Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CD2876FE25D1172BDF72E8EC902B7BBF8F561B93.cer
File:                     CD2876FE25D1172BDF72E8EC902B7BBF8F561B93.cer (raw, json)
Hash identifier:          JDbMouwvlMJ3CbZvZAb8qfNCsx79CGaFuTKWmDV+gpI=
Subject key identifier:   CD:28:76:FE:25:D1:17:2B:DF:72:E8:EC:90:2B:7B:BF:8F:56:1B:93
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       76FAE259CBF5DF14AC1B0B5D5035FD25CD2FEA84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/CD2876FE25D1172BDF72E8EC902B7BBF8F561B93.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 02:25:46 +0000
Certificate not after:    Thu 30 Jan 2025 02:30:46 +0000
Subordinate resources:    AS: 267479
                          IP: 192.141.200.0/22
                          IP: 2804:4220::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:fa:e2:59:cb:f5:df:14:ac:1b:0b:5d:50:35:fd:25:cd:2f:ea:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 02:25:46 2024 GMT
            Not After : Jan 30 02:30:46 2025 GMT
        Subject: CN=CD2876FE25D1172BDF72E8EC902B7BBF8F561B93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:a7:f7:0f:3a:a4:0a:ca:a9:f9:60:eb:f2:
                    c3:ee:b0:e8:2c:83:28:a8:91:1d:af:74:25:0d:11:
                    43:50:ce:46:88:30:7d:f3:21:f0:d3:b1:06:e6:0b:
                    cb:39:8b:9b:24:c8:9d:63:63:b2:e4:b0:ca:16:c1:
                    50:9e:09:fe:97:47:f4:16:42:08:15:a9:9f:e3:6d:
                    28:1d:0c:8b:4f:5d:16:d4:df:90:78:e0:23:8a:6e:
                    65:54:1f:d1:72:83:e0:3d:72:ec:70:9d:b4:39:fb:
                    f0:8f:2e:2a:7f:e8:ef:b7:54:e8:09:68:b5:7c:bf:
                    ac:9d:fd:a1:02:c3:24:50:e8:41:fd:4c:95:00:1e:
                    af:eb:bf:11:19:93:b1:43:17:b2:ae:22:26:97:ed:
                    0e:fb:70:2b:6b:a2:d5:c9:e6:83:8f:7e:17:66:89:
                    5a:1b:1a:2e:6a:e0:58:34:b2:ac:96:fe:a2:17:ac:
                    c6:20:11:90:17:50:0d:81:4a:6c:3a:d0:31:f2:14:
                    7f:8c:c8:19:70:4f:50:91:22:73:c9:ba:58:ea:5c:
                    a1:b8:00:16:15:d2:b9:d1:48:e2:fa:0b:94:d1:74:
                    00:fc:b0:09:ce:5e:d9:56:47:cf:ff:ba:04:c7:4a:
                    4c:8a:71:c5:39:6a:7d:ce:df:c7:d3:cb:fd:f2:1b:
                    28:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:28:76:FE:25:D1:17:2B:DF:72:E8:EC:90:2B:7B:BF:8F:56:1B:93
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CQ6LwpSyfpXdSUmE9iShCeAi7ZCKdPDJ4LgDHa9zwAPV/0/CD2876FE25D1172BDF72E8EC902B7BBF8F561B93.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.200.0/22
                IPv6:
                  2804:4220::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267479

    Signature Algorithm: sha256WithRSAEncryption
         65:c7:87:e5:ba:d2:ba:f4:6c:87:ea:28:fc:24:d3:ab:82:c5:
         bd:56:42:1f:6c:5c:77:aa:b4:2e:b2:23:67:c6:ec:03:c6:ed:
         44:7e:0e:32:23:ce:e4:0d:df:03:e2:57:2e:4a:a6:47:b7:94:
         47:52:1b:54:57:eb:6d:85:a9:9f:c7:56:aa:bf:97:2b:03:fa:
         cc:5f:1e:fc:35:12:e3:79:cd:3e:e7:be:67:96:d2:50:69:71:
         12:7a:b1:74:ca:66:9f:db:e8:f6:0d:5a:e5:84:22:b1:e9:6b:
         5f:57:61:ea:5c:96:33:48:22:a0:00:ac:7b:04:40:43:00:75:
         a1:22:fd:69:7d:7c:dc:c8:cc:f3:0d:b6:bf:34:8d:ef:15:d0:
         6a:8e:72:cb:5a:33:05:d2:ef:84:58:95:8c:c1:b6:6d:96:03:
         ba:2b:7b:8a:1f:0d:6e:98:59:48:cf:df:7b:be:18:79:90:4f:
         b4:cd:b7:cc:2e:f4:bd:0c:02:ed:ac:2c:7c:e4:b5:61:09:16:
         ab:2e:c7:e4:5a:63:b4:ab:92:8d:5f:6c:05:64:86:b3:e7:3d:
         a2:f2:7e:7d:cf:1c:b5:1c:0c:46:17:0f:ce:a4:a6:ea:0e:50:
         74:14:84:81:59:3c:9e:88:19:ab:a4:50:1e:35:ac:16:49:fe:
         7e:23:52:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org