Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.cer
File:                     A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.cer (raw, json)
Hash identifier:          A1QlQLWEDuIR3mIagLIMPBy8HpqEfq65xtpeqYbQf3Y=
Subject key identifier:   A2:3E:9B:90:13:74:16:AB:6A:D3:3B:C2:0E:65:DB:5B:91:FD:E6:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       07A16BF4ABD3D5625F809BB95251650046E4D66A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Dec 2023 17:22:17 +0000
Certificate not after:    Tue 24 Dec 2024 17:27:17 +0000
Subordinate resources:    AS: 61686
                          IP: 131.100.232.0/22
                          IP: 2804:1cf8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a1:6b:f4:ab:d3:d5:62:5f:80:9b:b9:52:51:65:00:46:e4:d6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 26 17:22:17 2023 GMT
            Not After : Dec 24 17:27:17 2024 GMT
        Subject: CN=A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:0f:98:3f:12:e0:c9:7c:40:36:c3:2c:71:
                    9d:a7:aa:59:5b:d8:28:93:5c:a0:6e:3a:48:02:57:
                    d9:0a:0e:b1:d4:e5:46:eb:51:d9:22:61:5d:d3:27:
                    04:a2:df:c5:76:9a:65:34:f6:c2:e0:6a:9d:a5:be:
                    3b:67:a8:9f:c8:85:8d:3c:ca:02:2f:c3:96:60:03:
                    3c:c7:30:f4:73:2e:4d:1c:47:40:2a:ae:03:7a:c6:
                    ce:ae:4e:fb:ed:cb:b8:ec:ed:cc:ec:eb:39:6d:e7:
                    7e:20:23:8f:d0:49:26:2c:cf:45:73:71:9c:02:82:
                    51:04:87:56:06:7c:66:c5:8d:3e:08:6d:96:e0:43:
                    39:f4:55:c2:c5:42:42:db:7d:c1:bf:46:6f:c0:66:
                    5f:8e:af:eb:2c:56:0b:8a:de:be:b9:9f:20:c0:fd:
                    e8:d6:c9:6c:4f:ad:fb:35:46:9b:81:7f:58:0d:d3:
                    55:33:b0:30:7b:de:97:40:70:ef:84:ee:70:69:51:
                    ec:7d:d8:ab:ee:39:3c:85:8f:a9:64:4d:af:b0:76:
                    76:2f:07:87:1c:8a:6a:aa:1d:74:b4:54:a8:1f:c6:
                    a0:e2:6b:c8:2c:0c:8a:62:12:a2:f8:dc:84:ec:a6:
                    af:bd:81:f5:ad:3f:5f:52:dd:17:ea:6f:4e:a2:cc:
                    0d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:3E:9B:90:13:74:16:AB:6A:D3:3B:C2:0E:65:DB:5B:91:FD:E6:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7dWSkfTAcBN1DAAa7Vn7Aay3zvsrT1jnSQYDaS9exV8g/0/A23E9B90137416AB6AD33BC20E65DB5B91FDE6AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.232.0/22
                IPv6:
                  2804:1cf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61686

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:2d:f7:bc:cf:0d:df:32:c5:72:fe:19:0a:80:68:aa:f8:
         f9:c2:5f:c8:4e:9a:2e:fe:f8:80:dd:cc:c4:f1:7f:05:c7:ec:
         58:ae:a1:c9:7f:8e:63:05:35:9b:3e:2e:96:16:13:0b:59:1c:
         60:04:70:76:50:ce:62:05:9d:82:3a:9d:cf:21:ef:ef:57:9f:
         da:d0:6c:1d:db:fe:ed:b3:75:79:51:c4:27:df:55:53:14:b6:
         2f:ba:71:a8:af:14:39:43:9f:93:40:1d:50:f1:49:ba:10:f4:
         a9:15:51:2b:16:b3:05:a8:24:12:74:29:f6:63:d2:e7:d2:68:
         67:24:36:81:cd:c7:4c:17:ee:bb:1e:6a:0c:82:d8:c8:c5:71:
         c0:15:48:2f:b2:3c:f8:bb:36:55:19:c7:9b:36:b0:7f:e5:2a:
         64:4d:c1:c0:ca:bb:19:1d:f6:a4:de:6f:32:39:2e:1e:a3:ad:
         cd:59:bb:68:da:6b:e5:c0:12:24:33:1d:ba:6e:33:aa:0c:24:
         f2:f4:37:66:74:05:78:5a:62:fa:73:fd:9c:2c:4f:3e:12:3b:
         e7:65:c2:60:01:8a:5d:ac:4e:bd:ea:63:06:be:e5:fa:7c:80:
         f3:d7:0b:b9:10:6e:b9:85:59:e3:c5:eb:66:3a:c8:9b:3e:58:
         57:88:b1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org