Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/052CB6BAADACF0A7AC98360EA3C81CD72B04569F.cer
File:                     052CB6BAADACF0A7AC98360EA3C81CD72B04569F.cer (raw, json)
Hash identifier:          lShYof1kH5O1QbZuhDF7vEpxwHnl7S3wHrB2sFP9VrA=
Subject key identifier:   05:2C:B6:BA:AD:AC:F0:A7:AC:98:36:0E:A3:C8:1C:D7:2B:04:56:9F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10F4B5E045A2985C57D9E55EF7E30E9863B44BDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/052CB6BAADACF0A7AC98360EA3C81CD72B04569F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Jul 2022 19:42:42 +0000
Certificate not after:    Fri 21 Jul 2023 19:47:42 +0000
Subordinate resources:    AS: 28270
                          IP: 177.130.192.0/19
                          IP: 187.18.128.0/17
                          IP: 189.45.64.0/18
                          IP: 2804:880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f4:b5:e0:45:a2:98:5c:57:d9:e5:5e:f7:e3:0e:98:63:b4:4b:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 22 19:42:42 2022 GMT
            Not After : Jul 21 19:47:42 2023 GMT
        Subject: CN=052CB6BAADACF0A7AC98360EA3C81CD72B04569F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e9:ac:35:9c:1d:d1:87:ac:88:83:8e:1a:b3:
                    2f:20:4c:c4:e0:df:38:ad:8c:6d:61:39:87:78:e4:
                    61:ac:66:b8:32:f8:87:71:8d:7e:ca:a8:f4:d2:26:
                    2d:5c:d6:15:31:05:fa:11:8d:2d:1a:3e:12:41:f4:
                    42:c4:4a:52:b1:0a:d4:c0:9c:1b:dd:36:33:45:b8:
                    ed:b8:51:5c:69:c2:3f:e8:e2:d2:cc:f9:d8:9f:ea:
                    d8:ac:41:3f:2b:87:9c:63:5d:39:85:0c:9f:17:74:
                    e4:df:af:3d:58:ca:56:c1:b3:c9:c2:dc:29:e8:0a:
                    00:75:06:f8:f4:4c:ba:32:ba:8c:8b:84:61:c5:20:
                    21:f4:1f:00:6c:0c:66:da:05:83:5e:bc:6c:6a:a2:
                    ec:23:d5:7d:e6:f2:14:f1:2d:c3:d8:6e:8c:61:97:
                    60:bc:9e:8e:f3:90:83:74:80:05:20:e6:b6:a3:14:
                    30:88:98:7a:df:5f:b3:6d:3b:b2:46:7e:2f:92:a8:
                    1f:db:37:46:38:45:de:f4:e4:36:8c:b5:35:cd:7a:
                    ff:88:57:ae:69:93:fd:d7:7c:4c:0c:0d:31:ab:96:
                    34:ee:1e:36:5a:c5:72:4a:5d:55:df:48:29:54:03:
                    3c:dd:89:68:f9:3b:53:37:03:79:2f:be:e1:98:6e:
                    da:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                05:2C:B6:BA:AD:AC:F0:A7:AC:98:36:0E:A3:C8:1C:D7:2B:04:56:9F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/052CB6BAADACF0A7AC98360EA3C81CD72B04569F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.192.0/19
                  187.18.128.0/17
                  189.45.64.0/18
                IPv6:
                  2804:880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28270

    Signature Algorithm: sha256WithRSAEncryption
         64:24:99:fc:52:0a:b8:ea:25:a4:0d:88:ce:02:69:68:a5:19:
         0e:7c:df:57:c6:e4:7d:50:23:a9:c9:8f:34:89:73:e4:e6:68:
         de:25:6e:93:42:71:b9:92:49:0c:fa:e9:d1:b6:e8:69:86:c9:
         58:f4:32:47:c5:e7:90:ec:4a:0a:e8:37:14:49:ca:9a:55:ec:
         28:24:a9:d0:8d:00:fd:50:77:a6:d0:c7:f5:ec:ea:ee:44:cb:
         4c:13:db:9b:28:a6:8d:9c:6d:56:88:5b:a8:f8:5e:f3:28:08:
         4e:16:32:d5:01:34:db:ff:15:d1:ec:9e:dd:c7:3c:6f:e2:8d:
         79:a0:70:ca:f8:cc:21:53:53:42:74:32:ee:19:88:50:e3:50:
         e5:b3:3a:7b:7b:78:ae:ac:6a:61:95:f1:36:5f:d2:62:dc:c8:
         31:03:7f:cb:b6:de:6e:e8:fd:52:10:7c:09:a6:7b:ac:b3:82:
         cd:60:7f:18:aa:8e:84:39:e2:ae:ea:46:04:7f:fc:51:15:8e:
         15:e5:d6:a6:c9:94:3b:35:db:a2:25:a6:bf:1b:f1:7a:1e:f5:
         e9:16:5b:ff:2e:bc:ab:f1:61:56:73:61:32:27:f0:ce:37:dd:
         4f:42:d4:db:05:e6:d7:30:bb:1a:8c:73:be:8e:72:4c:5c:23:
         d0:cd:fe:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org