Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer
File:                     01C304D9502E07BC158E0FD422EC26BDE9EC8651.cer (raw, json)
Hash identifier:          gJ4AQZCCdPPFPEi6t5OMDLHVqElL0llxDAS75ha6NOg=
Subject key identifier:   01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2D99AFA168FCAE13EEFA916EC13BAC5F405AD5CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Oct 2021 14:21:21 +0000
Certificate not after:    Mon 17 Oct 2022 14:26:21 +0000
Subordinate resources:    AS: 268518
                          IP: 45.162.128.0/22
                          IP: 2804:5270::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:99:af:a1:68:fc:ae:13:ee:fa:91:6e:c1:3b:ac:5f:40:5a:d5:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 18 14:21:21 2021 GMT
            Not After : Oct 17 14:26:21 2022 GMT
        Subject: CN=01C304D9502E07BC158E0FD422EC26BDE9EC8651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:5f:13:3d:d9:53:bb:22:6b:d2:c4:2f:e2:
                    ef:ab:50:5b:28:1a:46:7a:bc:be:6f:08:e1:a1:71:
                    5f:c9:ba:7d:44:91:87:f9:b2:86:cb:16:78:29:7d:
                    19:ba:e1:40:0d:29:0e:ad:44:a6:b0:15:60:ff:b6:
                    2d:8f:fb:7b:ce:21:4a:18:fe:9e:d0:df:e8:8a:bd:
                    e2:84:8c:8d:72:5d:49:e7:02:d6:56:41:b5:de:03:
                    b4:e6:b8:6f:6e:a0:80:66:d7:d3:b3:8a:8f:a2:2c:
                    54:4e:4e:5b:aa:a8:fa:34:21:4c:28:f4:83:f7:b4:
                    2c:6b:20:c2:1b:0b:37:29:6d:2a:d3:f4:f1:15:fe:
                    c6:ec:f3:93:8a:34:bb:58:ae:7c:8a:d0:b4:bc:37:
                    3c:cc:41:5d:3b:d7:67:83:0f:c9:57:dc:b3:4b:a9:
                    85:14:a5:7c:c8:1d:27:a0:6e:10:ea:3a:b9:94:66:
                    30:ea:bc:61:79:6c:aa:c0:4f:5a:4b:ce:8b:86:70:
                    77:51:5b:ea:77:41:f8:5d:47:69:18:46:d6:9d:0c:
                    02:95:67:ef:4d:07:57:67:58:df:67:43:d4:67:0c:
                    a0:15:b6:ef:67:c5:94:4d:91:d5:37:36:63:33:6a:
                    03:b5:fa:6e:c1:90:1f:31:1a:9d:17:15:0e:73:74:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                01:C3:04:D9:50:2E:07:BC:15:8E:0F:D4:22:EC:26:BD:E9:EC:86:51
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/0/01C304D9502E07BC158E0FD422EC26BDE9EC8651.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.128.0/22
                IPv6:
                  2804:5270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268518

    Signature Algorithm: sha256WithRSAEncryption
         77:bc:ea:5b:3c:ac:b0:b0:df:08:d5:ee:b6:ca:4a:88:2a:66:
         e9:3e:6b:56:6a:da:ed:2c:29:86:c7:d8:5f:0c:ec:9e:38:04:
         7c:8d:6d:b1:3c:8a:5c:74:59:30:90:88:55:5d:f4:e8:6b:e5:
         a4:7d:4b:6e:69:be:28:f9:86:f8:53:6f:a3:b2:3e:84:da:f0:
         e5:80:3d:92:84:da:cc:0a:7e:de:53:d1:6b:b3:a6:6b:de:2d:
         2d:ef:b4:de:54:42:68:e5:19:cb:ec:fe:76:8e:8f:d9:3b:9d:
         42:fe:d2:c7:9e:78:27:f9:84:0a:65:5b:51:2a:98:36:b9:d1:
         6e:18:8d:59:3e:69:81:31:10:f7:fd:46:f8:d8:f8:d6:c3:6e:
         73:00:5d:35:df:31:bf:56:1c:1e:ca:fe:a8:9a:54:f1:c3:94:
         f8:ed:bf:76:24:69:b6:8d:86:95:5d:fe:b8:b4:9f:d8:bd:86:
         6e:da:fc:3a:64:d8:70:6f:64:a2:37:a3:fe:30:e9:0f:3a:cd:
         96:20:3d:96:94:33:83:65:ce:cc:62:b5:61:e7:99:32:1b:e8:
         2c:00:f7:f6:06:f0:27:3c:6e:0c:a6:89:8a:ff:d0:c5:ec:80:
         c8:89:8b:1b:fd:15:fb:8e:3b:d0:45:30:ed:03:8f:a6:d1:b3:
         50:9d:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org