Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/12DEB8DB0F91F93E3DCFA6CF5168D21CE33D3C6D.cer
File:                     12DEB8DB0F91F93E3DCFA6CF5168D21CE33D3C6D.cer (raw, json)
Hash identifier:          HX4Jy1pqNZ2kVsC7Hl4M8sRTMyx0Hvm1Qvkw2vaZMwg=
Subject key identifier:   12:DE:B8:DB:0F:91:F9:3E:3D:CF:A6:CF:51:68:D2:1C:E3:3D:3C:6D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45268BF05C31B570FCCE49A5022B2F96854864E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0/12DEB8DB0F91F93E3DCFA6CF5168D21CE33D3C6D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Nov 2022 14:55:14 +0000
Certificate not after:    Fri 24 Nov 2023 15:00:14 +0000
Subordinate resources:    AS: 267401
                          IP: 45.234.96.0/22
                          IP: 2804:4cec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:26:8b:f0:5c:31:b5:70:fc:ce:49:a5:02:2b:2f:96:85:48:64:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 25 14:55:14 2022 GMT
            Not After : Nov 24 15:00:14 2023 GMT
        Subject: CN=12DEB8DB0F91F93E3DCFA6CF5168D21CE33D3C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:e8:8d:11:c2:02:df:d7:e0:12:dd:9e:f1:
                    d8:82:05:0b:2a:51:1e:f9:c1:93:d3:dd:84:8e:ab:
                    41:61:f1:20:f5:12:f2:ba:f5:ff:93:14:b3:77:78:
                    76:52:30:20:92:36:33:c3:68:29:29:76:9b:d9:f7:
                    bd:da:9b:bf:20:d4:8f:71:20:fe:46:47:8b:a0:42:
                    c9:d9:ce:d0:a4:19:37:83:25:dd:1e:83:16:9d:9f:
                    20:e4:be:60:68:0f:9d:33:26:78:f7:76:69:54:82:
                    f2:37:40:24:71:d0:92:db:0d:46:b9:23:c2:a9:b7:
                    cd:54:16:a0:34:ea:51:c3:aa:7e:b8:08:18:e0:28:
                    e1:3c:ac:02:9e:40:bb:23:36:d5:d4:d3:ea:b9:c8:
                    b8:b4:fc:e4:62:5c:7c:03:4f:86:28:60:23:be:48:
                    be:a5:df:ba:88:db:e7:54:0c:b4:28:28:7f:64:43:
                    3c:fa:65:8b:74:7a:0c:04:c5:98:66:f3:21:02:8c:
                    82:63:2c:c9:02:20:03:3e:f5:ae:df:77:d6:fa:2c:
                    d3:eb:60:7d:48:99:bc:2c:b9:e0:1b:c8:a5:bd:12:
                    f0:2f:82:e8:40:ad:fc:ed:0a:06:0f:9f:d9:76:a4:
                    b2:ed:dd:69:ef:c4:34:eb:98:c1:46:de:76:4f:b8:
                    75:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:DE:B8:DB:0F:91:F9:3E:3D:CF:A6:CF:51:68:D2:1C:E3:3D:3C:6D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0/12DEB8DB0F91F93E3DCFA6CF5168D21CE33D3C6D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.96.0/22
                IPv6:
                  2804:4cec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267401

    Signature Algorithm: sha256WithRSAEncryption
         3d:d6:1e:2d:5e:83:9a:1f:e1:d6:1f:15:ae:32:72:10:58:e0:
         7a:ed:f3:b0:f9:29:83:36:ff:54:75:44:ec:d0:cb:42:4b:35:
         10:12:d7:8f:40:fd:4d:18:c6:7c:89:39:af:8d:45:76:94:72:
         ef:51:72:43:c9:ca:af:0c:d2:77:fc:9a:04:a8:2b:f6:05:7c:
         45:c6:f4:f0:b1:f7:54:f4:1c:99:e5:10:11:1a:d2:d0:ce:57:
         7b:6c:8c:62:af:8d:c8:e4:a3:e2:70:bb:d1:45:6f:de:af:e5:
         3f:9d:c6:36:f1:ff:52:78:b8:88:86:f7:f3:17:de:ba:ed:02:
         be:b3:24:72:3a:b6:87:c5:35:0d:3f:b3:06:ff:cc:b6:1c:d1:
         9c:22:75:42:ed:3b:ff:08:f7:65:1e:6a:33:50:70:42:fb:d4:
         32:99:af:00:9a:d1:74:5c:f9:3b:1d:e0:ca:2f:79:1e:dd:77:
         6f:81:b7:f4:9a:c9:c3:97:5a:8b:45:45:c2:e7:c3:c6:49:c4:
         fd:86:ec:84:72:48:73:7a:3c:ae:d4:f6:a8:9a:db:bb:9e:3f:
         e0:05:f2:73:78:f5:95:9b:27:c0:15:32:89:e8:25:59:05:d0:
         d4:db:dd:fe:ff:3c:41:9d:8f:9e:ce:72:9c:7b:08:05:16:2f:
         9e:18:77:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org