Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.cer
File:                     12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.cer (raw, json)
Hash identifier:          Bob/cCyx/Ttg0TCYrL2tWKkQ9gJbhSx0KaXyFnYF1RE=
Subject key identifier:   12:EB:79:B2:68:95:FE:A6:8C:EF:3B:F4:D6:45:4B:52:AC:2E:2E:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       07B7525B42889113820701E0EBBBC285A24ABC0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 12:53:50 +0000
Certificate not after:    Mon 20 May 2024 12:58:50 +0000
Subordinate resources:    AS: 267675
                          IP: 45.224.236.0/22
                          IP: 2804:4524::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b7:52:5b:42:88:91:13:82:07:01:e0:eb:bb:c2:85:a2:4a:bc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 22 12:53:50 2023 GMT
            Not After : May 20 12:58:50 2024 GMT
        Subject: CN=12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:cf:e0:db:32:18:06:cb:24:67:d1:85:74:
                    b2:f2:68:99:bd:c2:1a:49:dd:ca:20:d2:22:fc:53:
                    cf:fd:20:1d:82:8e:71:c3:45:8a:7e:78:67:12:28:
                    db:cb:43:10:45:a1:cb:c1:7d:82:51:23:03:89:e3:
                    46:2d:52:a8:a5:b0:7d:69:ab:82:4f:e8:4a:ad:e5:
                    cf:93:f1:2d:d9:e8:b5:8d:aa:44:23:77:de:57:45:
                    5e:b4:db:39:f6:fa:25:27:5d:87:69:00:84:84:7a:
                    79:1b:e4:50:80:7a:b6:e1:1b:01:87:b0:51:4d:6e:
                    f5:3a:4e:59:7f:1d:af:49:cc:9d:6f:55:28:4e:cf:
                    b7:67:95:3e:45:a8:0d:3b:7c:6c:d3:73:ba:25:91:
                    0f:38:cf:74:75:f2:bf:38:c4:45:54:97:fb:f4:90:
                    89:d6:6d:05:ad:e3:54:cd:b3:57:c6:ee:37:8c:8c:
                    3d:20:55:80:78:70:25:6a:33:57:ba:7f:7d:05:eb:
                    e1:64:44:81:c6:ee:c6:af:bd:b2:da:49:eb:7c:84:
                    84:88:aa:67:d1:87:10:37:e6:14:6d:cd:2b:73:de:
                    8c:fc:a1:95:0d:03:15:b6:55:99:a8:f1:5f:c8:ad:
                    66:76:39:e8:99:b4:ff:bb:eb:30:25:9b:62:c3:cd:
                    1c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:EB:79:B2:68:95:FE:A6:8C:EF:3B:F4:D6:45:4B:52:AC:2E:2E:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/12EB79B26895FEA68CEF3BF4D6454B52AC2E2E0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.236.0/22
                IPv6:
                  2804:4524::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267675

    Signature Algorithm: sha256WithRSAEncryption
         2b:0d:b7:92:a9:c7:cb:58:c6:a7:e7:0a:fa:6a:11:4b:c9:a4:
         6b:7d:99:b7:11:31:47:f7:97:38:3a:e9:e2:55:ea:3a:19:6e:
         eb:ef:b8:a3:93:27:7d:f9:21:4c:cc:da:cf:c2:c2:8f:3c:c7:
         70:30:32:b5:7f:94:76:73:1c:ae:c1:6e:74:f5:a3:3f:67:f6:
         9b:29:e3:16:c4:c8:0b:4f:4a:3b:ba:4e:a5:4f:36:9e:9b:83:
         66:f8:fc:04:52:39:af:c0:cd:5a:3a:38:22:5b:b4:22:86:f2:
         e7:46:11:76:a0:86:c8:30:da:86:56:6e:ed:59:94:fc:a3:23:
         93:38:c8:c2:d2:af:28:37:67:fe:71:0a:61:5d:fd:6c:ba:ec:
         9b:45:90:47:a4:f7:23:6f:a8:7e:e9:e7:94:8e:81:96:7b:88:
         1a:ac:03:5b:43:a9:bc:51:0b:c3:93:02:13:00:b3:0a:23:74:
         97:11:70:e9:71:1e:d3:24:3a:0d:1d:ff:fb:dd:02:96:b8:35:
         61:0b:77:44:7e:9e:e9:1d:8a:d0:c9:c2:67:5c:19:26:14:95:
         9b:28:84:f0:38:c0:a1:3b:c8:f4:0c:50:93:08:58:b6:4f:13:
         7f:e9:a4:61:7c:ca:a7:76:ac:3f:9e:4f:33:ef:ef:3e:72:1b:
         96:36:dc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org