Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0A8469AFE41FA04C8D7E1DB2CDB080280F714A25.cer
File:                     0A8469AFE41FA04C8D7E1DB2CDB080280F714A25.cer (raw, json)
Hash identifier:          pVFp/Mb+9YIjSPSVPcr08UCGCKPrirABaa7uVgjC1go=
Subject key identifier:   0A:84:69:AF:E4:1F:A0:4C:8D:7E:1D:B2:CD:B0:80:28:0F:71:4A:25
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67ED1AAD2709FC1C1661DD753D9191030A4AFCA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/0A8469AFE41FA04C8D7E1DB2CDB080280F714A25.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Oct 2021 18:43:58 +0000
Certificate not after:    Mon 24 Oct 2022 18:48:58 +0000
Subordinate resources:    AS: 264889
                          IP: 168.227.220.0/22
                          IP: 2804:2f68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:ed:1a:ad:27:09:fc:1c:16:61:dd:75:3d:91:91:03:0a:4a:fc:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 18:43:58 2021 GMT
            Not After : Oct 24 18:48:58 2022 GMT
        Subject: CN=0A8469AFE41FA04C8D7E1DB2CDB080280F714A25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5d:bd:16:e0:2f:c3:52:ca:87:85:64:30:97:
                    f3:1d:de:66:66:e7:a1:77:9d:41:eb:27:c8:87:58:
                    28:54:39:fd:5f:4c:37:0e:47:49:ab:b8:62:a4:2e:
                    bd:12:ec:e7:be:ef:ec:9c:75:40:7d:c9:88:db:12:
                    fb:69:bc:99:02:49:26:39:50:ee:71:2c:10:54:f7:
                    2c:e1:50:71:78:f9:16:1a:94:ea:51:1c:42:58:12:
                    3d:b3:2d:5a:a2:fc:98:2a:d7:08:c8:27:12:a3:9a:
                    c6:d3:87:ca:57:a7:73:6d:cb:e3:6e:ec:5b:55:d8:
                    03:0d:8d:2f:09:c3:ab:3a:76:64:68:fe:78:d9:51:
                    08:d4:af:e2:05:92:08:46:3b:7b:54:17:f2:2a:8f:
                    99:02:ab:5e:3f:a3:c6:af:89:2a:81:5d:4d:f0:aa:
                    15:e1:e5:d8:5f:25:c4:85:46:34:cf:7a:f4:b1:14:
                    89:da:c2:a0:14:79:61:3d:00:15:e7:2c:d8:e2:9f:
                    9e:fa:5c:0c:01:2e:67:d6:63:ac:7a:86:d2:7b:db:
                    5d:65:d1:43:de:b0:45:57:2c:26:12:3e:6d:87:12:
                    ed:4b:ab:2e:80:26:9f:c4:67:0d:42:e9:35:2b:40:
                    18:33:d3:78:fe:96:5f:0a:6f:1f:d7:09:8d:5c:8a:
                    38:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0A:84:69:AF:E4:1F:A0:4C:8D:7E:1D:B2:CD:B0:80:28:0F:71:4A:25
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/0A8469AFE41FA04C8D7E1DB2CDB080280F714A25.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.220.0/22
                IPv6:
                  2804:2f68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264889

    Signature Algorithm: sha256WithRSAEncryption
         5a:24:5b:5f:a3:03:34:a5:4c:8f:24:d1:5c:35:61:db:fd:75:
         b9:7a:c1:d0:ce:d1:8d:e7:c4:b5:ac:37:50:f0:d3:27:8a:51:
         c3:a1:76:79:ac:95:c7:23:2f:85:0f:fe:4c:30:74:93:d0:d2:
         bf:3b:d1:ef:9b:8f:5a:d2:2e:cd:08:c2:9b:df:62:16:85:5a:
         50:d6:65:e9:55:11:28:93:15:ee:05:51:76:cf:b5:48:1c:48:
         31:61:a2:60:ff:82:fa:21:24:e4:c6:f4:69:d6:3d:c5:f5:55:
         f0:0f:77:5f:82:c9:fe:c6:a5:69:15:79:9d:a5:97:6c:8d:6c:
         b2:ff:aa:91:35:79:ea:82:5a:dc:38:7e:e8:75:d4:d4:51:b9:
         5e:f9:fa:b1:84:c4:e6:03:df:e8:6a:75:9e:d2:0f:d6:af:3c:
         ba:57:8c:8b:8e:75:26:8c:48:4d:6a:a2:f7:58:c9:11:2b:85:
         6d:d8:c8:10:bc:be:fd:13:bd:67:d1:48:f0:f7:95:f0:20:d8:
         bd:b3:54:88:47:be:8d:33:28:54:46:8b:a2:da:c0:58:f0:7e:
         c9:18:3d:b6:3f:44:5e:a6:88:68:4d:29:aa:b1:b0:54:85:9c:
         72:65:df:f0:bb:01:03:c6:80:3d:2c:1d:85:49:46:a4:b6:ae:
         b6:56:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org