Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D994586BFFE7BF1CF881DC6C506FD7A66CA476FE.cer
File:                     D994586BFFE7BF1CF881DC6C506FD7A66CA476FE.cer (raw, json)
Hash identifier:          DJLFl10yskkHIX3E7IauKhoGe8trcUyH4thpfRgn0EE=
Subject key identifier:   D9:94:58:6B:FF:E7:BF:1C:F8:81:DC:6C:50:6F:D7:A6:6C:A4:76:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18CBF89966FDC7A4EC2C5C511FAD0CAF48D70532
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/D994586BFFE7BF1CF881DC6C506FD7A66CA476FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 17:36:21 +0000
Certificate not after:    Mon 01 Apr 2024 17:41:21 +0000
Subordinate resources:    AS: 262828
                          IP: 177.155.192.0/21
                          IP: 186.251.96.0/21
                          IP: 2804:2a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cb:f8:99:66:fd:c7:a4:ec:2c:5c:51:1f:ad:0c:af:48:d7:05:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  3 17:36:21 2023 GMT
            Not After : Apr  1 17:41:21 2024 GMT
        Subject: CN=D994586BFFE7BF1CF881DC6C506FD7A66CA476FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:7b:9c:5e:02:1f:60:35:79:fe:a5:d3:82:
                    a0:a0:78:30:95:32:1c:6b:3e:12:c5:35:37:76:12:
                    ac:40:09:09:bb:9f:a6:68:c3:c1:fc:ec:60:f6:53:
                    69:81:00:1a:6a:ec:84:b4:df:3b:19:d8:b9:b6:7b:
                    aa:c3:48:00:f7:f5:92:a6:9f:c7:21:9e:7c:70:ec:
                    45:30:95:7b:01:a2:52:01:67:92:8f:8a:7e:55:9e:
                    f4:d2:7f:a9:93:9c:4a:e8:a8:ef:38:1b:b7:ed:41:
                    d6:ea:85:49:50:67:19:84:32:8b:83:d2:b0:12:1a:
                    94:51:57:fb:12:cd:c5:05:85:9b:5b:35:98:c1:57:
                    01:19:a3:96:78:2b:9f:92:db:e2:3f:92:3d:d4:4f:
                    b9:cf:bd:8b:6f:6c:e7:a4:47:15:4a:bc:1a:e3:56:
                    33:5c:b7:5c:10:57:58:8c:24:8f:06:71:fe:10:b5:
                    62:b3:c4:c8:84:ff:2d:57:ef:70:f3:05:a2:42:df:
                    f8:a0:8f:70:43:b8:0f:f7:3b:34:da:cf:8a:51:89:
                    d6:53:32:ba:da:46:73:14:5f:69:c7:05:8d:98:ab:
                    f9:1c:d6:b7:1c:2f:db:46:e7:0e:9e:19:be:bf:87:
                    46:b2:c5:47:3e:16:41:d1:78:c0:4d:6e:2e:44:de:
                    61:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D9:94:58:6B:FF:E7:BF:1C:F8:81:DC:6C:50:6F:D7:A6:6C:A4:76:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/D994586BFFE7BF1CF881DC6C506FD7A66CA476FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.155.192.0/21
                  186.251.96.0/21
                IPv6:
                  2804:2a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262828

    Signature Algorithm: sha256WithRSAEncryption
         00:d5:f4:68:95:e4:32:67:82:01:14:a8:0d:03:23:ba:6e:34:
         fe:ad:e3:99:35:69:ae:fe:b5:87:02:bd:3d:fc:29:88:26:b1:
         3b:bb:05:f6:56:f7:e4:32:a0:d9:b4:5d:a3:df:11:f4:4f:e5:
         b4:8c:3d:fd:42:29:1e:42:12:79:e4:d3:55:11:32:99:5c:3a:
         eb:32:19:af:74:ba:d4:59:6f:9c:60:55:a0:22:25:c8:34:1b:
         97:55:0a:0d:9b:1f:fe:25:02:62:c7:18:75:a0:10:5c:7d:c5:
         08:98:f9:36:89:21:b0:2e:fe:33:53:55:a0:15:b8:42:e9:e2:
         e6:36:bc:a5:3b:4d:56:e5:27:40:bd:a5:45:48:f6:ba:4c:01:
         51:cd:a6:ce:69:0d:2b:a5:f9:dd:29:4c:10:db:26:a7:17:4c:
         a0:2d:de:f7:78:90:bf:be:95:65:77:3b:d9:53:87:6c:fa:a9:
         94:60:62:82:df:54:fc:b0:a3:ed:23:7d:f4:9a:31:79:13:56:
         cf:af:9c:aa:86:b3:c2:8b:3b:73:7e:ce:82:74:55:3c:29:d1:
         9a:0e:2c:bf:64:8d:c9:e3:e0:34:13:d8:7e:c2:65:73:69:11:
         15:02:2c:a3:ce:f0:92:5b:ef:a9:ab:16:20:4b:0c:c7:c7:aa:
         e5:d7:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org