Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.cer
File:                     C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.cer (raw, json)
Hash identifier:          iEKW0qPz+Lr9jdZC4ky399KgccpHrYMvwy5/evg5r70=
Subject key identifier:   C1:4D:77:36:E6:1F:BB:54:07:09:0B:52:CA:F4:DA:C5:BB:AF:89:64
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0291EB68E9DBD93DE5240B827E046EE2D4C5DA94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Mar 2023 18:32:14 +0000
Certificate not after:    Thu 07 Mar 2024 18:37:14 +0000
Subordinate resources:    AS: 270428
                          IP: 190.111.184.0/22
                          IP: 2804:6bd4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:91:eb:68:e9:db:d9:3d:e5:24:0b:82:7e:04:6e:e2:d4:c5:da:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  9 18:32:14 2023 GMT
            Not After : Mar  7 18:37:14 2024 GMT
        Subject: CN=C14D7736E61FBB5407090B52CAF4DAC5BBAF8964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e1:4d:b0:b3:f7:8e:ca:48:99:6a:8c:4b:a7:
                    8a:7e:d0:2d:5a:e2:10:af:9f:79:81:89:7d:69:b3:
                    67:be:cb:88:cd:c8:20:f3:7b:4b:d2:fc:e3:13:d2:
                    80:ef:e3:6a:50:5c:5a:92:19:bc:e6:6f:51:59:12:
                    36:aa:57:c5:07:90:43:e7:33:9c:d3:66:7a:f1:72:
                    82:f2:05:6a:c0:96:cf:e7:96:fd:e5:0b:4c:3b:10:
                    44:fc:4d:4d:4f:4e:a6:35:23:65:ca:83:70:44:99:
                    13:ea:c7:87:b6:14:0f:96:7a:69:aa:46:ce:81:17:
                    79:a4:be:cc:30:cd:11:0d:45:fc:5f:a5:e1:4d:3e:
                    fd:01:58:dc:ff:14:ce:69:70:3e:c7:07:84:83:5e:
                    3e:8b:59:71:2c:ed:e9:d5:04:dd:30:1e:06:5a:a1:
                    14:e0:b1:9f:91:61:90:93:93:5b:fe:97:e4:0c:34:
                    87:4b:9a:56:c5:b4:45:dd:38:2b:cd:c7:ca:cb:9d:
                    4a:5c:eb:e8:31:0e:df:31:07:ca:e1:e5:58:92:ec:
                    90:20:dc:3a:78:0d:84:66:b1:0d:04:71:97:c8:ac:
                    a3:3e:b5:a8:e7:ad:9c:74:54:81:75:bf:c0:07:87:
                    77:4b:c7:75:55:6a:8f:a8:4a:10:09:db:97:eb:86:
                    2e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:4D:77:36:E6:1F:BB:54:07:09:0B:52:CA:F4:DA:C5:BB:AF:89:64
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3qw5KsbFQbpuc5SmMx22h2E71SgavFiDMaP1Dx3pZsu7/0/C14D7736E61FBB5407090B52CAF4DAC5BBAF8964.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.184.0/22
                IPv6:
                  2804:6bd4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270428

    Signature Algorithm: sha256WithRSAEncryption
         05:25:aa:19:1f:a8:c3:16:48:db:9b:29:f0:c1:f4:cd:b0:ba:
         c8:dc:09:7b:d2:76:70:47:92:43:a0:94:9d:79:16:2d:c9:83:
         63:6a:21:ad:e0:21:54:fc:2a:25:4e:a1:21:dd:a0:03:13:5f:
         65:bc:c2:12:c4:dd:57:54:91:77:45:2b:54:9a:ad:16:e8:58:
         7f:73:7c:95:bb:bd:95:cc:86:d9:b7:13:ab:2a:4a:53:e8:e7:
         29:a9:dd:08:eb:7f:c2:a0:9f:0c:b3:c8:a1:a1:43:99:3e:67:
         ad:71:53:89:58:57:2b:e6:3e:a4:6f:45:d1:64:06:f9:a5:cb:
         eb:5c:f4:3e:43:57:aa:60:69:d7:e5:c2:5c:ca:97:08:d8:c9:
         cb:57:75:90:ff:13:fa:b4:9c:9a:dc:c1:77:b4:be:db:c6:3f:
         a5:0c:0c:e8:e6:b8:34:c8:aa:53:d5:54:e8:97:83:88:3f:1c:
         ba:d9:36:6a:b9:78:e5:f7:27:ba:ed:aa:9c:00:9a:2f:4f:34:
         2d:d9:6b:cf:84:cc:04:52:83:3c:43:77:8d:e1:f8:6a:60:d3:
         f4:42:ef:ae:0b:7c:f7:eb:09:79:32:aa:5d:24:9a:26:1e:6c:
         77:0d:2d:2a:b4:12:51:e7:ed:aa:58:e5:d9:7b:96:10:31:0d:
         48:80:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org