Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C814F3C3BD099DB3172AB8FC4E3337706D0072FE.cer
File:                     C814F3C3BD099DB3172AB8FC4E3337706D0072FE.cer (raw, json)
Hash identifier:          Izg9Hc1TZ/3zMm8hUZqtpBPLHROiI6geaI/ntNp96b4=
Subject key identifier:   C8:14:F3:C3:BD:09:9D:B3:17:2A:B8:FC:4E:33:37:70:6D:00:72:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DB938CEA673ED182CDBABECDF0839BE983C11CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/C814F3C3BD099DB3172AB8FC4E3337706D0072FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 02:37:59 +0000
Certificate not after:    Thu 07 Nov 2024 02:42:59 +0000
Subordinate resources:    AS: 52600
                          IP: 177.137.112.0/21
                          IP: 2804:d1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b9:38:ce:a6:73:ed:18:2c:db:ab:ec:df:08:39:be:98:3c:11:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 02:37:59 2023 GMT
            Not After : Nov  7 02:42:59 2024 GMT
        Subject: CN=C814F3C3BD099DB3172AB8FC4E3337706D0072FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:19:dc:d4:85:59:7c:d4:c2:ce:ed:4a:7d:a0:
                    9a:53:e0:9f:5d:85:95:2b:92:70:fa:bd:ba:a8:3c:
                    48:25:56:7e:c4:8e:91:a0:42:ed:c0:66:b4:6c:70:
                    97:2b:16:43:dc:70:f6:f6:f1:54:d5:98:93:f9:13:
                    8e:6a:a7:29:01:33:e7:84:4a:02:22:dd:67:03:1f:
                    e0:b3:4e:11:18:a7:74:bb:b9:39:83:22:75:f9:4e:
                    c4:6a:38:af:27:e9:00:9c:06:04:49:35:aa:d8:22:
                    2b:42:83:45:cb:97:c5:92:8d:15:45:db:bc:93:0c:
                    c3:d7:fe:d7:75:e4:03:0e:3d:81:7e:c7:60:92:97:
                    74:de:11:2d:3f:e3:03:cc:8b:14:1b:b8:ec:96:87:
                    55:6f:3e:95:aa:db:3c:cd:de:d8:3c:ed:eb:87:64:
                    c9:20:0f:83:00:0d:f4:bf:f7:a7:3f:aa:ce:f9:eb:
                    23:70:6f:ee:74:b9:8f:90:3b:e4:79:58:92:3e:0f:
                    e7:b3:32:30:ef:1d:9b:34:2f:23:1b:42:59:87:67:
                    a7:f1:31:13:41:76:97:ca:48:b3:39:5b:f4:16:62:
                    1f:01:1d:24:8f:8f:cc:be:68:cf:07:97:d7:92:84:
                    bc:eb:22:96:b9:a8:ca:c7:1d:b8:07:c4:94:26:92:
                    a6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:14:F3:C3:BD:09:9D:B3:17:2A:B8:FC:4E:33:37:70:6D:00:72:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/C814F3C3BD099DB3172AB8FC4E3337706D0072FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.137.112.0/21
                IPv6:
                  2804:d1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52600

    Signature Algorithm: sha256WithRSAEncryption
         34:72:dc:aa:98:80:c2:7c:c7:c9:1d:3b:fd:7e:b5:07:5e:82:
         42:f3:95:d2:61:e8:55:4e:bf:f7:07:c1:9f:a4:0e:9d:8f:60:
         51:98:7a:a4:ef:79:e6:09:20:46:d2:cd:1b:de:2d:ea:eb:90:
         6c:71:e3:4d:a5:15:3d:17:6f:b4:bb:ec:05:e8:8d:32:ad:ac:
         95:7f:b4:35:0f:d6:7c:3f:c7:c5:ab:81:9b:88:18:a1:ce:59:
         8d:9b:0a:13:9c:76:60:5a:c8:8c:e0:8a:03:51:ce:dc:17:d5:
         95:bf:6e:c6:6e:7a:09:7d:1b:07:92:0c:c3:c6:06:be:ba:2b:
         88:2e:1a:56:da:10:00:08:35:fe:f3:1d:ab:aa:04:fd:fd:2c:
         49:ab:44:c0:cf:c1:20:22:33:e8:99:62:97:7b:e9:b3:51:d3:
         25:65:09:bb:1c:65:d3:6e:ae:3f:28:e6:7a:2a:cf:55:5d:8c:
         a8:a4:1f:23:99:ac:ad:d3:10:4d:d2:04:3c:19:d1:1e:7b:88:
         c4:3f:24:81:60:ce:b0:da:fe:64:89:5e:02:a3:b2:cb:9c:a8:
         45:cc:aa:f6:b3:96:32:8f:f2:cc:4f:dd:1d:c6:ca:06:2d:d5:
         61:93:fa:f8:fb:1f:35:fc:25:89:1e:81:79:43:26:2e:de:bf:
         68:23:64:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org