Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D1804B5355470F8216604F6E202D86BB8221A77F.cer
File:                     D1804B5355470F8216604F6E202D86BB8221A77F.cer (raw, json)
Hash identifier:          1sTchIk9Dxr4r4Szenjyk3pYWe2znfIJfgEzWMoxBy4=
Subject key identifier:   D1:80:4B:53:55:47:0F:82:16:60:4F:6E:20:2D:86:BB:82:21:A7:7F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B61C13D97215A45EF9110133E4BA472C1A959DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/0/D1804B5355470F8216604F6E202D86BB8221A77F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 23:16:11 +0000
Certificate not after:    Thu 18 Jul 2024 23:21:11 +0000
Subordinate resources:    AS: 270708
                          IP: 189.127.160.0/22
                          IP: 2804:7024::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:61:c1:3d:97:21:5a:45:ef:91:10:13:3e:4b:a4:72:c1:a9:59:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 23:16:11 2023 GMT
            Not After : Jul 18 23:21:11 2024 GMT
        Subject: CN=D1804B5355470F8216604F6E202D86BB8221A77F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:07:72:e1:52:22:96:b8:a2:67:e0:9b:51:
                    9a:f6:14:a2:18:21:ee:76:56:bc:be:b6:94:cb:cd:
                    b9:5b:6c:fc:a2:40:48:d3:5d:00:1a:31:46:e5:a3:
                    3e:bb:94:2d:a0:1f:65:ab:99:22:77:92:3c:19:6a:
                    9a:bd:75:0b:c2:89:aa:4e:13:dc:67:0f:74:df:76:
                    9c:19:a0:67:46:c1:78:4b:64:d5:0f:9d:38:94:35:
                    c5:5d:63:e0:27:8b:ae:d8:3e:87:16:a0:cc:e0:3b:
                    5e:7a:b4:ee:44:7c:a4:59:1e:71:23:fc:e9:37:03:
                    68:53:39:b6:1f:e0:2f:ec:a6:18:99:f8:88:4d:bd:
                    e1:2e:2b:6b:c0:99:31:00:9a:46:1d:b2:eb:bd:b3:
                    7b:db:ef:7b:fe:7a:46:b6:dd:9b:df:57:a2:c9:f4:
                    c3:70:2a:a4:af:b8:70:7e:29:03:08:67:98:f3:cf:
                    01:6e:bf:3f:b0:ee:e3:34:2f:4e:8d:d7:05:73:be:
                    bd:6a:43:83:93:e4:e8:7e:06:75:47:ba:b2:46:0b:
                    90:c6:6e:5c:25:57:36:1a:a2:38:7a:fe:14:0d:23:
                    cb:a6:f6:b1:5f:96:0d:8c:d0:83:1d:59:dd:39:c8:
                    9d:38:34:2c:63:6d:67:c5:46:a8:e9:ec:ab:60:66:
                    fc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:80:4B:53:55:47:0F:82:16:60:4F:6E:20:2D:86:BB:82:21:A7:7F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ASqXDW4ngc6P5toqAzrnt63GRDbuhcDVPZn1yP1eSVXF/0/D1804B5355470F8216604F6E202D86BB8221A77F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.160.0/22
                IPv6:
                  2804:7024::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270708

    Signature Algorithm: sha256WithRSAEncryption
         0a:4b:19:0c:b7:e2:9a:a2:f9:57:62:b6:6b:67:fb:87:49:ae:
         5c:f7:33:b3:4c:5e:d5:50:35:7a:c1:95:30:6d:9d:f6:df:6a:
         67:22:2e:3b:b0:e6:fb:7e:24:25:0e:ee:27:3f:c4:cf:98:af:
         83:99:71:1b:8a:de:52:da:45:61:36:73:c4:f4:ec:6f:d2:a6:
         f2:b4:55:f7:e5:c9:a3:07:07:81:7e:a7:2e:48:42:1a:2d:45:
         f4:81:7f:37:61:d6:99:27:8f:cf:d6:77:dc:9b:7b:e3:79:db:
         68:e6:c8:e6:2f:23:73:58:09:a4:21:db:e9:c6:24:4d:f0:ce:
         6a:f2:23:b1:1c:1b:4f:8d:a2:90:f3:d5:af:a2:fe:98:60:5a:
         0f:b9:48:2b:fd:71:c8:08:a5:32:56:96:3f:e8:18:47:67:da:
         ac:68:a8:28:fe:b0:ac:32:05:27:fe:c2:50:6b:93:99:5d:51:
         65:2b:7e:ad:9e:50:d2:39:4e:08:3c:f6:cf:14:fd:0e:fa:31:
         dd:d1:1d:02:12:02:be:9e:22:c2:5d:ed:51:9a:c2:89:e7:e8:
         b8:7a:a7:f0:ec:fe:e4:95:09:b6:0f:85:4e:7a:64:c7:5c:90:
         76:84:7a:de:d8:29:b6:32:a3:5d:5e:c1:e8:8e:ba:93:6d:43:
         dd:b7:c4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org