Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer
File:                     1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.cer (raw, json)
Hash identifier:          eK86lyPY72obVuKzK/HpLOo32biH9E3rfPZX1Ho3xv8=
Subject key identifier:   1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DA226156C17AE0C7FD12A377629AAD7A8A04169
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Oct 2021 04:55:52 +0000
Certificate not after:    Fri 07 Oct 2022 05:00:52 +0000
Subordinate resources:    AS: 271046
                          IP: 128.201.12.0/22
                          IP: 2804:7570::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:a2:26:15:6c:17:ae:0c:7f:d1:2a:37:76:29:aa:d7:a8:a0:41:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  8 04:55:52 2021 GMT
            Not After : Oct  7 05:00:52 2022 GMT
        Subject: CN=1B7E5F56163E3F2FC1B0452A93C5F9613099DB45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:07:28:ac:27:95:e3:3e:e7:61:81:84:b5:d4:
                    55:b8:7d:8e:51:cd:36:69:ee:bf:f5:d6:fc:e0:53:
                    94:4a:ac:f2:34:8c:6a:ed:0a:21:e7:48:3b:ef:1a:
                    74:84:34:07:2f:a6:b5:96:dc:b0:70:5a:99:23:25:
                    b6:63:b1:4f:53:76:c1:7a:c0:1c:67:7d:a3:d2:e9:
                    56:76:b4:a5:31:14:ce:e1:6a:e9:6a:ad:3b:66:7d:
                    98:00:ac:f5:33:91:2a:d3:23:ee:41:6b:8f:82:50:
                    0c:84:0b:dc:80:b3:a5:15:a6:05:b5:f5:ef:15:ec:
                    77:65:75:42:59:67:cf:03:44:e0:0b:c3:a3:aa:b9:
                    30:81:40:28:9f:6b:6f:ce:d1:fb:78:a5:8b:ef:55:
                    f4:ea:65:27:d6:ab:2a:3b:e8:ac:3a:23:45:36:8c:
                    5b:05:7f:62:f8:12:61:16:7b:6b:b8:b4:31:09:55:
                    74:6c:58:a7:7a:80:9e:a4:28:2f:09:db:a9:e6:55:
                    91:7d:a3:05:67:38:cd:7e:c9:9c:68:fb:b9:71:19:
                    07:77:da:16:d5:c8:ee:dd:49:25:9d:ae:40:b0:ca:
                    38:ee:28:a9:75:6f:06:6c:d5:83:b2:3a:cf:85:49:
                    d7:bd:18:38:81:74:40:8b:db:75:ba:3a:94:1b:bf:
                    76:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1B:7E:5F:56:16:3E:3F:2F:C1:B0:45:2A:93:C5:F9:61:30:99:DB:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GkeUxS8eYM4x4iEiLVNBdh8YVUoh2CpKM1VsiveZ1Pde/0/1B7E5F56163E3F2FC1B0452A93C5F9613099DB45.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.12.0/22
                IPv6:
                  2804:7570::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271046

    Signature Algorithm: sha256WithRSAEncryption
         92:d2:ba:d0:c5:c2:e7:d7:ce:0a:c6:0f:ef:91:cf:a1:7e:cb:
         d2:6d:31:86:44:48:16:48:7f:88:77:0f:9b:01:cb:e1:13:9b:
         5d:18:24:6f:61:ae:66:73:71:67:03:5a:a8:20:30:0a:c7:ec:
         5d:85:6a:34:89:fe:13:ce:c2:d5:db:ff:5a:9c:b6:8c:7c:9e:
         8a:88:f7:9f:39:c8:f1:46:21:38:70:b6:81:38:09:89:46:98:
         11:13:e2:9d:dd:03:7e:5f:e9:79:52:c7:b7:2a:25:eb:af:0e:
         a4:80:16:10:8f:a4:ab:3b:42:4a:84:d6:b0:ff:89:35:e5:33:
         cd:e5:ba:c4:1d:0c:58:2e:43:9a:20:66:45:19:46:f9:b9:8f:
         29:de:9a:12:a1:3e:aa:f2:74:a3:8f:11:bc:e4:07:92:6a:76:
         a1:ca:f6:d0:50:eb:79:ee:aa:53:85:88:ec:9c:fb:f4:ab:78:
         d2:1b:11:76:9a:2c:ea:af:e9:11:fd:02:4c:54:ee:88:1e:58:
         ae:02:ab:32:7d:1f:1f:78:a2:e9:4e:ad:dd:e4:71:34:e5:ce:
         74:2e:eb:72:b1:7c:03:93:f1:bb:ae:39:03:36:90:5a:27:e0:
         f9:61:f8:a8:3f:d3:6d:e6:2e:f8:8a:0a:ee:ba:84:30:74:3b:
         1b:8f:bf:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org