Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0476A4AC6E7EE2EDFD721B16E56030CA227C76C8.cer
File:                     0476A4AC6E7EE2EDFD721B16E56030CA227C76C8.cer (raw, json)
Hash identifier:          LF9srYdrKQNSxBCEjeoNKTK+3gqBI4upeW7Ih8zX/H0=
Subject key identifier:   04:76:A4:AC:6E:7E:E2:ED:FD:72:1B:16:E5:60:30:CA:22:7C:76:C8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       78CD53C79F6FA9C5D343A0C9FF0A51DD0285E684
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/0476A4AC6E7EE2EDFD721B16E56030CA227C76C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Jul 2021 21:24:13 +0000
Certificate not after:    Thu 28 Jul 2022 21:29:13 +0000
Subordinate resources:    AS: 265135
                          IP: 143.255.20.0/22
                          IP: 2804:2b1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:cd:53:c7:9f:6f:a9:c5:d3:43:a0:c9:ff:0a:51:dd:02:85:e6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 29 21:24:13 2021 GMT
            Not After : Jul 28 21:29:13 2022 GMT
        Subject: CN=0476A4AC6E7EE2EDFD721B16E56030CA227C76C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:9f:c5:bd:8f:b7:99:7b:e9:c6:03:fc:5a:
                    d7:d4:01:1e:d6:7f:5c:83:ef:b7:e3:c3:2b:4c:a6:
                    5f:dc:56:2c:c3:f1:cc:3c:c8:1f:6a:16:fd:8f:74:
                    f7:f6:41:4c:51:ae:8a:06:af:09:26:90:c9:15:18:
                    bf:17:65:2f:71:2c:6a:8a:34:f6:40:50:ce:c4:93:
                    d1:9a:96:40:ae:d7:a6:2e:4a:0c:e1:a7:49:2d:ed:
                    9b:a4:1e:9a:03:ba:81:f5:6a:dd:69:b0:d2:3e:80:
                    7b:51:29:64:27:6f:a8:d4:14:12:16:9e:47:63:02:
                    6b:d5:cd:65:13:80:d6:77:b4:b1:53:db:64:df:5f:
                    35:7f:ec:bb:67:8e:a0:1e:23:8b:ab:18:81:53:0e:
                    b6:a1:7a:af:6f:bf:46:c0:91:8f:60:d6:80:44:06:
                    0a:a8:c7:fa:28:5d:0a:85:19:0f:18:37:61:30:64:
                    dd:76:e0:ac:ce:8c:df:85:6e:83:c4:83:c3:27:de:
                    6e:ed:d2:dc:a1:35:03:f0:d0:ae:df:fd:28:97:3c:
                    ee:47:92:af:7f:62:a9:f1:2f:20:32:d7:f6:23:7a:
                    5a:3a:cb:bf:2a:85:6f:54:38:a9:5b:10:96:3c:0e:
                    d2:a2:39:89:13:f4:e3:c2:01:d6:bd:46:2f:2b:46:
                    91:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:76:A4:AC:6E:7E:E2:ED:FD:72:1B:16:E5:60:30:CA:22:7C:76:C8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Cdjj9SkmYUVduuLSdf9QnSWpNdam3tBW6epb3Li2zhf/0/0476A4AC6E7EE2EDFD721B16E56030CA227C76C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.20.0/22
                IPv6:
                  2804:2b1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265135

    Signature Algorithm: sha256WithRSAEncryption
         02:a8:d3:27:31:24:f8:38:5b:63:af:6d:6b:c2:13:c7:64:d5:
         dd:21:30:33:f3:47:7b:7c:ee:63:99:42:cc:83:85:3b:95:af:
         39:d7:0b:26:4f:ff:5b:43:4c:91:81:18:7c:69:ac:c1:43:51:
         58:f4:39:75:94:33:97:16:02:6a:8c:4e:6d:14:6e:cb:10:5b:
         1f:b4:dc:99:db:b0:9a:83:fc:3c:52:83:97:21:f6:25:35:0d:
         eb:fc:e0:eb:71:de:cd:7b:31:63:bb:bc:76:c5:44:14:3d:72:
         88:a3:a1:62:09:f4:07:df:4c:f0:99:ed:f2:3a:d2:59:2a:c4:
         fb:77:58:cc:a2:7d:ca:05:f9:eb:23:3e:15:b2:62:35:3e:3d:
         51:86:e9:fa:9d:d3:54:61:cb:bd:2b:f2:a3:fe:ca:80:02:50:
         4f:54:2d:79:de:23:f8:59:b7:31:1f:34:5b:7c:f1:8d:b5:6b:
         ab:ea:af:c7:5b:d2:81:ec:16:8b:c3:8b:c1:28:9f:94:5d:b7:
         b1:fa:5f:71:0a:f2:4a:a5:27:7a:4d:83:93:b4:7b:de:51:4a:
         8e:9a:f2:a7:3c:41:5d:27:99:b7:0e:59:12:28:ac:87:59:db:
         50:5c:87:22:fa:50:a2:5f:11:35:0e:52:ef:3a:5f:68:87:7d:
         f3:e6:86:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org