Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD.cer
File:                     0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD.cer (raw, json)
Hash identifier:          kqNTrZgdJ3ANm+gzA/wlGitLTXJYHwM8pblwNbVCgXo=
Subject key identifier:   0D:F8:C6:48:F4:3D:15:1F:7E:0B:2A:65:3C:71:74:F8:8F:FC:EB:CD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       46817EF05121693B54E0603C835D8D9388110E3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Sep 2022 20:05:13 +0000
Certificate not after:    Tue 26 Sep 2023 20:10:13 +0000
Subordinate resources:    AS: 262493
                          IP: 168.121.148.0/22
                          IP: 170.82.132.0/22
                          IP: 177.8.48.0/21
                          IP: 177.55.48.0/20
                          IP: 2804:fec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:81:7e:f0:51:21:69:3b:54:e0:60:3c:83:5d:8d:93:88:11:0e:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 20:05:13 2022 GMT
            Not After : Sep 26 20:10:13 2023 GMT
        Subject: CN=0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:76:cc:45:06:08:83:55:ae:42:8c:ae:af:1b:
                    ad:28:a6:a1:34:21:29:b4:5d:25:fe:c1:12:57:76:
                    05:36:a7:69:77:ee:2a:10:fc:c6:ae:5d:1a:06:1b:
                    84:c5:6c:a3:df:00:d7:e7:73:c2:d9:52:07:c4:8d:
                    85:d0:2d:8b:8d:1a:9f:e5:74:3c:3c:b3:af:25:1f:
                    5d:8a:7e:07:fa:7c:13:d9:1d:e9:ea:e9:f7:2e:82:
                    59:8f:72:ca:b6:5f:91:46:de:d7:f0:45:7b:e4:b3:
                    44:8b:1a:4a:b7:f6:4b:62:da:91:ee:d9:7c:ba:57:
                    b6:9d:29:78:6c:11:5f:e8:bd:ab:8c:3c:83:92:15:
                    08:d0:09:5b:98:83:2e:bd:ae:42:73:9f:98:42:7a:
                    22:58:9d:07:2a:50:ab:6f:10:32:19:aa:18:82:2b:
                    c3:9b:37:fe:9c:26:fa:f1:6c:4e:67:1c:32:b3:8d:
                    90:77:56:fb:31:27:59:5c:2c:97:d5:77:79:ef:1f:
                    fb:d5:6d:bd:61:a0:ef:b4:e5:03:7a:0d:fa:6c:c4:
                    09:bc:de:9a:cf:63:5c:e4:18:71:3c:c8:88:2e:0a:
                    2e:83:59:4c:cb:98:c2:fe:4d:48:53:05:6f:b1:32:
                    6a:59:17:50:48:77:e7:60:4a:b5:03:94:42:1f:08:
                    44:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0D:F8:C6:48:F4:3D:15:1F:7E:0B:2A:65:3C:71:74:F8:8F:FC:EB:CD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.148.0/22
                  170.82.132.0/22
                  177.8.48.0/21
                  177.55.48.0/20
                IPv6:
                  2804:fec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262493

    Signature Algorithm: sha256WithRSAEncryption
         6d:0a:d4:38:4f:b4:90:23:94:31:6d:4b:ad:e7:76:97:bd:44:
         55:af:05:3b:17:16:5a:e9:34:51:25:cb:93:8a:0e:b9:32:98:
         d7:d6:1f:88:7d:b5:0c:f6:d1:77:00:31:5e:e1:2e:f0:f8:d6:
         25:a7:7e:5b:07:28:15:05:3c:26:05:bc:0e:40:60:ec:f6:07:
         f7:81:fd:e7:19:23:a6:81:5b:51:8c:20:fc:dc:d9:c4:af:a6:
         fa:f9:4e:c8:8e:1d:ae:b9:b1:ef:ee:cd:97:a7:69:96:fa:26:
         32:46:63:7d:f3:54:e1:92:61:d4:ab:8b:18:4c:0c:dc:8e:6c:
         06:1a:bf:93:ef:3e:e9:53:45:12:f0:77:34:12:8c:aa:89:e0:
         f5:50:df:d6:9e:53:1a:5c:d4:eb:cb:92:7d:94:07:a4:f0:a1:
         a1:43:32:a8:24:df:7e:a4:f6:06:8c:3a:49:0b:af:10:e9:ea:
         ef:fd:84:2a:0d:68:16:86:7a:01:3f:82:10:99:07:d7:36:33:
         67:60:ef:4a:48:d5:9c:79:0c:70:29:fc:66:4a:11:ae:23:17:
         6e:eb:58:3b:3e:b6:54:03:25:72:9c:bc:a1:7b:3f:81:11:97:
         63:c0:01:9d:f6:f8:89:f0:55:75:b9:56:42:e6:e4:40:af:fd:
         41:d6:e2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org