Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.cer
File:                     E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.cer (raw, json)
Hash identifier:          C8pco7h/nzG5NpjaH//+s8La/CH61ireLKEJIS/tKD8=
Subject key identifier:   E1:9F:77:69:60:3E:E2:CC:AE:5E:D5:90:F2:CE:B2:D8:B6:45:52:74
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       13C44EEDD59BA381803C885872EB1B892BAA2981
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 20:00:43 +0000
Certificate not after:    Tue 18 Jun 2024 20:05:43 +0000
Subordinate resources:    AS: 61748
                          IP: 131.100.52.0/22
                          IP: 168.181.192.0/22
                          IP: 170.245.96.0/22
                          IP: 2804:1bc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c4:4e:ed:d5:9b:a3:81:80:3c:88:58:72:eb:1b:89:2b:aa:29:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 20 20:00:43 2023 GMT
            Not After : Jun 18 20:05:43 2024 GMT
        Subject: CN=E19F7769603EE2CCAE5ED590F2CEB2D8B6455274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:32:44:71:04:dc:7e:dd:38:4c:29:f6:ec:
                    5e:4d:88:79:a6:25:79:79:5e:46:3f:3f:16:fe:8d:
                    16:3e:3e:2c:18:2d:47:40:78:62:dc:f1:19:1a:8c:
                    4a:b1:43:b2:da:1f:f6:01:17:b1:bc:ca:68:cc:3c:
                    3f:dd:c3:a4:0b:aa:90:9b:96:a1:52:c9:fd:21:b2:
                    8e:c4:69:bc:08:56:ba:14:24:96:52:c7:b0:0d:a5:
                    2e:ea:6c:05:0b:1d:9c:4e:0e:16:72:83:c7:d0:5f:
                    38:bc:9d:2a:92:0f:8b:2a:33:bb:70:8f:a5:1a:16:
                    4b:fb:db:ef:49:de:af:07:66:f2:9e:df:fd:f4:a3:
                    f2:95:96:5e:a8:6c:8a:c9:e6:d1:27:bb:49:c8:a6:
                    39:8f:16:40:81:9b:eb:7c:2c:54:aa:46:01:58:9d:
                    6f:9e:93:90:f7:d7:23:05:a2:10:45:9d:df:ff:2d:
                    6b:8e:bd:8b:79:9b:d4:55:38:df:ee:6b:48:21:54:
                    04:b5:68:a1:82:05:fc:1a:6a:b5:77:74:f7:b2:b9:
                    b3:73:0f:8d:ee:9d:cf:7c:09:43:f3:ea:72:ca:43:
                    50:a9:47:23:cf:27:38:f5:3f:b1:c7:30:9a:b6:8e:
                    f3:e5:bb:05:82:4e:0a:64:a1:91:f1:29:f5:c9:6f:
                    78:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E1:9F:77:69:60:3E:E2:CC:AE:5E:D5:90:F2:CE:B2:D8:B6:45:52:74
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/E19F7769603EE2CCAE5ED590F2CEB2D8B6455274.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.52.0/22
                  168.181.192.0/22
                  170.245.96.0/22
                IPv6:
                  2804:1bc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61748

    Signature Algorithm: sha256WithRSAEncryption
         30:3c:42:93:03:dc:06:97:7c:d4:4b:f2:21:56:55:f1:6b:15:
         b3:43:ee:79:f6:f6:d6:e2:b5:0c:ba:9b:81:e8:29:e9:c1:90:
         94:ed:a0:e8:df:32:7d:49:93:1d:d9:5d:ec:af:05:2f:97:2c:
         27:f3:e1:a8:77:27:50:a6:81:ea:c7:82:4a:ff:35:d8:84:06:
         f8:9b:50:d0:f7:9e:d8:fa:80:44:08:2d:80:0c:e0:29:1e:8e:
         cc:86:3a:03:ad:15:77:fd:6c:35:8f:92:32:14:ca:4d:c8:1b:
         e7:14:e3:db:dc:44:c4:a3:33:7d:3a:74:cb:c8:bb:e5:39:5b:
         58:e6:cc:21:f9:a3:25:71:96:e6:86:f8:dc:b4:55:d7:59:7a:
         f5:ba:fd:93:40:3b:c1:6a:34:a3:1c:e4:54:80:fb:63:ce:bd:
         f4:e8:1b:66:1f:6c:61:63:0c:5a:fd:a5:85:3a:f1:ac:c1:a2:
         36:c9:70:c3:e1:50:e8:59:88:ad:a5:e5:5c:1e:5d:30:60:eb:
         5b:1a:95:54:3f:58:aa:5e:5c:82:17:14:d4:8d:ef:06:6b:9e:
         0a:ce:93:22:0c:06:2f:f3:c3:0e:47:5b:66:c6:a2:77:2d:3f:
         50:df:7b:6d:d6:c2:65:7c:88:d6:4b:54:ed:18:0f:38:35:9d:
         2c:e6:bf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:17 2024 by rpki-client on console-ams.rpki-client.org