Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF931CC061BCD0E656DBAE8AD75F9A4E24825C22.cer
File:                     CF931CC061BCD0E656DBAE8AD75F9A4E24825C22.cer (raw, json)
Hash identifier:          qqnIIdbIl7IyZT+sXEiDX//GTvW49uJUuGUdnyHVpcg=
Subject key identifier:   CF:93:1C:C0:61:BC:D0:E6:56:DB:AE:8A:D7:5F:9A:4E:24:82:5C:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6801CF81472305F9EF8BE000F54B0383B42EADA0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/CF931CC061BCD0E656DBAE8AD75F9A4E24825C22.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 20:33:33 +0000
Certificate not after:    Mon 20 May 2024 20:38:33 +0000
Subordinate resources:    AS: 61858
                          IP: 201.148.180.0/22
                          IP: 2804:1a6c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:01:cf:81:47:23:05:f9:ef:8b:e0:00:f5:4b:03:83:b4:2e:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 22 20:33:33 2023 GMT
            Not After : May 20 20:38:33 2024 GMT
        Subject: CN=CF931CC061BCD0E656DBAE8AD75F9A4E24825C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:07:c3:9a:c2:e5:0a:d2:71:fa:68:4a:4e:9b:
                    21:4d:dc:66:de:8d:61:f6:f0:55:a6:2d:44:f9:fb:
                    f2:85:50:75:22:30:d7:80:18:c0:5e:a2:7e:80:11:
                    2d:1e:d0:b1:fb:06:9c:30:f7:b3:11:bf:6b:e7:1c:
                    00:48:fd:5f:6a:49:56:e7:c7:4d:3c:6d:49:b3:d6:
                    32:f9:4f:c7:d2:2b:c8:fc:35:5c:58:96:67:85:71:
                    dc:13:04:05:fe:fe:78:45:6d:17:c3:98:eb:a1:a4:
                    af:b7:a5:83:24:fb:e6:34:d7:5f:fa:0f:7b:18:16:
                    85:c2:ff:6e:d9:9d:ba:c5:fa:d7:93:cf:c1:7b:84:
                    3f:9e:f6:c0:7b:69:cb:a2:f5:50:db:8c:c2:fc:96:
                    18:24:69:97:7a:71:0e:68:b3:18:d5:a2:e9:3c:2e:
                    a9:46:dd:25:60:90:84:2c:90:e0:a8:b3:9e:61:d4:
                    05:1f:7b:50:f8:7d:82:e1:97:cb:69:62:e9:c7:bf:
                    9e:dc:85:93:10:71:1f:f3:29:d5:e6:15:1f:93:3f:
                    ce:ec:15:5f:9d:26:e4:6d:70:c2:ad:e7:cf:b5:45:
                    14:bb:ad:2b:2a:8d:82:8e:58:c4:1d:fb:7b:1b:36:
                    06:53:f0:6b:f8:b4:42:7f:68:e4:e2:06:7e:08:57:
                    28:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:93:1C:C0:61:BC:D0:E6:56:DB:AE:8A:D7:5F:9A:4E:24:82:5C:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6CSXeHwtgwBhyGBF8K4YHkuV5Px4uLkq5ocRorw5uDrB/0/CF931CC061BCD0E656DBAE8AD75F9A4E24825C22.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.180.0/22
                IPv6:
                  2804:1a6c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61858

    Signature Algorithm: sha256WithRSAEncryption
         7f:2d:4f:ee:29:d7:c7:9b:21:e6:2d:ca:a6:33:81:69:e6:3f:
         ef:ed:2c:c3:f4:71:43:ce:82:85:7d:da:8b:da:18:06:02:9f:
         c5:16:9a:cb:aa:ee:54:9e:d2:b5:cc:c4:7f:4d:c8:38:a6:28:
         9d:7c:45:20:cf:ee:a8:90:5f:45:06:92:af:3a:56:11:03:ce:
         e0:21:a1:69:e4:df:5a:9a:f7:fd:60:1f:79:dd:b8:24:06:04:
         41:e1:2d:ad:98:88:a0:48:b4:1f:e2:7d:b3:c6:1f:0e:72:2f:
         6f:c2:b8:37:b0:0f:ee:88:41:fe:68:1a:0b:d9:e8:4f:d9:da:
         ee:ec:bd:9a:38:0b:57:20:44:38:39:94:35:bc:5f:75:95:ba:
         36:b2:ef:ce:b6:6c:f8:9b:a2:50:86:7b:f6:d7:c4:9b:7d:76:
         10:5f:92:1d:1a:c5:6a:02:74:6e:23:36:c3:d2:bd:17:83:7b:
         3f:97:06:ca:67:75:9a:db:a1:ea:33:84:3b:b0:b2:3d:8c:81:
         0f:43:2a:f7:93:66:f1:a8:3c:d8:d1:0d:cc:75:3f:24:f9:5a:
         21:7a:0e:c4:8a:05:19:c7:8f:99:90:2d:31:c5:db:93:b8:80:
         15:e8:e3:cb:d7:9d:42:9c:dc:a7:dc:ce:ad:30:77:b9:65:64:
         ae:60:f0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org