Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76.cer
File:                     1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76.cer (raw, json)
Hash identifier:          dt5WGfz13RgxPRQUkh1qXFV86l9t8UYGjpwWOMq7xv4=
Subject key identifier:   1C:2C:5A:C6:BD:AC:2A:E5:7E:EA:D0:A7:37:80:A0:FE:75:5B:5B:76
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B672529AAD1F4154F1D3D35C5C9206640D89134
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jan 2022 02:50:26 +0000
Certificate not after:    Tue 17 Jan 2023 02:55:26 +0000
Subordinate resources:    AS: 267351
                          IP: 45.234.4.0/22
                          IP: 2804:4c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:67:25:29:aa:d1:f4:15:4f:1d:3d:35:c5:c9:20:66:40:d8:91:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 02:50:26 2022 GMT
            Not After : Jan 17 02:55:26 2023 GMT
        Subject: CN=1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:58:29:92:fb:3c:0e:2c:00:eb:0f:ff:7f:23:
                    e1:fe:c9:d0:6c:b8:a3:3d:ff:1a:22:07:44:f5:d1:
                    00:a6:72:42:d8:e5:9c:a9:d5:30:a4:36:af:01:8b:
                    f7:48:05:22:54:d2:73:52:94:f3:1b:a2:f1:77:13:
                    a0:7e:a2:2a:c9:cb:63:44:23:75:ef:46:e5:de:9c:
                    f8:74:e3:92:85:2e:0e:0f:19:d2:f4:e7:aa:59:9f:
                    4b:28:2b:4c:17:a2:a8:1a:c2:b1:0d:f5:fa:cd:1a:
                    d8:4d:6b:c7:73:14:72:a1:05:f1:2c:1c:0e:b6:77:
                    93:a0:5d:d3:34:f5:c4:0a:b9:6d:2d:02:ed:c3:0a:
                    0e:61:84:c6:b7:26:a3:e9:32:9d:96:55:1b:94:2b:
                    16:c8:48:8e:f0:93:ae:82:ab:25:bf:6d:aa:a4:5c:
                    ec:9e:c1:1c:6e:19:18:b7:0e:34:f7:15:1b:0d:ae:
                    86:92:83:33:33:3f:9a:1e:77:4b:64:94:a1:ec:3e:
                    74:89:3d:f7:b2:af:dd:37:bb:1e:97:ed:0a:d7:9c:
                    ef:c2:27:80:6c:71:f4:c0:43:42:c1:2d:43:6f:72:
                    c7:01:9a:73:d0:52:9d:e4:0b:91:70:2b:f2:39:15:
                    3a:85:83:e0:73:4d:2b:23:0a:7f:61:be:f8:9b:80:
                    f1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:2C:5A:C6:BD:AC:2A:E5:7E:EA:D0:A7:37:80:A0:FE:75:5B:5B:76
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/1C2C5AC6BDAC2AE57EEAD0A73780A0FE755B5B76.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.4.0/22
                IPv6:
                  2804:4c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267351

    Signature Algorithm: sha256WithRSAEncryption
         3e:c9:2b:a2:ca:88:66:d9:35:95:05:bf:a3:8a:8a:3c:2f:d9:
         32:83:fa:b6:27:24:e4:5f:72:31:c5:77:25:43:be:7f:7a:78:
         61:60:68:73:df:f4:53:83:8b:0a:06:de:a4:4b:05:5a:c2:c1:
         1b:42:c6:68:62:cd:02:59:0c:c9:fc:c9:37:28:0c:02:ee:70:
         69:5d:16:84:0d:06:e8:45:b6:33:d1:7c:18:f7:a2:13:e0:d6:
         27:19:db:2e:7a:61:b1:65:39:95:b0:f5:be:4c:d7:db:17:88:
         88:7c:76:ae:0f:ca:1c:ad:38:c2:41:5b:e0:28:bb:44:da:fa:
         0c:56:62:50:8a:85:97:5a:b2:d4:17:e7:17:c9:97:e3:5d:c1:
         9a:b7:a1:a2:a6:f5:cc:5e:11:f7:a6:f6:3d:c3:77:ee:32:17:
         fb:56:e0:e2:d9:60:ab:4e:5a:fe:4c:93:25:94:ef:ba:aa:e7:
         d2:eb:bc:9a:8e:c7:82:34:bb:3c:f9:4b:eb:24:c0:ab:72:5a:
         63:50:1c:8b:41:5e:72:de:7b:c2:a0:da:ee:89:43:14:c0:c2:
         31:16:c2:ed:2d:2d:61:4d:b5:75:ed:9c:33:e4:79:5e:88:cc:
         11:43:00:fe:7c:ce:bd:b2:ca:4d:1d:c8:07:39:4a:51:52:38:
         40:d5:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org