Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1887B7D5D38959D80F40AA6CD2B5C1C55046F910.cer
File:                     1887B7D5D38959D80F40AA6CD2B5C1C55046F910.cer (raw, json)
Hash identifier:          hWk0PC+WkzrZqvSUvIX+uTRCv5XBRAWRle2EPeROPRY=
Subject key identifier:   18:87:B7:D5:D3:89:59:D8:0F:40:AA:6C:D2:B5:C1:C5:50:46:F9:10
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       534A389CA37DECEE0DD85CE57DDD921D42724BB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/1887B7D5D38959D80F40AA6CD2B5C1C55046F910.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jan 2022 19:46:59 +0000
Certificate not after:    Tue 17 Jan 2023 19:51:59 +0000
Subordinate resources:    AS: 266076
                          IP: 45.4.240.0/22
                          IP: 2804:3a30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:4a:38:9c:a3:7d:ec:ee:0d:d8:5c:e5:7d:dd:92:1d:42:72:4b:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 19:46:59 2022 GMT
            Not After : Jan 17 19:51:59 2023 GMT
        Subject: CN=1887B7D5D38959D80F40AA6CD2B5C1C55046F910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7c:fc:bd:4b:03:10:4f:56:fe:68:55:19:56:
                    6e:37:e3:dd:b3:8c:82:92:bb:55:85:53:55:88:15:
                    4f:4d:f5:5e:13:72:48:89:cd:8c:14:68:79:10:38:
                    ef:33:d0:ea:bb:97:70:7e:cf:f5:cb:51:5b:61:1e:
                    c9:93:c7:77:49:a9:71:d0:3f:16:75:23:99:99:2a:
                    cb:90:70:30:05:4f:e6:fe:4b:f3:23:81:2a:bf:92:
                    f7:9a:05:6b:dc:47:f6:32:a6:e9:8e:24:ba:50:95:
                    e8:05:75:b1:71:f6:95:b0:3b:f0:40:36:79:7c:91:
                    80:53:03:3c:13:7f:89:fa:8f:53:43:68:35:28:d5:
                    9a:02:e1:c6:86:86:65:96:6e:8d:a5:f6:b4:96:b6:
                    40:51:a9:8c:73:f7:a5:fd:67:48:b4:d5:aa:15:76:
                    cc:ed:7c:c8:4c:86:8e:ef:be:5e:6b:51:15:2c:f2:
                    ae:f2:62:dc:42:1b:97:be:7a:5c:54:eb:ba:53:f5:
                    60:21:e3:ba:ec:89:d6:0c:34:32:c4:b3:8b:f6:3c:
                    27:92:bf:89:1b:40:98:e5:11:a9:5b:12:08:18:3f:
                    9f:25:ac:4e:61:4a:c8:90:8b:cf:2c:90:3b:46:47:
                    e2:17:76:38:7c:e0:b7:f7:e8:03:14:e1:90:98:ef:
                    e5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:87:B7:D5:D3:89:59:D8:0F:40:AA:6C:D2:B5:C1:C5:50:46:F9:10
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/1887B7D5D38959D80F40AA6CD2B5C1C55046F910.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.240.0/22
                IPv6:
                  2804:3a30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266076

    Signature Algorithm: sha256WithRSAEncryption
         10:38:81:12:2d:ca:53:36:22:6f:18:c0:d4:0b:6a:24:53:f2:
         19:ff:1a:bd:02:32:80:42:63:f7:a0:5f:22:7d:c9:da:dd:e1:
         eb:cd:19:86:67:a7:cf:93:ca:72:26:eb:7e:93:fa:e6:ba:55:
         3a:a6:d9:b7:22:71:33:2f:c5:39:07:30:fe:4b:9a:11:8b:b5:
         52:b3:34:fb:b3:ee:d0:fd:1e:6c:76:f5:c4:66:d8:51:3b:59:
         d6:1c:54:f7:fc:4e:c3:bf:85:5b:a7:46:b0:75:17:8b:22:d6:
         03:31:3f:ee:99:75:35:a8:33:44:17:ca:f1:55:38:37:7b:4f:
         b4:99:f6:94:b5:8f:fd:44:1b:f9:71:e1:b5:0f:dc:76:5e:fd:
         26:44:f0:f8:bd:72:5d:ee:2b:f4:c4:d3:79:59:89:db:e0:98:
         7e:ec:0c:79:e1:cb:23:fd:d7:ac:2c:7a:3a:c6:72:5f:6b:9f:
         b3:b8:22:cb:e5:81:47:0e:42:97:d1:ca:4a:05:82:a2:2b:4d:
         9a:c0:86:e1:16:50:bf:91:e2:7f:73:83:c4:99:66:04:b0:0c:
         e7:69:80:b2:c2:5f:17:97:8f:60:99:ab:cb:12:75:a0:3b:21:
         53:9b:7e:7c:a9:47:8b:16:e9:5a:52:e9:e3:0b:3d:b5:86:64:
         b4:06:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org