Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/11CF1DAA865E94BF55A7973E9151246D838C3946.cer
File:                     11CF1DAA865E94BF55A7973E9151246D838C3946.cer (raw, json)
Hash identifier:          k8YFytUYQbU96ZPRGsKteMgPXtSwf3NPbsB9b+3OxxA=
Subject key identifier:   11:CF:1D:AA:86:5E:94:BF:55:A7:97:3E:91:51:24:6D:83:8C:39:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       08B39211FA79A5E03A6C290F8F2B0297427BE9EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/11CF1DAA865E94BF55A7973E9151246D838C3946.mft
caRepository:             rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Aug 2022 14:06:39 +0000
Certificate not after:    Tue 01 Aug 2023 14:11:39 +0000
Subordinate resources:    AS: 263263
                          IP: 138.122.72.0/22
                          IP: 170.244.220.0/22
                          IP: 200.33.128.0/21
                          IP: 2804:1814::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:b3:92:11:fa:79:a5:e0:3a:6c:29:0f:8f:2b:02:97:42:7b:e9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  2 14:06:39 2022 GMT
            Not After : Aug  1 14:11:39 2023 GMT
        Subject: CN=11CF1DAA865E94BF55A7973E9151246D838C3946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:27:59:0d:78:2a:22:d9:40:44:79:1f:4d:0a:
                    61:a1:a2:36:81:00:26:54:86:71:b8:bb:46:c1:e3:
                    47:5e:5e:b1:2e:14:9e:bc:53:93:fa:40:85:46:1e:
                    c6:15:c0:a6:e5:56:e6:a7:e7:fe:f8:b1:1c:b3:13:
                    f4:8a:37:60:44:1a:bf:00:f3:bf:37:8c:bc:1b:79:
                    a7:8f:94:1b:34:a0:5b:8e:d2:71:94:4e:f4:06:ab:
                    46:43:82:90:0e:19:4d:fb:41:f0:d3:8c:fc:aa:ed:
                    db:ae:b3:41:4e:9e:8a:1d:c9:02:ff:62:df:f6:5b:
                    9a:52:c8:84:96:dd:f8:76:0f:20:19:fe:38:fa:4e:
                    f1:49:1e:ef:e8:80:b0:ec:0d:2e:fb:63:c2:20:2c:
                    1c:af:cb:65:fe:49:17:02:57:8d:2f:c9:9b:ec:e0:
                    be:c6:13:ea:db:64:60:ec:f2:38:75:ee:99:e2:36:
                    7f:a8:7b:51:6a:e9:29:03:9e:30:25:57:b4:72:2b:
                    2e:c0:7b:a6:9f:a3:48:8e:3b:2e:1a:b9:f2:63:ba:
                    01:51:82:3b:c2:d8:4e:b2:88:58:2a:4f:69:ee:5e:
                    bb:c9:fe:0a:4a:a0:69:85:2a:51:20:ba:db:fc:a8:
                    fe:df:38:a0:ef:71:fd:50:97:ec:77:7d:c3:f6:e2:
                    e0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                11:CF:1D:AA:86:5E:94:BF:55:A7:97:3E:91:51:24:6D:83:8C:39:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/11CF1DAA865E94BF55A7973E9151246D838C3946.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.72.0/22
                  170.244.220.0/22
                  200.33.128.0/21
                IPv6:
                  2804:1814::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263263

    Signature Algorithm: sha256WithRSAEncryption
         6c:04:27:9b:7a:99:b7:e9:af:d4:04:d8:8d:0c:2e:75:54:7a:
         ee:71:58:a1:21:22:13:6c:ba:25:47:76:7b:d5:2e:b8:2f:c5:
         47:94:9d:cd:71:12:07:eb:f0:78:59:2d:f6:11:1c:50:bb:e5:
         7e:4e:e4:db:96:a1:e2:fe:b6:62:b6:ef:b0:06:8c:52:7c:c5:
         a1:3a:0d:b3:ac:9b:b6:2d:55:c8:12:58:96:a1:3b:40:4c:7f:
         20:3e:71:99:59:25:b1:b1:c5:f3:36:bd:78:2d:e5:ad:2a:1c:
         9b:c2:4f:a6:a2:21:47:3f:80:36:8b:1e:a1:69:df:bd:cb:ed:
         4d:4e:4b:c3:8c:73:e9:34:8a:06:49:57:36:aa:a0:b2:f6:f4:
         d6:9c:cd:60:10:48:25:17:b3:06:b9:fa:43:26:3e:10:29:b4:
         c6:f7:57:6c:27:c6:d2:f7:85:7c:4f:5a:c7:05:64:e6:ec:44:
         19:24:fa:8c:4b:de:9f:5f:3a:20:c0:d0:d9:80:0e:4b:6d:b7:
         f2:f0:58:2e:87:9c:b4:c0:e2:2e:af:16:a0:ae:8c:b2:7d:92:
         e2:a5:0e:5f:15:35:d3:a1:62:c4:f8:78:18:a7:ca:c7:df:c4:
         9b:a9:f3:ca:12:3d:7d:92:22:d6:fb:98:da:9a:c7:7d:48:0d:
         e8:30:1d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org