Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A1F3B986BE342BBD942C2BD3B1365D87CE66DB04.cer
File:                     A1F3B986BE342BBD942C2BD3B1365D87CE66DB04.cer (raw, json)
Hash identifier:          sl5I/dBrJU33ss37xwxEO+YCXwV/XHOT+fbd6sxFKNE=
Subject key identifier:   A1:F3:B9:86:BE:34:2B:BD:94:2C:2B:D3:B1:36:5D:87:CE:66:DB:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       389945327690253A04F0CF66278779BD78FBD1AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/As5LLBDZTfx5NtVPgKoipgr7F7h3VnHQsKm3bQ8kaVeZ/0/A1F3B986BE342BBD942C2BD3B1365D87CE66DB04.mft
caRepository:             rsync://rpki-repo.registro.br/repo/As5LLBDZTfx5NtVPgKoipgr7F7h3VnHQsKm3bQ8kaVeZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 01 Nov 2023 19:15:00 +0000
Certificate not after:    Wed 30 Oct 2024 19:20:00 +0000
Subordinate resources:    AS: 61571
                          IP: 200.0.89.0/24
                          IP: 2801:80:ed0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:99:45:32:76:90:25:3a:04:f0:cf:66:27:87:79:bd:78:fb:d1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  1 19:15:00 2023 GMT
            Not After : Oct 30 19:20:00 2024 GMT
        Subject: CN=A1F3B986BE342BBD942C2BD3B1365D87CE66DB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c6:2e:9f:c8:dc:8a:dd:fb:8c:1c:63:cd:07:
                    e2:63:16:38:95:ae:d0:dd:c2:a8:6f:38:fa:11:60:
                    23:8a:88:1f:07:25:23:35:69:f3:aa:a2:92:e3:8c:
                    60:c3:af:a6:7d:fa:1e:e0:81:de:68:ea:2f:8b:dc:
                    a5:e3:0b:62:83:f4:7b:79:ac:5e:99:87:55:f5:61:
                    67:c7:8c:ce:72:26:cb:4b:6c:a4:2d:1a:71:f8:22:
                    98:f6:32:32:17:6f:dd:83:e5:61:04:18:13:43:b4:
                    67:03:60:63:1b:7f:f4:44:73:80:b4:c4:3a:8e:33:
                    66:83:02:76:d0:a2:6e:c7:5f:41:69:ed:75:46:35:
                    5e:6c:34:a7:d2:8e:4f:73:e8:17:ba:3c:3e:03:2f:
                    9b:a5:74:cf:c0:b0:96:da:42:71:ee:d6:b5:79:e3:
                    ef:ca:07:43:b8:04:9f:b8:25:27:76:b4:bb:10:55:
                    8c:40:ee:74:9e:bd:76:ba:6b:d7:b4:83:7a:9d:3d:
                    55:18:b6:02:c3:2a:4c:7d:fb:86:dd:fe:e1:01:59:
                    76:5d:06:8b:19:6e:69:0c:7d:cf:bf:86:19:8e:30:
                    16:96:2f:b1:bd:c2:a6:99:ef:c9:92:77:1e:36:99:
                    bb:6b:33:7f:ae:42:3c:1c:49:22:ae:ae:aa:1a:a4:
                    2e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:F3:B9:86:BE:34:2B:BD:94:2C:2B:D3:B1:36:5D:87:CE:66:DB:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/As5LLBDZTfx5NtVPgKoipgr7F7h3VnHQsKm3bQ8kaVeZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/As5LLBDZTfx5NtVPgKoipgr7F7h3VnHQsKm3bQ8kaVeZ/0/A1F3B986BE342BBD942C2BD3B1365D87CE66DB04.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.89.0/24
                IPv6:
                  2801:80:ed0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61571

    Signature Algorithm: sha256WithRSAEncryption
         9b:12:6d:f6:4c:b4:97:23:c1:e3:7c:6f:1a:43:43:bf:f0:d4:
         b9:b9:00:24:aa:48:d4:7f:d6:cd:1c:b3:60:00:31:47:9d:7b:
         ba:6f:90:d2:77:82:0a:98:7e:6f:2b:94:99:e3:1f:f6:4c:ec:
         e1:d4:95:28:b0:ca:be:d0:1f:5a:f6:10:28:03:15:f1:bb:3d:
         b2:f4:b4:2f:db:9e:46:ff:38:6c:47:a1:ed:ec:10:e5:42:1d:
         e9:b4:cb:0d:f7:8e:cd:e4:59:af:74:5b:67:f8:dd:bd:bb:a0:
         d8:c4:83:ae:46:ca:21:61:2d:61:e8:66:03:f1:b4:c9:b8:25:
         82:b7:ca:27:e4:30:1d:ee:a2:a7:25:15:61:ca:30:16:18:47:
         02:74:31:b4:11:9e:3d:20:c9:95:b8:a5:7c:14:fa:cb:3a:62:
         82:25:a8:b0:61:cf:4c:2e:af:2b:9b:1e:b9:81:87:1c:35:5d:
         1e:38:cd:57:44:8e:73:ac:df:9a:b1:d0:6a:c6:a7:e2:df:a0:
         d0:19:31:38:17:c8:9e:8d:8a:6c:ce:06:24:77:57:8d:3c:1b:
         16:72:d7:b2:a4:37:79:52:c8:b2:56:e6:12:bf:34:2b:7b:58:
         fb:89:50:93:d5:1d:36:29:35:d6:ab:ca:8d:25:23:c9:e9:2d:
         5a:e2:33:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org