Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.cer
File:                     A432D1CCC67116292BF0943CA38D4C9A972E25AC.cer (raw, json)
Hash identifier:          3EvCZUkpVCkveKeqkG2pfRMzZEWYjIpxtb1HvEJPgaE=
Subject key identifier:   A4:32:D1:CC:C6:71:16:29:2B:F0:94:3C:A3:8D:4C:9A:97:2E:25:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       719B90E7617854BA81F34B4AB1CE1EE355115971
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Dec 2023 19:25:05 +0000
Certificate not after:    Mon 02 Dec 2024 19:30:05 +0000
Subordinate resources:    AS: 271489
                          IP: 181.232.200.0/22
                          IP: 2804:7c54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:9b:90:e7:61:78:54:ba:81:f3:4b:4a:b1:ce:1e:e3:55:11:59:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  4 19:25:05 2023 GMT
            Not After : Dec  2 19:30:05 2024 GMT
        Subject: CN=A432D1CCC67116292BF0943CA38D4C9A972E25AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ef:3d:a5:33:1d:ec:68:8b:74:92:51:ef:29:
                    19:b3:46:2d:ad:1a:4a:76:57:a7:1c:0e:14:22:2b:
                    a5:9f:9a:7a:14:a7:5b:9e:55:fe:cb:38:05:f2:5b:
                    5c:99:4e:7b:4a:80:2f:af:0a:a6:bb:f4:4e:39:ed:
                    e6:34:b5:11:a3:c5:a9:98:87:ce:0f:c9:0e:77:51:
                    ad:9c:1d:71:09:72:0a:20:39:66:de:6b:62:ba:c1:
                    fd:0a:78:aa:9b:b0:85:2b:d4:e6:89:4d:4a:e0:4c:
                    c4:58:44:c7:df:ed:0b:14:7d:d5:4a:52:60:3a:c7:
                    6e:c3:2e:10:2f:a6:d1:30:10:72:7e:ac:c7:31:03:
                    3b:ea:a0:2c:ab:0c:62:b2:d4:0d:a7:07:43:21:64:
                    e8:ce:e9:03:6e:6e:f2:9f:8e:2d:71:03:0a:d4:b1:
                    2c:dd:96:a3:11:3a:2d:27:53:a5:44:31:fb:1f:b8:
                    bb:f6:05:c1:50:d0:dc:d9:dc:e6:eb:1d:8b:6b:53:
                    dd:6f:d8:7c:a5:96:59:31:c8:b6:d1:91:88:9c:f9:
                    30:eb:18:76:25:c0:6e:3e:d5:52:aa:07:cd:e9:4d:
                    c5:09:fb:43:e7:b9:0e:22:ec:2c:4c:e0:6b:0b:b3:
                    bd:9f:e3:22:0c:83:8e:44:d9:5d:20:cd:1f:2f:5f:
                    6a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A4:32:D1:CC:C6:71:16:29:2B:F0:94:3C:A3:8D:4C:9A:97:2E:25:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/0/A432D1CCC67116292BF0943CA38D4C9A972E25AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.200.0/22
                IPv6:
                  2804:7c54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271489

    Signature Algorithm: sha256WithRSAEncryption
         61:5b:8c:20:d1:bd:8a:5e:7a:77:e4:e4:86:6b:19:c9:f3:c9:
         ca:c1:cc:d3:f7:fd:1a:82:ec:95:25:9c:6c:c1:26:fd:c5:c7:
         7d:a5:1e:50:ac:33:15:85:5b:93:18:8d:6b:31:0e:66:02:3a:
         5c:d7:85:ee:b6:12:cc:82:cc:1a:3d:ed:58:e7:6a:a5:b5:df:
         c7:84:d6:0b:44:1b:80:df:4f:15:40:af:ec:52:42:8a:36:0b:
         bb:89:a3:df:90:6b:62:4c:59:a0:4d:37:2b:28:fe:41:5f:80:
         79:5d:a3:51:e7:36:86:dd:fc:01:cd:55:21:48:e0:37:de:3a:
         d8:63:cd:8e:b3:ad:ea:c4:f6:db:72:e4:1c:5e:ab:c0:be:48:
         54:78:81:7c:bf:ef:9b:80:d3:b4:d7:36:90:e8:7c:74:22:7a:
         ad:be:40:ea:16:9b:38:c8:6b:a8:c6:72:4c:98:cf:14:52:9c:
         06:7f:8b:30:fa:3a:bd:c9:e8:17:32:22:5c:36:4a:67:6e:94:
         23:2f:10:3b:63:0c:ef:ae:f8:1f:16:30:ab:4e:74:08:02:d6:
         2e:6e:f2:c9:e4:e4:91:25:b8:15:59:f1:dd:53:dc:c4:76:80:
         31:26:5c:04:ff:aa:77:33:b8:8a:b9:bc:78:c6:d4:da:d8:eb:
         9e:53:05:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:43 2024 by rpki-client on console-ams.rpki-client.org