Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/19D6669DF48C14D841563C2C29DBA73B0E3363AE.cer
File:                     19D6669DF48C14D841563C2C29DBA73B0E3363AE.cer (raw, json)
Hash identifier:          +6ZIEBXYxEe5EoCsVyhlEJXo7a1naVhyZr75qQsPhe0=
Subject key identifier:   19:D6:66:9D:F4:8C:14:D8:41:56:3C:2C:29:DB:A7:3B:0E:33:63:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5208DB05E3C00133FA72F007B05D47325874F83A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Rm6ZKu1iuMNFEkMAxkFBsL3trq96cdncwvkqq1B9A4x/0/19D6669DF48C14D841563C2C29DBA73B0E3363AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Rm6ZKu1iuMNFEkMAxkFBsL3trq96cdncwvkqq1B9A4x/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Jul 2022 12:32:52 +0000
Certificate not after:    Fri 21 Jul 2023 12:37:52 +0000
Subordinate resources:    AS: 262726
                          IP: 168.227.108.0/22
                          IP: 170.82.92.0/22
                          IP: 186.192.16.0/20
                          IP: 191.241.40.0/21
                          IP: 2804:1138::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:08:db:05:e3:c0:01:33:fa:72:f0:07:b0:5d:47:32:58:74:f8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 22 12:32:52 2022 GMT
            Not After : Jul 21 12:37:52 2023 GMT
        Subject: CN=19D6669DF48C14D841563C2C29DBA73B0E3363AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a5:72:b3:7b:fb:b6:73:9f:7b:26:18:b3:50:
                    58:bf:ac:5f:17:02:e2:1e:4f:29:56:46:2d:77:6c:
                    78:24:46:73:fd:95:88:2e:fe:0d:cb:5f:2b:cb:29:
                    9c:1f:9c:9f:36:1e:30:ab:61:9e:84:eb:4f:1a:f1:
                    b4:10:c2:45:6e:3a:1c:25:ee:48:28:1d:8c:b3:19:
                    3f:e2:3e:41:55:2c:e9:8a:4b:e7:15:f7:3e:d0:bf:
                    14:e9:e9:72:a7:44:20:9d:a5:45:58:67:f0:0c:ce:
                    68:20:75:e8:86:43:23:6b:8d:21:7f:a4:64:47:59:
                    d8:13:8f:e7:0d:50:8d:07:65:0e:fc:c1:03:93:c2:
                    36:e4:d2:19:bd:8a:3a:fa:5f:4e:22:52:fe:7e:ac:
                    96:df:81:8c:50:52:e4:7f:33:8d:72:d4:b0:35:f1:
                    62:21:8b:90:0b:5f:68:b8:b2:95:6a:dd:f3:37:26:
                    50:68:66:75:73:21:a8:53:8f:0b:3c:98:e6:55:ec:
                    67:d8:cc:d2:3a:70:c2:f5:f0:1e:32:a9:c2:1f:ec:
                    7d:10:66:ce:43:c8:9e:85:82:4b:a2:5f:9e:f7:bf:
                    a5:7d:2b:85:81:ca:62:59:99:4a:d9:9f:67:ba:47:
                    6b:d3:4a:56:28:b6:4c:ce:1b:42:d5:8c:da:dd:a8:
                    b4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:D6:66:9D:F4:8C:14:D8:41:56:3C:2C:29:DB:A7:3B:0E:33:63:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Rm6ZKu1iuMNFEkMAxkFBsL3trq96cdncwvkqq1B9A4x/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Rm6ZKu1iuMNFEkMAxkFBsL3trq96cdncwvkqq1B9A4x/0/19D6669DF48C14D841563C2C29DBA73B0E3363AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.108.0/22
                  170.82.92.0/22
                  186.192.16.0/20
                  191.241.40.0/21
                IPv6:
                  2804:1138::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262726

    Signature Algorithm: sha256WithRSAEncryption
         43:c8:8c:44:21:5c:7e:27:f9:92:a7:bc:53:ec:6e:de:b2:c8:
         3f:8f:1f:4e:77:f9:33:1a:40:69:1c:4d:2c:7d:7a:92:5c:f1:
         7e:7e:01:28:5e:f0:38:86:20:df:34:b1:5f:37:3a:2a:1e:fe:
         43:ab:93:f0:54:47:11:d9:cc:62:1b:5c:ce:57:05:c2:10:d9:
         35:6c:f1:0d:e2:89:ac:1e:ea:f3:9a:74:ca:08:d2:c2:f5:dd:
         a3:ec:44:ca:69:ad:5e:be:81:06:00:8d:d4:b4:93:12:fb:77:
         82:92:56:83:57:f4:ed:82:bb:81:64:e9:ec:fe:8d:79:ce:bb:
         03:ed:36:82:a2:05:78:1d:80:82:83:80:2b:77:1a:14:e6:4f:
         7d:c8:0a:df:57:51:f6:11:76:9a:ae:bf:f6:c3:54:6b:47:04:
         3f:7a:9a:6f:06:f8:68:02:07:0e:3b:99:ed:4b:65:ce:ce:96:
         a6:c5:27:5c:d4:80:2c:4c:d5:38:11:74:8e:99:d2:9e:83:25:
         ce:57:44:44:2f:b0:35:af:bc:08:c7:4e:4c:87:fb:62:1a:c1:
         43:a1:9f:07:ca:81:6a:f8:05:6e:62:a1:8b:0d:33:da:bb:66:
         28:4f:34:c4:ec:d4:c8:24:95:1a:5d:be:df:22:ee:f1:37:74:
         80:0a:8d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org