Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A561916EB1A61E110D909C0CA2D8F6759A3F0EA4.cer
File:                     A561916EB1A61E110D909C0CA2D8F6759A3F0EA4.cer (raw, json)
Hash identifier:          y5nWsm+Bb/koaHNf+jvAcOISPmW3El/b5ZSHh9saY7U=
Subject key identifier:   A5:61:91:6E:B1:A6:1E:11:0D:90:9C:0C:A2:D8:F6:75:9A:3F:0E:A4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       757EC094F839BE5C7C7C9451719C7E206AD07DD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/A561916EB1A61E110D909C0CA2D8F6759A3F0EA4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Feb 2023 16:53:57 +0000
Certificate not after:    Mon 05 Feb 2024 16:58:57 +0000
Subordinate resources:    AS: 262285
                          IP: 45.161.252.0/22
                          IP: 177.52.244.0/22
                          IP: 177.124.8.0/21
                          IP: 2804:a74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:7e:c0:94:f8:39:be:5c:7c:7c:94:51:71:9c:7e:20:6a:d0:7d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 16:53:57 2023 GMT
            Not After : Feb  5 16:58:57 2024 GMT
        Subject: CN=A561916EB1A61E110D909C0CA2D8F6759A3F0EA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8f:09:77:d8:87:54:51:eb:08:24:3c:c4:4f:
                    cd:05:35:20:92:3c:d3:d0:19:de:6f:23:2c:5e:6b:
                    4a:19:28:60:98:b7:43:bc:b1:f4:78:2f:48:f1:8f:
                    3c:95:65:4f:34:d4:e2:92:b0:4c:83:64:17:18:c5:
                    76:f9:1c:58:50:7f:a6:bb:15:1d:ca:7a:78:9e:d0:
                    d1:10:0e:40:8f:20:09:5d:0e:6b:de:e3:75:6f:a1:
                    de:7c:99:37:c9:ee:1a:20:c1:3b:aa:79:24:27:14:
                    5d:88:c0:23:35:28:25:f5:79:77:4d:6b:a8:8e:be:
                    c9:14:bf:5c:4b:0b:68:5a:1b:d7:02:f7:24:86:b3:
                    3d:85:77:0a:95:fc:7c:6e:96:a5:78:1c:2c:ea:00:
                    c1:7b:27:1c:d4:2b:36:20:3f:86:7e:3f:92:82:c3:
                    a8:f8:6e:34:eb:0b:07:c3:6a:bb:c9:f1:97:e6:94:
                    e6:b8:bc:dc:5a:43:7b:16:70:92:6b:cc:4a:50:83:
                    65:41:d4:d4:05:f4:47:82:33:d9:36:3a:15:0e:cb:
                    66:f8:0d:e8:8e:8b:19:40:9f:f3:47:60:d2:cc:3a:
                    33:d0:d3:b9:c4:36:04:52:06:bc:37:53:1c:09:a7:
                    1f:d6:dd:01:2a:ca:f6:a2:a4:00:1c:cb:5d:d6:66:
                    fc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A5:61:91:6E:B1:A6:1E:11:0D:90:9C:0C:A2:D8:F6:75:9A:3F:0E:A4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9M2FgrwfVJyUowTU886R4jthn7GHWh9RWdck9bLXkUTH/0/A561916EB1A61E110D909C0CA2D8F6759A3F0EA4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.252.0/22
                  177.52.244.0/22
                  177.124.8.0/21
                IPv6:
                  2804:a74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262285

    Signature Algorithm: sha256WithRSAEncryption
         75:14:d7:d9:72:75:7a:a1:4f:35:6d:6c:66:87:e2:d7:3c:93:
         b2:d2:dc:87:ab:14:f9:3e:12:d5:22:7e:d6:28:8a:59:c5:8a:
         86:5d:8d:b2:7d:7a:48:7c:78:af:d7:7c:51:8d:0a:89:1e:47:
         3e:c3:51:ac:22:26:30:2c:f5:fd:1b:c7:d7:3a:a2:4c:07:15:
         31:32:7c:b3:d7:b9:0b:a6:c2:c5:f7:91:75:3d:65:76:10:16:
         11:52:eb:0e:f0:19:7b:e1:2a:3d:5e:f1:a2:b4:74:29:a3:dc:
         a6:81:23:4d:60:35:c5:d9:ad:60:ba:1e:a5:58:ed:cf:f2:e1:
         f9:89:cd:e7:7f:ad:d4:5b:58:65:18:5a:57:49:d5:4c:7a:61:
         69:26:78:6e:57:7c:57:33:fe:c2:15:14:ba:5f:0a:b3:88:79:
         94:6d:f9:2d:1e:b5:3b:77:4b:d7:ea:9c:34:8b:af:9f:e6:b9:
         47:13:7a:75:12:10:ac:fe:99:b9:4c:c6:a9:82:c3:b3:32:e3:
         9d:a2:8f:5f:5b:3b:8b:cc:e2:9e:05:a2:f2:ef:05:44:17:05:
         c6:54:4c:76:66:4c:ce:1d:10:1a:b5:b4:e7:3f:43:8e:e8:7f:
         39:40:20:72:bb:1a:3e:af:fe:15:1e:b6:35:93:63:1b:3a:1f:
         5a:20:bb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:41 2024 by rpki-client on console-ams.rpki-client.org