Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A1F3E085653FB8A7F22AAFBBFF39F533279A318F.cer
File:                     A1F3E085653FB8A7F22AAFBBFF39F533279A318F.cer (raw, json)
Hash identifier:          dpJipqvN9Z/6J9mgktp+yd5DH7bbBjQrkW0xknscp9k=
Subject key identifier:   A1:F3:E0:85:65:3F:B8:A7:F2:2A:AF:BB:FF:39:F5:33:27:9A:31:8F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B1F03820D1F7C2D155A79D82B08D3128C5923F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/A1F3E085653FB8A7F22AAFBBFF39F533279A318F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Jun 2023 11:38:09 +0000
Certificate not after:    Thu 13 Jun 2024 11:43:09 +0000
Subordinate resources:    AS: 52576
                          IP: 177.86.200.0/21
                          IP: 2804:cf0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1f:03:82:0d:1f:7c:2d:15:5a:79:d8:2b:08:d3:12:8c:59:23:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 15 11:38:09 2023 GMT
            Not After : Jun 13 11:43:09 2024 GMT
        Subject: CN=A1F3E085653FB8A7F22AAFBBFF39F533279A318F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3d:d0:dc:37:4c:4e:42:db:aa:0d:3c:45:87:
                    5c:26:96:46:8f:db:90:41:51:ef:a0:db:c6:7d:98:
                    29:71:14:92:10:6d:37:ed:f0:c6:73:90:a9:3c:0a:
                    af:8d:86:af:9d:66:92:3c:81:ce:d5:6f:ef:38:15:
                    1a:c2:1f:e1:23:a8:47:f5:32:ff:08:86:72:ef:41:
                    d0:e4:bd:4d:4d:36:5e:60:68:d0:4b:18:0f:b9:b3:
                    8a:64:ab:70:59:62:b1:91:17:42:be:47:d8:80:4e:
                    8a:9b:08:31:27:41:12:17:c1:8a:c2:ac:41:ec:8f:
                    71:80:e2:67:bc:be:b3:3f:2c:ff:34:d0:40:77:65:
                    82:72:64:c8:f9:a1:85:7f:75:40:aa:51:a2:5d:01:
                    e8:97:e6:09:56:41:af:e9:a7:63:ad:be:a3:29:36:
                    77:c2:68:34:be:bb:10:d0:af:ad:c6:fe:04:c7:06:
                    4d:58:e5:32:30:5e:a0:8c:b3:c1:d2:72:f4:fc:44:
                    6e:95:96:8e:c6:9c:b2:fd:7f:ec:85:a6:4b:ee:3e:
                    dc:fa:51:27:57:23:fc:d2:40:e3:42:12:fc:9a:03:
                    af:9c:dd:20:82:74:0a:08:0e:27:3a:25:d5:97:6f:
                    e7:38:92:c0:9b:8b:71:f7:55:04:15:ec:93:e6:89:
                    79:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:F3:E0:85:65:3F:B8:A7:F2:2A:AF:BB:FF:39:F5:33:27:9A:31:8F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5cna6eRM9TsWgrc2vSxe7A4L3jbgJHjoNXEUJ6CMGJXR/1/A1F3E085653FB8A7F22AAFBBFF39F533279A318F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.200.0/21
                IPv6:
                  2804:cf0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52576

    Signature Algorithm: sha256WithRSAEncryption
         7b:eb:2a:52:d0:97:11:9a:e1:77:6f:f1:3a:15:fb:f0:45:f6:
         5b:60:97:01:d2:86:0c:29:76:ef:de:dc:74:ca:92:5e:a5:20:
         92:9c:bb:42:f2:0f:d6:0b:b5:29:1c:72:c2:45:91:be:92:40:
         f2:81:3b:3e:ca:d1:fc:9d:4f:38:92:1c:58:08:79:be:8b:e1:
         4a:2b:ea:ec:ca:74:2f:eb:a9:13:e4:dc:a8:66:f8:17:df:5a:
         23:d9:a3:36:ec:d8:fd:dd:a8:39:8e:41:0a:ef:5c:87:01:c4:
         b2:3d:52:d2:fe:7d:0e:c0:b2:10:25:e7:45:d2:15:45:bb:5c:
         0c:bf:52:19:49:44:cc:9e:15:bf:e7:d2:bc:7c:cd:8a:dd:c2:
         eb:e3:97:a0:ac:de:5c:38:0f:ba:bd:49:47:bd:7d:29:6f:80:
         a5:f2:0c:19:e5:c9:b7:de:d8:a4:ea:e2:1e:48:4d:e1:df:28:
         f3:c3:00:5d:b3:fc:e5:f7:7a:97:91:5d:68:cc:21:6f:0d:59:
         57:90:3e:5f:e0:b5:f1:e8:56:a7:c9:61:c6:28:35:32:6d:df:
         5e:eb:54:33:0d:a3:79:4c:5b:e3:f8:40:e2:7f:83:12:a5:f5:
         fb:77:8c:f5:ba:7b:39:8d:d5:76:36:ce:8c:81:4d:f6:dc:0d:
         75:4c:5d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org