Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D0F5CFED47B5D992A24E45C4DA19047052992A15.cer
File:                     D0F5CFED47B5D992A24E45C4DA19047052992A15.cer (raw, json)
Hash identifier:          YXBlbXdUGeVrxAX/0wuAes63MdLvNgfFUCvwyczjkwk=
Subject key identifier:   D0:F5:CF:ED:47:B5:D9:92:A2:4E:45:C4:DA:19:04:70:52:99:2A:15
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       052D1D1BE6A1C824CA3A24265972ED8BABE8865F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/D0F5CFED47B5D992A24E45C4DA19047052992A15.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 20:14:23 +0000
Certificate not after:    Wed 02 Apr 2025 20:19:23 +0000
Subordinate resources:    AS: 53055
                          IP: 177.234.144.0/20
                          IP: 186.227.192.0/20
                          IP: 187.45.176.0/20
                          IP: 2804:9c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2d:1d:1b:e6:a1:c8:24:ca:3a:24:26:59:72:ed:8b:ab:e8:86:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 20:14:23 2024 GMT
            Not After : Apr  2 20:19:23 2025 GMT
        Subject: CN=D0F5CFED47B5D992A24E45C4DA19047052992A15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:14:ac:85:c3:5c:ef:b5:9a:c8:1c:55:9b:
                    d6:81:a0:95:5c:91:5c:ec:03:22:a6:38:cf:c2:ee:
                    29:01:e6:55:1c:93:6b:05:ce:78:7b:97:1a:ca:e7:
                    63:89:d6:00:91:9e:97:f6:76:40:da:18:1a:2c:e1:
                    0b:68:2b:7c:8f:ff:63:55:90:30:28:27:2c:ee:0b:
                    b8:f4:fa:a1:f8:75:84:3e:2d:ff:83:49:21:05:de:
                    f9:ac:8b:62:29:ad:b6:33:f2:6e:64:72:18:70:c3:
                    ac:5f:e2:2a:bd:df:fa:a2:1b:ac:3a:61:10:89:c8:
                    02:90:7a:8e:c8:1d:1e:70:d0:24:4f:d0:51:fe:89:
                    58:15:f4:1e:39:17:9c:f8:df:cf:73:ce:cf:80:44:
                    bc:45:ff:c6:b4:25:43:af:14:ba:47:d8:1f:0b:3e:
                    73:dd:74:8e:40:40:ce:ba:64:2a:0a:b5:c2:07:df:
                    74:2a:60:32:d1:11:e2:60:56:56:e9:93:62:23:f4:
                    f1:25:c5:8c:a3:7a:64:f4:b5:e2:44:39:6d:ea:56:
                    c6:e1:c2:29:49:ad:65:a7:91:7e:82:e6:db:eb:99:
                    48:82:88:2b:2c:47:a8:e3:91:94:ab:06:8d:63:a3:
                    41:1e:0d:e7:f0:fc:9c:d6:ef:48:d7:79:e5:e5:4c:
                    16:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:F5:CF:ED:47:B5:D9:92:A2:4E:45:C4:DA:19:04:70:52:99:2A:15
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GmV8cCqkz49eAhGhEgPBaavxCW2ZDgEiEZzfZmuJPCWL/3/D0F5CFED47B5D992A24E45C4DA19047052992A15.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.144.0/20
                  186.227.192.0/20
                  187.45.176.0/20
                IPv6:
                  2804:9c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53055

    Signature Algorithm: sha256WithRSAEncryption
         a4:54:f9:74:d0:87:c5:34:65:77:35:fd:00:56:ba:8d:8b:fd:
         0c:0e:d8:d3:33:52:77:c9:b4:5d:c8:eb:97:56:74:6e:1e:f3:
         b7:3e:ea:dc:c1:d3:60:af:be:7a:af:aa:4f:e4:1e:9f:7a:b3:
         c9:f4:c3:f1:7a:31:3c:22:da:e3:d5:c6:e1:df:d8:34:1a:2f:
         c5:7a:1c:0b:db:2a:59:e6:81:0c:46:c8:e1:60:c6:f1:55:b9:
         ac:32:41:1f:c4:7c:af:81:fc:3b:7e:fa:9f:c1:e6:46:69:49:
         5d:dc:3e:0f:8c:11:50:5c:12:f8:3c:14:1e:cb:5f:77:84:0e:
         28:b4:fd:d3:84:36:16:fd:c6:ed:66:f6:f8:d1:02:7f:43:7e:
         e6:f4:51:c6:4c:4d:e0:eb:a6:2f:3d:d0:4d:e4:7d:44:a8:39:
         c2:82:9a:d6:ed:ab:92:4f:1d:26:a4:a6:d7:34:cc:fc:9d:f5:
         fe:57:d5:1b:c8:6f:e7:34:1b:ee:1d:12:99:66:df:73:f7:e8:
         b1:72:05:89:6a:be:62:df:bb:4c:b0:e4:67:5b:5f:f5:d8:15:
         9b:65:f7:b3:ae:b7:38:73:d0:93:a3:1f:f2:6f:51:47:f1:f7:
         20:7c:3f:bf:d3:b7:0b:2c:02:3c:59:ef:89:b4:62:cd:19:d0:
         62:4e:0e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org