Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D84B8042C288726B775992D3C09AAC3ADF474AF7.cer
File:                     D84B8042C288726B775992D3C09AAC3ADF474AF7.cer (raw, json)
Hash identifier:          e8IGoJF/C5rvi2veAjcbredUHg+HLCugUNzrCKfvVTM=
Subject key identifier:   D8:4B:80:42:C2:88:72:6B:77:59:92:D3:C0:9A:AC:3A:DF:47:4A:F7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59A43DE3FBF982B4091CCAB293AB9B6AE44A7BC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/1/D84B8042C288726B775992D3C09AAC3ADF474AF7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 19 Aug 2023 18:57:15 +0000
Certificate not after:    Sat 17 Aug 2024 19:02:15 +0000
Subordinate resources:    AS: 61604
                          IP: 201.131.98.0/23
                          IP: 2804:7754::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:a4:3d:e3:fb:f9:82:b4:09:1c:ca:b2:93:ab:9b:6a:e4:4a:7b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 19 18:57:15 2023 GMT
            Not After : Aug 17 19:02:15 2024 GMT
        Subject: CN=D84B8042C288726B775992D3C09AAC3ADF474AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:44:5b:e5:1c:a3:ed:08:a6:79:45:d9:38:71:
                    c9:95:9d:78:b8:c0:23:b3:9f:3a:93:1d:fb:de:73:
                    e6:c3:39:5e:76:47:08:fa:21:b9:d4:3d:3c:ea:c6:
                    d1:88:6a:67:0e:20:ea:b7:31:7f:52:ef:e9:d4:65:
                    4d:5d:43:cb:b5:ed:81:d6:eb:76:29:49:7c:ba:02:
                    5b:6d:24:30:61:e0:47:bb:94:91:52:7d:2d:57:f6:
                    26:58:e3:2a:54:7c:07:54:d1:1a:06:31:cb:6c:f2:
                    f1:7e:38:a0:9e:e3:b1:23:4f:10:17:4a:90:f6:e6:
                    42:d5:5a:5d:48:bc:da:1f:1d:d5:57:c9:a8:cb:a2:
                    8a:5b:80:70:77:7d:60:7c:1b:77:77:f4:05:2f:08:
                    51:23:99:db:bc:18:25:0f:94:6c:f4:34:ff:fa:6d:
                    f1:32:65:0b:93:a0:5d:95:2e:4a:0f:57:2a:e5:c3:
                    f4:b0:38:7e:b8:18:f3:0c:db:15:92:d6:48:c5:d8:
                    47:46:88:a7:be:fe:57:11:0b:82:97:ce:8e:e8:df:
                    bd:a3:72:8f:80:64:a1:8f:d1:49:77:9b:13:5e:e8:
                    59:5c:08:29:cd:60:99:98:15:0a:5a:a1:de:ef:a4:
                    24:d3:6f:74:eb:a2:aa:99:6d:39:49:c8:42:54:7c:
                    da:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:4B:80:42:C2:88:72:6B:77:59:92:D3:C0:9A:AC:3A:DF:47:4A:F7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/1/D84B8042C288726B775992D3C09AAC3ADF474AF7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.98.0/23
                IPv6:
                  2804:7754::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61604

    Signature Algorithm: sha256WithRSAEncryption
         32:d7:4a:94:d4:92:58:cd:c1:37:10:66:65:94:72:c9:1e:63:
         cc:0d:f0:e6:9d:6e:61:08:9b:3b:ba:a4:b0:0b:4a:00:5a:3d:
         48:9d:ce:68:b0:bc:3d:2b:81:74:20:db:2b:86:a4:c4:76:fe:
         bf:50:d2:47:be:4f:ae:b4:3c:12:aa:8d:1b:48:2d:be:82:82:
         92:1d:ef:bf:68:b7:46:c2:49:a1:a3:c4:fc:a5:ab:00:9a:12:
         20:1d:99:bb:6c:58:af:8d:b3:46:4c:ad:e9:fa:cd:8e:36:aa:
         f1:a7:b5:c3:3b:fd:fd:5c:62:a3:c2:eb:9a:89:5e:5c:8a:d6:
         a9:2d:9b:44:48:1a:5a:05:eb:4c:fe:d4:78:22:77:d7:24:5a:
         45:b0:09:db:86:a1:39:e3:b6:ca:07:d3:94:80:11:2b:6c:67:
         1c:1c:5a:ae:b2:ca:56:56:fd:97:a8:28:63:80:e3:05:5e:bd:
         05:af:69:e8:fd:4c:62:97:bc:ec:b6:a7:f1:47:45:20:c0:75:
         88:72:1e:6f:ab:fd:0d:7d:f8:07:91:24:f1:2a:c8:3a:02:84:
         14:35:b6:7a:df:5a:cb:af:2a:b7:91:af:e6:62:04:23:5a:10:
         cf:7c:e4:52:72:fc:42:b4:72:ce:7d:5e:d0:d9:f9:8b:22:20:
         2e:e5:38:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org