
         a2:ff:fa:13:8d:fa:b4:5e:10:21:ce:92:cb:06:89:03:18:97:
         7d:b5:b9:4a:e8:98:ef:72:91:c4:25:1f:63:b0:ed:94:5e:3d:
         cd:d6:5b:39:79:4f:c1:dc:dc:fb:d3:31:76:ee:89:c7:e1:34:
         2b:c1:30:e2:28:78:f3:62:5a:27:91:3a:17:bb:d2:5b:86:2d:
         d1:59:62:a9:80:62:9d:a3:e5:78:14:3b:e8:57:f7:a4:15:a5:
         22:9b:23:66:77:dd:a8:ed:b6:3c:9e:de:ee:cc:dd:6f:91:1f:
         58:79:68:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org