Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.cer
File:                     D8F49F3218C4D5667C4F19919B730D15A529FFDA.cer (raw, json)
Hash identifier:          /niQWdrWV4dUDnYz1Ww4Enx5QRuxMxCSV7c89xoUjNs=
Subject key identifier:   D8:F4:9F:32:18:C4:D5:66:7C:4F:19:91:9B:73:0D:15:A5:29:FF:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       17BC8B79A8F0535AD1ED9D390AE01A5CBF4131F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 07:01:49 +0000
Certificate not after:    Tue 03 Dec 2024 07:06:49 +0000
Subordinate resources:    AS: 270841
                          IP: 179.43.12.0/24
                          IP: 2804:723c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bc:8b:79:a8:f0:53:5a:d1:ed:9d:39:0a:e0:1a:5c:bf:41:31:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 07:01:49 2023 GMT
            Not After : Dec  3 07:06:49 2024 GMT
        Subject: CN=D8F49F3218C4D5667C4F19919B730D15A529FFDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:44:1d:5a:40:d6:77:01:c7:cb:4d:ed:31:
                    18:71:10:c3:0c:8e:fb:7e:87:ef:19:7c:8c:ec:0b:
                    13:b1:9a:23:d7:19:27:d7:78:35:f2:1a:66:38:33:
                    88:be:01:dc:6b:b6:13:05:87:50:06:48:25:57:52:
                    59:c5:a6:4c:4d:87:c5:3b:ff:aa:f9:eb:d6:6c:4c:
                    dc:df:f8:2f:c1:ff:a2:96:60:53:9b:42:35:e9:eb:
                    7d:cf:be:88:df:e0:bc:e6:d5:0f:36:ec:ae:a6:bf:
                    4f:ca:43:ed:a6:39:6d:71:3a:49:19:75:f0:be:58:
                    39:e9:cf:55:c8:f6:67:ab:69:e9:9a:24:30:7e:01:
                    ab:72:50:bf:4e:0e:5d:85:21:b4:ff:db:3c:d2:f3:
                    b2:6e:ec:ad:d7:cf:f2:b5:63:df:fc:d8:88:45:45:
                    b8:e1:15:f9:b6:f4:da:43:14:26:06:2c:51:4f:a3:
                    9a:55:86:99:9b:25:3d:16:3b:0a:6a:ae:5b:56:e1:
                    f8:d8:9d:55:f9:06:44:ee:98:4e:c6:d4:ad:1c:16:
                    ea:bb:64:70:69:2d:c9:61:81:46:e3:ca:8b:4a:19:
                    21:3c:f5:7f:c1:5c:25:ee:30:91:cd:0e:65:81:7b:
                    2a:a2:18:98:56:ab:ae:f7:d8:4c:f5:d0:ca:d9:53:
                    c5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:F4:9F:32:18:C4:D5:66:7C:4F:19:91:9B:73:0D:15:A5:29:FF:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5GYgLBHiiKr9vYiRx2GUhnVeY5Nc7VaGycEzqwEQhgF/0/D8F49F3218C4D5667C4F19919B730D15A529FFDA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.12.0/24
                IPv6:
                  2804:723c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270841

    Signature Algorithm: sha256WithRSAEncryption
         7e:18:44:42:71:c4:bc:6f:06:4f:e8:ac:ff:6c:41:be:0a:9a:
         92:46:36:b3:1a:52:2f:d5:7f:4b:17:66:16:75:b1:98:db:3d:
         d8:0f:96:63:5a:53:ff:f4:e9:e6:46:cc:8d:8b:a5:a4:5a:d9:
         4d:22:1f:92:f6:cb:6f:5d:2a:5b:c6:c0:b9:28:66:93:25:03:
         cd:81:03:28:a0:dc:cc:06:64:05:f6:bd:63:47:28:7a:be:86:
         de:0a:81:11:7d:62:b6:72:52:f6:f1:7a:e1:80:c3:54:7e:80:
         2e:e0:3e:0d:cc:27:2e:0d:65:3d:15:dd:1b:53:9f:1c:15:b8:
         33:04:17:4c:db:34:39:f7:a9:86:df:4d:a3:62:e1:bc:a6:34:
         af:ed:88:00:b6:5b:60:49:3d:04:98:3c:9b:80:da:ab:73:ae:
         c3:21:b4:62:2e:5c:5f:70:09:03:87:33:10:6e:0a:ad:3a:6d:
         d7:a9:53:f7:20:20:87:7e:ea:35:52:56:c0:c1:a8:82:25:be:
         1c:50:26:5b:58:63:24:4a:8e:c5:7a:8d:d0:f5:10:62:58:74:
         6f:a8:4a:af:8f:26:59:1b:3d:31:13:cc:75:f1:e1:6c:52:a9:
         52:06:45:08:a7:a6:4a:3b:18:9f:17:ae:eb:01:e8:31:31:68:
         a3:69:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org