Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0B25523EBC099ADC0F66ABE8523D10D4712F8480.cer
File:                     0B25523EBC099ADC0F66ABE8523D10D4712F8480.cer (raw, json)
Hash identifier:          4hFkP/qyR1JeOqG/zN3f7AhLVUGdI0YDp5DlvZOpdBU=
Subject key identifier:   0B:25:52:3E:BC:09:9A:DC:0F:66:AB:E8:52:3D:10:D4:71:2F:84:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       689C1EA17DDDFDCA080E35D35BE7C1988AC6C0F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/0B25523EBC099ADC0F66ABE8523D10D4712F8480.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Jun 2022 22:31:36 +0000
Certificate not after:    Tue 27 Jun 2023 22:36:36 +0000
Subordinate resources:    AS: 268134
                          IP: 45.169.240.0/22
                          IP: 2804:5884::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:9c:1e:a1:7d:dd:fd:ca:08:0e:35:d3:5b:e7:c1:98:8a:c6:c0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 28 22:31:36 2022 GMT
            Not After : Jun 27 22:36:36 2023 GMT
        Subject: CN=0B25523EBC099ADC0F66ABE8523D10D4712F8480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e2:0e:91:e8:18:35:1b:c2:68:ba:45:1c:d3:
                    da:12:7a:e4:1b:12:38:dd:a1:2b:3d:a4:f7:7e:df:
                    26:94:95:00:1c:71:bf:ca:30:ed:09:74:2b:fe:8e:
                    56:a4:26:0c:6d:ff:db:15:8f:9d:cf:51:55:1c:af:
                    b2:16:fe:a3:02:ca:50:8e:2e:49:85:ac:26:bd:9f:
                    8f:b4:0c:9f:b0:db:aa:25:6e:b3:d2:2e:1a:a0:15:
                    ff:11:ac:08:6a:b3:8c:ea:f2:83:44:80:28:4f:a5:
                    87:39:ec:e7:95:2a:4a:88:a6:a7:4b:b3:85:c1:b6:
                    84:a2:a1:95:5b:d1:2e:75:da:07:eb:f2:ad:3b:6e:
                    89:c8:9b:4d:f4:53:44:6b:80:9c:86:bd:24:6a:87:
                    6e:9c:e9:85:2a:37:1a:fb:74:99:ab:91:4b:ec:8c:
                    b4:1a:6b:a1:17:8a:dd:67:28:22:e8:a6:7f:f3:12:
                    ba:3e:40:84:30:c4:42:09:9a:76:6e:02:f5:22:b5:
                    fb:78:a6:94:d0:97:b7:be:fd:c0:61:d1:3e:c6:f4:
                    fc:5e:c7:5e:c8:71:e5:96:49:5e:9d:69:06:0d:89:
                    01:51:14:b5:2d:b5:b6:eb:f2:3c:4e:b2:ab:06:6a:
                    aa:c0:a1:cc:05:25:5c:cc:4d:18:7b:9e:f7:c2:fd:
                    77:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:25:52:3E:BC:09:9A:DC:0F:66:AB:E8:52:3D:10:D4:71:2F:84:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DYEko5E2zM761TdZeSTTQTQqQtgT1p8WFmADi7TsGioF/0/0B25523EBC099ADC0F66ABE8523D10D4712F8480.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.240.0/22
                IPv6:
                  2804:5884::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268134

    Signature Algorithm: sha256WithRSAEncryption
         a3:11:cb:a3:45:5b:30:6e:fc:ba:38:96:3c:37:15:ee:43:fa:
         28:0c:d6:13:5d:cf:c3:19:d6:df:5a:a9:5f:05:e9:e4:dd:16:
         e3:77:42:12:15:95:60:fa:33:42:f6:db:96:25:14:92:d9:0c:
         43:d7:4d:e8:df:cd:96:1b:18:9b:4d:96:ee:71:eb:7e:69:68:
         94:43:b3:15:98:59:79:b5:c6:47:00:bc:ff:aa:a6:03:ec:8c:
         33:13:7c:b6:18:ef:5c:61:8e:dd:f8:0a:66:e5:91:54:9c:c9:
         0e:73:f3:f0:13:cd:36:23:f3:7e:a1:e5:2c:41:f5:c1:07:0a:
         e1:1d:9f:13:b7:9a:21:51:23:e1:74:03:17:da:51:52:73:d9:
         74:08:1f:6a:ce:56:18:2e:e2:94:49:84:68:ab:ee:43:fc:7b:
         97:5f:46:f5:0a:bb:b6:d6:e9:29:f1:b6:29:9b:7d:7f:37:24:
         e2:c1:d5:47:7c:33:80:73:5d:ed:74:54:ca:e6:47:e0:3f:9c:
         e7:60:80:32:14:80:52:29:3d:6d:4e:79:1f:56:88:06:f9:b4:
         7e:b3:4c:eb:69:12:45:92:ec:af:d9:3c:39:7d:35:f3:64:b7:
         a4:48:71:99:04:e7:01:37:97:8b:91:38:b5:fe:b4:30:67:6a:
         da:0a:d2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org