Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C1D6A698ABA2C1AACF59F5B3B712624DB021C062.cer
File:                     C1D6A698ABA2C1AACF59F5B3B712624DB021C062.cer (raw, json)
Hash identifier:          BqU57xif6LKUdmTciLmsFCLSJgwyIfCdhdA/nVJBKYI=
Subject key identifier:   C1:D6:A6:98:AB:A2:C1:AA:CF:59:F5:B3:B7:12:62:4D:B0:21:C0:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2998774387E66577567009F32CA18EE14EF38F00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/C1D6A698ABA2C1AACF59F5B3B712624DB021C062.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 21:51:29 +0000
Certificate not after:    Tue 02 Apr 2024 21:56:29 +0000
Subordinate resources:    AS: 269671
                          IP: 45.191.124.0/22
                          IP: 2804:6824::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:98:77:43:87:e6:65:77:56:70:09:f3:2c:a1:8e:e1:4e:f3:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  4 21:51:29 2023 GMT
            Not After : Apr  2 21:56:29 2024 GMT
        Subject: CN=C1D6A698ABA2C1AACF59F5B3B712624DB021C062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b4:d9:23:4a:7b:7e:2b:68:bc:33:5f:4f:09:
                    97:41:da:79:e4:07:bc:38:8d:2c:8b:4d:c7:d9:39:
                    fb:7c:83:de:45:65:35:3d:15:3d:27:1d:e8:36:13:
                    b6:24:b2:15:70:a0:5e:08:44:ce:b3:3c:27:da:25:
                    84:27:7a:b6:96:0b:b5:40:a1:e3:6a:59:c4:4d:2a:
                    64:20:93:3e:89:9f:73:ba:46:6d:01:d4:86:b5:9c:
                    26:13:57:9e:00:93:ea:ff:d6:fa:36:c1:4b:49:66:
                    2c:c7:f5:19:14:b8:5e:3c:b0:83:45:90:7b:4d:ee:
                    a0:5b:46:59:37:79:48:af:0b:79:3b:26:d1:5d:12:
                    c3:e2:6e:14:68:98:e4:39:f0:e6:4e:17:a0:a9:22:
                    08:c1:c5:f1:93:ef:1a:ea:ad:83:52:44:24:95:61:
                    d9:ea:72:7c:11:e9:ad:14:5e:8d:09:ce:17:a4:9d:
                    36:0a:a1:0d:73:59:bb:3d:88:22:51:ca:f1:15:7a:
                    9a:86:9f:8a:a0:f4:78:f6:bb:d1:54:9f:9d:73:aa:
                    db:8d:e1:71:94:b0:d9:62:9e:05:fb:10:e7:85:3b:
                    73:e4:a0:82:97:77:14:12:ae:d5:f8:c4:bb:b5:28:
                    c5:52:17:b1:73:b4:45:25:39:0d:5d:23:bd:39:a6:
                    5a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:D6:A6:98:AB:A2:C1:AA:CF:59:F5:B3:B7:12:62:4D:B0:21:C0:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYJYRcRTkcNBiCDjA42NnSTg43npErW4hWBZkopiiCLY/0/C1D6A698ABA2C1AACF59F5B3B712624DB021C062.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.124.0/22
                IPv6:
                  2804:6824::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269671

    Signature Algorithm: sha256WithRSAEncryption
         4c:fe:1a:c5:76:1d:ae:bb:b4:a0:b7:7a:04:89:2b:01:58:fb:
         80:7e:9f:8f:5b:14:df:16:56:29:ee:4e:70:c8:fc:e4:84:e3:
         e4:25:b1:ce:d4:f3:c2:84:e6:2d:16:d1:be:da:ff:cc:4a:00:
         6c:c7:7e:07:76:53:55:60:f1:55:75:db:f2:da:c6:2a:45:e8:
         57:f4:9f:41:ed:f3:08:d8:33:c9:35:e5:b5:70:9a:46:10:b0:
         de:a3:f5:61:e3:36:e0:56:6e:a3:c2:d4:50:62:cd:6c:f2:7a:
         32:8c:c0:d2:e0:35:b7:89:82:76:f8:47:b1:ae:87:ff:42:eb:
         5b:2a:6c:ad:73:91:be:52:fe:06:dd:01:57:e2:b4:40:e4:fe:
         db:3d:95:8e:19:89:d4:29:9e:22:98:f6:82:a6:7f:e1:35:b7:
         bb:41:8f:33:52:27:3f:1a:62:a8:96:b7:1d:ef:ea:16:26:f7:
         4d:12:f9:fd:b0:a1:8a:cc:a4:d0:22:57:de:8e:e1:eb:39:10:
         31:16:36:3e:f2:6b:bf:12:40:ff:d2:1a:57:8e:88:e4:89:e4:
         dc:e6:34:a9:9c:b4:46:41:df:db:ab:30:11:a5:7d:08:ee:ad:
         9b:c0:f7:1e:56:02:24:17:a8:5e:e1:e4:e5:e8:4f:0b:45:e1:
         01:56:3e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org