Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D55348DC207C9D3F13901EEBAC689E1DA8FE24EE.cer
File:                     D55348DC207C9D3F13901EEBAC689E1DA8FE24EE.cer (raw, json)
Hash identifier:          VGhCX7VQ6AfEgvY/7npzPbyCtEexGStHj7dv9iQh9yg=
Subject key identifier:   D5:53:48:DC:20:7C:9D:3F:13:90:1E:EB:AC:68:9E:1D:A8:FE:24:EE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       22247BA1189B1E892D91790FF0EBD144264B5C71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/D55348DC207C9D3F13901EEBAC689E1DA8FE24EE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Sep 2023 13:59:39 +0000
Certificate not after:    Tue 17 Sep 2024 14:04:39 +0000
Subordinate resources:    AS: 271701
                          IP: 170.79.236.0/22
                          IP: 2804:7fa8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:24:7b:a1:18:9b:1e:89:2d:91:79:0f:f0:eb:d1:44:26:4b:5c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 19 13:59:39 2023 GMT
            Not After : Sep 17 14:04:39 2024 GMT
        Subject: CN=D55348DC207C9D3F13901EEBAC689E1DA8FE24EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:36:02:84:57:08:6b:b0:f3:d3:52:78:10:
                    31:4f:e0:fa:75:0f:00:1a:91:72:c5:78:99:01:1f:
                    e1:a6:23:aa:6d:a9:52:ef:92:02:7b:7f:c2:e6:f0:
                    f7:ed:e3:63:98:e1:99:74:09:2c:ba:69:bc:05:ac:
                    76:58:90:09:67:84:5f:25:4b:06:69:18:fe:33:9d:
                    be:ac:bf:cc:80:91:a0:fe:79:8e:98:ee:96:a3:9b:
                    7e:52:3d:67:70:f3:cf:34:37:08:c2:38:be:b3:3c:
                    38:72:42:bd:98:e2:5a:6b:e2:b6:a6:0f:21:08:b6:
                    c6:7a:e0:6f:be:f9:61:e8:3d:c1:bf:c7:25:48:6c:
                    5f:57:75:d2:25:d6:38:53:16:8f:88:6e:ba:fb:26:
                    44:c9:2e:81:76:54:f7:be:b8:70:8d:8c:84:43:e4:
                    f6:8a:ab:47:90:cd:39:25:66:fa:57:cd:06:e6:20:
                    2b:c6:bd:d5:91:2d:ac:f5:8f:49:b3:f1:69:d1:55:
                    60:49:5f:aa:83:3c:60:45:c6:ad:d1:13:21:ee:33:
                    ef:55:f7:aa:0f:7c:87:44:dd:3f:46:da:70:e7:4f:
                    17:8b:d4:de:97:89:30:12:66:65:90:e0:38:a9:12:
                    71:6a:23:c8:ee:91:a0:d4:ca:3c:53:60:de:7b:60:
                    95:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:53:48:DC:20:7C:9D:3F:13:90:1E:EB:AC:68:9E:1D:A8:FE:24:EE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4G93qXzMqBDptv6ncKFcUburHSoe1iH8C8SrnBXLDp2A/0/D55348DC207C9D3F13901EEBAC689E1DA8FE24EE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.236.0/22
                IPv6:
                  2804:7fa8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271701

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:21:ca:46:78:cd:01:e8:fe:15:ea:44:bd:57:ed:25:1a:
         93:0b:79:0a:e8:c4:39:bd:45:af:56:26:03:af:68:98:d8:8f:
         e9:33:d9:31:5e:15:21:5d:8e:81:82:39:83:d2:31:a4:17:1a:
         84:a5:b0:06:b0:8e:1d:a6:a0:ad:8a:6a:3c:41:03:fc:19:5f:
         c0:c9:21:48:b3:fb:16:5b:80:08:fa:c3:ae:cb:29:f2:94:71:
         b8:72:8a:f0:61:ca:e7:13:65:f1:05:0f:69:e3:60:b5:c9:4f:
         36:20:d8:a8:c4:60:8f:05:7c:a1:c2:dd:2a:60:fa:4e:3f:67:
         1f:9a:cb:2a:18:fb:39:f7:5d:01:87:05:46:66:ce:21:20:b4:
         7c:e8:6a:0f:09:c8:86:4b:cc:e3:9f:41:3a:fb:8d:2a:3c:38:
         b6:77:de:d6:72:99:a3:04:fc:3d:3f:99:51:ea:a8:ef:95:31:
         83:7d:e9:57:45:c9:dc:a7:3f:d5:7d:aa:77:f8:50:ad:4e:7f:
         71:18:09:0b:4e:5c:36:71:5f:86:25:3a:79:f2:a4:1f:5d:b6:
         d1:7d:38:64:41:24:e7:85:b2:94:c5:0a:36:27:10:e7:ed:78:
         99:d8:69:30:1e:ad:68:ba:7f:07:9b:8e:a6:95:9a:f4:08:69:
         d2:41:f1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org