Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A37F949C9D7092C43D6C2162D98F3EFFC398E477.cer
File:                     A37F949C9D7092C43D6C2162D98F3EFFC398E477.cer (raw, json)
Hash identifier:          XtRgA7ekQR4RyPQIOs47m2UK4E8arLoe6SM50ltCWs4=
Subject key identifier:   A3:7F:94:9C:9D:70:92:C4:3D:6C:21:62:D9:8F:3E:FF:C3:98:E4:77
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C00D5C611C3A7B62F38348F63EE53F1F55862A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/A37F949C9D7092C43D6C2162D98F3EFFC398E477.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 23:34:37 +0000
Certificate not after:    Fri 14 Feb 2025 23:39:37 +0000
Subordinate resources:    AS: 265928
                          IP: 131.196.132.0/22
                          IP: 2804:4004::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:00:d5:c6:11:c3:a7:b6:2f:38:34:8f:63:ee:53:f1:f5:58:62:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 23:34:37 2024 GMT
            Not After : Feb 14 23:39:37 2025 GMT
        Subject: CN=A37F949C9D7092C43D6C2162D98F3EFFC398E477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9c:88:d7:f7:34:11:d7:9f:8b:7e:0d:d8:8d:
                    17:aa:12:95:5f:64:c2:c7:4f:09:65:82:87:37:16:
                    c5:6a:17:6a:2d:52:9a:e8:f6:b6:0e:03:ea:0f:30:
                    45:a7:11:a0:e3:6e:7b:b0:2e:53:f9:2a:4c:30:b0:
                    a5:7e:04:6f:f1:a7:30:e9:90:fd:f0:78:a2:10:c9:
                    34:5e:8b:58:84:4f:7a:d3:7d:18:3c:e9:b7:23:d0:
                    cd:0e:47:d4:2f:be:4b:38:61:fb:27:b2:07:9a:3c:
                    a0:f7:8b:c3:88:ab:61:be:dc:69:7d:0d:26:0d:fc:
                    ba:25:c3:29:53:7c:5e:13:c3:8f:86:e1:33:38:34:
                    04:0b:d8:9e:d7:1a:96:e7:be:8f:0b:a2:af:a1:66:
                    eb:bd:79:b9:67:a3:4e:ac:c5:45:6b:bb:d9:b7:03:
                    4b:02:80:31:18:4b:59:ff:bc:86:9f:c1:c2:ec:6b:
                    85:66:79:99:60:0e:89:cc:f9:a9:0e:9a:66:cb:2e:
                    78:80:e4:94:42:54:8c:2d:98:c5:e8:d4:c8:f7:3b:
                    14:0a:ce:4e:ba:bf:c2:8b:8d:96:b3:4f:3c:46:e1:
                    09:da:f6:d6:17:b2:3f:13:4e:c2:61:ac:82:33:f5:
                    be:30:45:0a:f5:fc:e7:26:fc:ac:28:e4:f8:5e:df:
                    b4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:7F:94:9C:9D:70:92:C4:3D:6C:21:62:D9:8F:3E:FF:C3:98:E4:77
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HZBFkYJRjcHt8BaJwjWG9pwUTZDK5pGz4QJTqZFSZJi/0/A37F949C9D7092C43D6C2162D98F3EFFC398E477.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.132.0/22
                IPv6:
                  2804:4004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265928

    Signature Algorithm: sha256WithRSAEncryption
         a8:12:92:b9:b4:14:ad:33:4c:82:a0:88:62:33:98:49:8f:41:
         8d:ff:4d:c4:34:96:47:f1:59:9e:f3:eb:fd:ae:0e:58:b0:69:
         1d:7d:bd:db:52:2e:fa:d0:b9:d9:42:a6:3a:91:4a:47:e1:25:
         2b:d5:cc:49:1d:32:ab:ce:c0:75:4c:d6:6f:fc:00:e6:f1:57:
         00:08:ad:a1:6e:88:ab:8a:99:11:79:aa:1c:b8:93:40:3a:89:
         03:45:41:cc:55:9e:58:b8:61:48:95:18:1a:0b:69:1b:05:9f:
         84:26:9c:fa:9c:13:46:86:94:39:90:90:cd:08:f3:1b:6c:93:
         34:88:30:0d:af:08:76:9d:38:89:48:84:a3:a1:b6:83:3f:5a:
         02:62:b1:c0:bd:11:3b:fe:86:5b:50:cc:37:21:3b:55:22:6f:
         f2:f6:63:79:19:80:0d:62:7d:6b:b6:fc:27:7b:9b:c2:60:ed:
         ba:f5:5a:08:60:92:cb:ef:4c:4a:87:54:44:ed:f1:9b:9e:29:
         1d:33:4a:f3:c8:0b:3f:24:70:77:c5:ed:98:d4:fc:76:b0:fd:
         cb:a9:f5:4b:31:14:0f:13:07:a8:cb:19:c2:a9:3a:da:64:af:
         33:b5:69:32:4c:6e:52:f1:8a:d0:ba:cb:9e:38:1d:c6:94:b1:
         da:47:b4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:40 2024 by rpki-client on console-ams.rpki-client.org