Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C1CED294CA50A879674BD01DEA0F8AE9F8558FF3.cer
File:                     C1CED294CA50A879674BD01DEA0F8AE9F8558FF3.cer (raw, json)
Hash identifier:          tyA7oViGZ3VSp/2EL13x7n4CoqOAilkfZGPEBL30g4A=
Subject key identifier:   C1:CE:D2:94:CA:50:A8:79:67:4B:D0:1D:EA:0F:8A:E9:F8:55:8F:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F11BAEE0B181EDD9E3514DEEA8975FA15288611
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/C1CED294CA50A879674BD01DEA0F8AE9F8558FF3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 08 May 2023 13:24:51 +0000
Certificate not after:    Mon 06 May 2024 13:29:51 +0000
Subordinate resources:    AS: 270337
                          IP: 190.83.48.0/22
                          IP: 2804:6a74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:11:ba:ee:0b:18:1e:dd:9e:35:14:de:ea:89:75:fa:15:28:86:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  8 13:24:51 2023 GMT
            Not After : May  6 13:29:51 2024 GMT
        Subject: CN=C1CED294CA50A879674BD01DEA0F8AE9F8558FF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:96:8e:43:74:02:a3:e6:4d:9f:f8:6e:a7:8e:
                    b5:57:b5:85:fe:d5:1c:91:dd:8b:3c:de:f6:8d:74:
                    c0:8b:fc:ab:a7:60:c3:f7:6b:e2:df:c3:63:f8:fa:
                    c1:68:01:78:b2:99:55:46:9c:de:b6:bd:02:22:e0:
                    d0:a2:07:11:68:cd:4b:fc:12:c7:f2:34:cd:05:61:
                    25:84:7f:5d:1b:1d:70:a3:12:1c:47:9c:0c:cb:55:
                    a7:ae:81:4a:21:95:d0:75:67:9c:9f:a4:32:1e:aa:
                    fe:bd:21:bd:3e:3c:76:47:81:69:a0:70:51:70:5d:
                    be:46:29:98:ed:a3:96:9f:8d:ad:d8:26:cd:a4:f6:
                    19:63:e4:5e:28:ca:ec:28:51:dc:fa:e1:f5:95:ea:
                    70:db:74:67:2d:dd:84:89:5b:45:e4:63:b4:e1:d0:
                    f4:e5:d8:af:0f:09:90:50:4a:87:fb:1b:e6:0d:05:
                    cf:8e:6f:43:24:05:20:17:b6:22:3d:b9:01:b6:f9:
                    09:51:56:e4:9d:76:78:40:59:b9:af:7d:1e:32:34:
                    c3:1d:62:19:54:09:d8:bf:5a:bf:72:82:3e:31:75:
                    6e:a7:67:87:8e:48:e4:20:25:6e:eb:66:27:45:09:
                    cf:90:89:97:fc:a5:01:d5:71:7c:db:f9:e0:30:a8:
                    32:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:CE:D2:94:CA:50:A8:79:67:4B:D0:1D:EA:0F:8A:E9:F8:55:8F:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AcdyncNupH9agc8MshBdbtDX7BC3S4PPBShoTbjSs6FE/0/C1CED294CA50A879674BD01DEA0F8AE9F8558FF3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.48.0/22
                IPv6:
                  2804:6a74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270337

    Signature Algorithm: sha256WithRSAEncryption
         32:a5:d9:8d:09:a4:8d:08:51:85:48:b4:24:e8:6b:c6:74:28:
         c4:22:79:24:6b:e9:37:82:6e:cc:6f:b3:22:32:cc:d7:17:1e:
         a9:ac:b7:fb:1f:f9:ee:81:5b:f2:1f:32:d0:41:3e:22:0e:13:
         ff:a7:a6:3d:a5:3a:bb:da:fc:42:5a:ad:25:31:13:d7:0c:aa:
         68:96:11:1b:02:93:0a:5d:80:90:ad:a7:2c:40:d2:3a:0d:ef:
         e3:0c:b2:ba:80:97:bb:d8:d9:19:41:8c:23:20:3c:f9:92:6d:
         97:68:37:8f:38:82:2e:4f:d8:5a:af:28:e5:01:0a:37:1d:50:
         e1:b0:c2:01:07:f7:bb:10:38:56:f5:37:49:b5:15:89:26:cb:
         42:3b:c0:46:12:b0:fc:bf:aa:12:f7:1a:f0:cc:23:f6:66:34:
         b8:19:e9:6d:ca:76:95:8e:5d:ad:16:54:4f:9b:68:3f:66:3e:
         69:2c:45:62:6c:fa:ae:3d:23:0e:ff:26:75:18:c8:df:5e:a0:
         a2:44:c5:73:95:c3:92:c8:43:48:0d:11:53:10:92:33:bd:4b:
         ca:43:80:25:dd:ec:36:89:b1:c9:ac:5b:8c:67:79:02:87:63:
         9e:54:11:d5:f7:fe:22:4a:36:b0:38:15:d5:1c:99:9b:d5:3c:
         28:39:65:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org