Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C14A11353C3944405EFE80D9C2721110B9176A2D.cer
File:                     C14A11353C3944405EFE80D9C2721110B9176A2D.cer (raw, json)
Hash identifier:          RPqASPY/gtTWfxPU27RIw6VRfDM55d3H69IU/+UTcoE=
Subject key identifier:   C1:4A:11:35:3C:39:44:40:5E:FE:80:D9:C2:72:11:10:B9:17:6A:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3458508F060C9799A556FF7C64709A8F97118F59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/C14A11353C3944405EFE80D9C2721110B9176A2D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Aug 2023 22:05:53 +0000
Certificate not after:    Tue 30 Jul 2024 22:10:53 +0000
Subordinate resources:    AS: 262656
                          IP: 138.121.208.0/22
                          IP: 2804:25d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:58:50:8f:06:0c:97:99:a5:56:ff:7c:64:70:9a:8f:97:11:8f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  1 22:05:53 2023 GMT
            Not After : Jul 30 22:10:53 2024 GMT
        Subject: CN=C14A11353C3944405EFE80D9C2721110B9176A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:47:4e:5b:07:3c:0d:89:35:cc:2d:4f:11:93:
                    98:81:00:2b:e4:69:45:94:2b:a4:14:36:fd:0b:dc:
                    8f:7a:1a:a4:87:0f:01:b9:04:cf:57:86:9e:ed:83:
                    7d:c6:bc:32:04:64:88:88:6c:cf:59:84:fc:a2:e6:
                    ce:88:0a:26:df:db:de:4c:6c:be:d2:ee:93:be:cf:
                    70:54:0b:6e:20:97:9e:a5:7c:69:59:a1:b6:1e:47:
                    8d:a4:7a:37:08:ce:49:8d:08:6f:9b:3b:c0:9b:e4:
                    e2:41:5e:a0:5f:6a:2b:35:77:42:a3:e5:64:da:51:
                    d7:17:85:21:d7:6d:95:7b:bc:2d:27:dc:e3:a6:ad:
                    d1:fc:ac:18:55:ef:91:e3:d1:9e:44:15:db:b5:82:
                    f4:6a:36:0b:a7:51:90:6a:d9:c1:31:65:f8:a7:8b:
                    b1:b6:e9:33:63:8c:89:44:7d:9b:79:ad:97:b4:82:
                    24:48:f7:63:31:57:a5:6f:98:16:da:57:45:e5:3a:
                    a2:d2:c8:dc:4d:57:b8:a6:13:38:24:f3:6e:20:e7:
                    53:c9:fa:f8:d8:a5:4c:91:11:45:0c:f8:0f:18:e8:
                    7f:bb:99:e8:7b:7a:06:d7:75:12:1e:fa:b1:4c:db:
                    77:e7:de:d7:9c:5c:48:76:3d:dd:6a:a4:52:f6:84:
                    ee:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:4A:11:35:3C:39:44:40:5E:FE:80:D9:C2:72:11:10:B9:17:6A:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/C14A11353C3944405EFE80D9C2721110B9176A2D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.208.0/22
                IPv6:
                  2804:25d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262656

    Signature Algorithm: sha256WithRSAEncryption
         04:90:0b:56:25:50:6a:b6:71:dd:4b:75:c7:55:cb:41:a7:6e:
         3f:74:29:19:57:6e:ac:a8:4b:54:cd:76:82:97:d4:94:17:f3:
         6b:51:cf:4c:1c:36:97:4b:54:f5:c6:e2:b3:3f:fa:5e:62:39:
         cd:42:39:9c:ea:7d:9d:14:ee:c1:f8:be:9a:cd:1d:00:a6:22:
         5b:1b:62:43:5d:38:cc:1d:a2:1c:d3:67:76:9d:49:5b:a4:a2:
         9a:2e:f7:9b:cc:10:6f:8a:7c:91:a0:8f:a5:ee:ac:31:ca:57:
         74:3f:3e:f7:f1:65:06:3d:ed:ff:ee:61:f8:b2:5e:85:47:74:
         9d:66:1a:db:db:6d:66:e9:2e:d2:93:25:2c:d4:da:7d:53:58:
         81:65:9e:a4:9f:61:b8:6c:f3:6e:c7:76:b9:e9:d5:ea:6c:cd:
         70:83:77:2e:28:23:a8:85:74:d5:00:3e:87:28:57:fd:f6:89:
         a5:da:bd:ae:d2:a0:6b:0d:3a:13:d6:72:23:72:ef:a7:16:0b:
         ec:b1:b6:4f:4f:d3:f7:32:77:33:a4:d8:a2:cc:cf:14:b7:c0:
         fd:32:c1:a0:dc:05:6e:72:d6:b0:8c:44:ed:f0:f3:03:34:5c:
         c1:69:65:b4:36:dc:32:17:94:7d:a7:61:c9:e4:72:44:7a:a9:
         18:af:1c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org