Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1AF08B802F98837A67C9C377CF1F75BD4ACE211D.cer
File:                     1AF08B802F98837A67C9C377CF1F75BD4ACE211D.cer (raw, json)
Hash identifier:          hnyq3eCv/+jiVlzcE8O8y09uPscYLaErKerGlSwF9L0=
Subject key identifier:   1A:F0:8B:80:2F:98:83:7A:67:C9:C3:77:CF:1F:75:BD:4A:CE:21:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       335D2CED6C7624C5ACC0FBAF31C03D6332CEFD47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/1AF08B802F98837A67C9C377CF1F75BD4ACE211D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Oct 2021 13:28:20 +0000
Certificate not after:    Thu 06 Oct 2022 13:33:20 +0000
Subordinate resources:    AS: 268597
                          IP: 45.164.44.0/22
                          IP: 2804:53a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5d:2c:ed:6c:76:24:c5:ac:c0:fb:af:31:c0:3d:63:32:ce:fd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  7 13:28:20 2021 GMT
            Not After : Oct  6 13:33:20 2022 GMT
        Subject: CN=1AF08B802F98837A67C9C377CF1F75BD4ACE211D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:55:31:5f:54:25:68:4d:dc:3e:5f:af:f0:74:
                    6d:da:61:89:be:7b:da:56:97:e5:e5:a6:2f:b1:f1:
                    a1:be:64:04:89:bf:14:a2:41:bd:4f:91:82:14:8b:
                    ef:ac:27:4f:75:d0:15:94:c2:5e:06:df:11:9e:22:
                    ca:4c:db:a5:bf:8e:11:43:c1:e0:4d:49:54:90:50:
                    7e:a9:69:cc:c5:bf:83:8b:5a:1b:ca:25:28:d8:07:
                    cb:c1:2d:2e:5b:ee:78:63:30:cd:40:a6:ba:c8:9d:
                    a0:68:e8:44:7f:2e:37:ed:0c:ed:80:a9:1f:33:b6:
                    80:b1:61:52:b6:21:17:40:22:59:1a:0f:0f:7e:c3:
                    f8:84:69:bb:98:3e:3c:05:40:78:7b:57:d2:b7:ea:
                    86:ed:f1:c7:7a:e6:ab:d8:bf:2c:2f:ba:81:b0:3d:
                    19:33:d9:10:07:46:78:e0:60:eb:16:79:1c:3a:4c:
                    6e:a7:df:09:7c:19:03:6d:7a:a5:84:d9:09:87:3e:
                    c9:72:2c:2e:6b:b7:c0:1c:be:0f:2b:1c:a6:2f:d9:
                    5f:93:c9:7d:54:8c:bf:b7:f3:98:d5:43:3c:a6:90:
                    fc:4f:ba:42:de:c6:54:c2:61:35:3c:bf:88:bd:40:
                    ed:7a:05:ce:b6:73:9a:9e:77:04:df:e4:bc:ea:5a:
                    88:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:F0:8B:80:2F:98:83:7A:67:C9:C3:77:CF:1F:75:BD:4A:CE:21:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HXCpf3woyZuoibgGJF6px4vZXVevv8rrxR3eQDLcztmC/0/1AF08B802F98837A67C9C377CF1F75BD4ACE211D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.44.0/22
                IPv6:
                  2804:53a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268597

    Signature Algorithm: sha256WithRSAEncryption
         92:41:9e:31:d6:c1:68:86:14:b6:2b:bd:f0:9f:92:61:09:a7:
         fc:ee:6e:5c:c5:3d:d0:eb:6e:c2:3c:4b:2b:eb:e2:a8:db:60:
         8c:ec:11:04:4f:d9:8f:bd:18:1d:61:20:3d:6f:00:bc:c1:bb:
         da:cc:03:9c:cd:53:70:4c:4f:73:68:5e:7c:b8:38:9d:8c:03:
         d1:46:7e:26:bb:c0:3d:a7:ce:0f:6c:2c:b4:cf:6d:ed:27:81:
         a0:a6:33:e1:1c:eb:43:ea:fd:a6:97:91:d0:43:e5:71:81:b7:
         84:0e:e0:4b:21:bb:e8:ba:f6:3d:d0:b1:c8:dd:64:a2:d6:86:
         73:fc:92:a3:d6:60:ae:5a:07:66:87:f0:e4:f4:c2:6a:48:ad:
         88:76:ae:c1:35:c1:5e:23:a8:24:5f:df:0f:fc:19:87:78:49:
         57:b2:f7:d2:dc:32:44:8f:b2:90:b4:17:77:04:cc:62:6a:7b:
         d6:c3:42:87:c3:57:f3:26:37:48:36:04:a9:81:52:a8:2b:f4:
         13:69:2e:b9:60:30:cc:d8:21:46:32:63:e3:4f:72:ed:07:c3:
         64:45:35:d9:74:3e:45:d7:dd:60:c3:fc:42:3b:ac:09:54:27:
         59:43:77:2b:8c:2f:56:a6:2a:ea:53:dd:3e:8c:5a:4d:85:1c:
         5f:b5:23:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org