Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1C354836A1948F6BB2E0BA22D666FE7C87E9DC92.cer
File:                     1C354836A1948F6BB2E0BA22D666FE7C87E9DC92.cer (raw, json)
Hash identifier:          GFZKHGYx5szrOcGnkaD5KVYASogTk4aHbZ+5TmWD3oA=
Subject key identifier:   1C:35:48:36:A1:94:8F:6B:B2:E0:BA:22:D6:66:FE:7C:87:E9:DC:92
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0163F6497F845657E40B4F3105B2415761F221A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/1C354836A1948F6BB2E0BA22D666FE7C87E9DC92.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Jun 2022 21:36:12 +0000
Certificate not after:    Thu 01 Jun 2023 21:41:12 +0000
Subordinate resources:    AS: 267579
                          IP: 45.70.52.0/22
                          IP: 2804:439c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:63:f6:49:7f:84:56:57:e4:0b:4f:31:05:b2:41:57:61:f2:21:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  2 21:36:12 2022 GMT
            Not After : Jun  1 21:41:12 2023 GMT
        Subject: CN=1C354836A1948F6BB2E0BA22D666FE7C87E9DC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:14:9e:32:64:07:15:6c:a2:68:55:a6:5e:
                    8a:3c:73:94:8c:a7:59:63:8b:04:4d:38:1c:88:33:
                    60:fd:78:87:34:c4:06:1f:33:a5:73:b1:c0:31:f9:
                    94:a8:6a:3d:9c:84:f6:9e:b9:69:f3:bf:86:ca:cc:
                    b1:9f:a9:1f:76:2a:d0:26:30:a3:78:a3:a8:6e:ca:
                    05:15:db:d8:6e:de:8e:11:13:1b:ad:0a:0e:9c:93:
                    01:8f:e9:0f:c4:40:e7:f8:91:e6:e9:6b:6a:47:1a:
                    11:c0:17:98:f4:67:f2:df:0f:81:d6:b8:ea:b2:43:
                    73:6d:24:49:b6:32:91:6e:b7:50:37:5a:58:75:f6:
                    8c:6e:2e:95:6f:d0:ad:01:02:1f:7d:1a:df:a5:50:
                    e8:bd:dc:41:0e:66:45:54:71:cb:50:ce:7a:f2:83:
                    be:eb:df:d3:f5:5d:26:3c:7c:20:90:75:ee:24:4e:
                    95:2c:52:00:66:0a:e5:82:f8:fe:4b:f0:aa:5f:fd:
                    cd:6d:ec:d1:08:03:bf:53:b5:b4:42:12:d7:08:c8:
                    3f:e9:ce:3a:b9:2b:70:90:32:0d:86:b7:dc:a4:83:
                    64:fe:1a:c4:28:52:c0:f3:c9:67:01:4a:8f:da:72:
                    70:5a:e3:72:c1:ae:fd:09:7e:68:9c:0f:f9:7e:96:
                    f9:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1C:35:48:36:A1:94:8F:6B:B2:E0:BA:22:D6:66:FE:7C:87:E9:DC:92
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ABEN1MWr23m69R1taE1DALtKRsu67X2SkwwMe4QCYxZN/0/1C354836A1948F6BB2E0BA22D666FE7C87E9DC92.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.52.0/22
                IPv6:
                  2804:439c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267579

    Signature Algorithm: sha256WithRSAEncryption
         74:2d:c8:da:6f:83:67:2d:0d:58:22:18:02:8c:e8:b4:ca:cd:
         36:d5:89:ba:c7:d2:9d:26:4b:64:4d:74:2e:9f:58:ed:20:3e:
         b7:0b:3b:07:8f:ab:dd:e9:cb:18:b4:66:c7:01:8a:89:4b:c3:
         c3:0e:32:e8:59:29:ba:2d:8d:a8:f2:57:8e:cb:6a:d2:92:34:
         18:cd:c1:e1:f4:6d:07:91:4f:c5:33:42:f2:d6:bc:c7:72:9f:
         d7:fe:b1:fe:0c:5a:84:12:b8:d9:d1:9a:51:78:e4:6d:a6:7e:
         60:b7:34:fe:40:b9:ab:25:58:5b:ae:04:bd:c9:c7:9a:98:df:
         1d:e0:44:74:51:88:0b:40:a9:7c:4c:4e:ae:34:32:01:df:60:
         d8:da:d6:65:01:ee:f4:5b:28:7b:4d:01:44:0d:f4:57:07:d9:
         6e:0c:42:43:ca:ae:43:c7:cc:c1:f2:d1:14:ac:07:e3:28:55:
         bb:39:60:11:c0:a7:e2:14:80:19:33:ff:01:cb:25:8b:32:79:
         3c:aa:0d:20:95:45:02:5b:40:89:43:9a:55:cf:02:bd:4b:0e:
         e7:29:5b:ff:c7:fc:cf:aa:59:f9:4f:4c:68:5c:c2:37:cd:9a:
         af:4e:47:13:e0:5c:7b:b5:c0:f5:0c:98:19:9d:c1:42:8f:f8:
         5e:7d:99:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org