Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B14A9C61375F471EA01094C9014C886AD5FF6A19.cer
File:                     B14A9C61375F471EA01094C9014C886AD5FF6A19.cer (raw, json)
Hash identifier:          8byyafVUS4vCtbMcjIQqPFbw3go+CjXMx63WAdfDNMk=
Subject key identifier:   B1:4A:9C:61:37:5F:47:1E:A0:10:94:C9:01:4C:88:6A:D5:FF:6A:19
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       76C753F2156F2F1CB03181813E38E2FFA7162101
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/B14A9C61375F471EA01094C9014C886AD5FF6A19.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Sep 2023 18:32:50 +0000
Certificate not after:    Mon 09 Sep 2024 18:37:50 +0000
Subordinate resources:    AS: 53196
                          IP: 131.100.196.0/22
                          IP: 170.231.88.0/22
                          IP: 186.232.208.0/21
                          IP: 2804:1d1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c7:53:f2:15:6f:2f:1c:b0:31:81:81:3e:38:e2:ff:a7:16:21:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 11 18:32:50 2023 GMT
            Not After : Sep  9 18:37:50 2024 GMT
        Subject: CN=B14A9C61375F471EA01094C9014C886AD5FF6A19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:5d:78:d6:3c:57:62:7c:de:54:b4:50:42:
                    cd:44:7a:73:73:6c:8b:65:92:13:0a:dc:c2:d5:99:
                    bd:15:b1:50:b5:71:41:4f:64:33:4c:0e:db:50:39:
                    d0:7d:cb:2a:d9:13:21:29:16:7c:bb:c7:0d:95:38:
                    d4:ac:71:8f:61:6b:a1:86:4b:6e:77:c7:ea:25:90:
                    33:cb:25:8b:1c:54:6e:41:4b:f7:dc:a2:03:31:8f:
                    a0:82:00:ea:44:2e:85:da:4a:b3:b2:a7:fb:5b:4d:
                    bc:85:10:a6:2a:40:6b:23:dc:57:a5:1d:c3:8d:45:
                    09:13:c5:fb:84:58:26:23:56:0a:0f:28:ea:6b:05:
                    03:bc:86:dd:50:91:ea:2c:9c:14:1c:23:da:a3:cd:
                    d2:54:65:eb:69:6b:14:e9:5e:05:0d:c2:fc:3e:81:
                    07:d1:db:59:7e:f7:25:8a:93:3f:d9:60:92:ac:20:
                    a4:de:5d:2e:c1:9a:1f:4e:c2:6a:74:a9:8e:f2:76:
                    88:14:02:e5:04:82:e1:f2:3b:95:69:09:52:3f:fd:
                    0b:85:24:22:4e:f1:1d:ed:9a:1a:ed:17:30:2e:42:
                    1f:dd:0c:b8:b0:63:22:91:59:1f:b2:f4:76:fc:04:
                    c7:60:58:aa:e1:43:dc:96:01:1e:22:d8:6e:87:cd:
                    55:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B1:4A:9C:61:37:5F:47:1E:A0:10:94:C9:01:4C:88:6A:D5:FF:6A:19
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ew3ofXAiPgoqBttYLbtwm1ULvUemWRSuCRb7pLpzqsAd/0/B14A9C61375F471EA01094C9014C886AD5FF6A19.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.196.0/22
                  170.231.88.0/22
                  186.232.208.0/21
                IPv6:
                  2804:1d1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53196

    Signature Algorithm: sha256WithRSAEncryption
         56:b7:03:c0:04:05:8a:6e:d7:10:7e:4d:ef:4e:b7:e2:67:b5:
         7b:f7:c3:06:34:f1:67:4f:cb:48:2b:96:7b:72:2e:a1:33:56:
         0d:f2:6f:55:f5:5b:74:b9:3a:39:36:7c:e0:23:ef:34:8f:09:
         81:5d:2c:0c:13:af:db:1b:d6:55:8d:25:69:4a:6d:f5:36:ba:
         26:7b:c4:1f:2a:a9:b0:f0:eb:76:a6:d3:be:6b:9d:64:1f:a5:
         41:56:16:d2:5c:f8:1e:a8:be:99:95:eb:6a:41:c2:dd:89:7e:
         34:6f:bd:ec:40:24:8c:f1:dd:d7:a3:48:d7:37:0e:a2:63:53:
         38:06:b9:bb:e4:74:bb:7e:f7:61:e6:08:01:c2:9a:71:29:39:
         7b:d9:e4:31:8b:63:4d:3b:bf:ce:df:32:5e:1b:83:bf:63:fc:
         a4:7b:a8:7e:5d:d5:20:a0:a9:d5:39:23:69:ad:fe:3d:3c:cd:
         27:1b:91:29:41:4a:6f:a6:8b:73:61:21:cd:7c:81:8f:43:f8:
         64:b8:2f:d5:14:c1:2d:74:11:7a:3d:40:c5:6a:51:60:45:a7:
         89:ea:38:e9:f9:9e:61:f3:6e:51:85:20:e3:bf:42:20:98:6b:
         9c:d8:d5:a5:ff:ed:d9:ea:47:73:de:a0:a9:42:e2:be:d0:99:
         ef:b1:5d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:27 2024 by rpki-client on console-fra.rpki-client.org