Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1D569212494BC425E2B21168705CD2C462292557.cer
File:                     1D569212494BC425E2B21168705CD2C462292557.cer (raw, json)
Hash identifier:          zqfOUnfwYgJdIJ9lDrUzDp81Skm/CHwvyNxUBhU4S/o=
Subject key identifier:   1D:56:92:12:49:4B:C4:25:E2:B2:11:68:70:5C:D2:C4:62:29:25:57
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       26ED6CC705ECE0D50F8C6CD5A816C474AC730850
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/1D569212494BC425E2B21168705CD2C462292557.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Jan 2023 21:48:01 +0000
Certificate not after:    Thu 04 Jan 2024 21:53:01 +0000
Subordinate resources:    AS: 267142
                          IP: 45.229.240.0/22
                          IP: 2804:48c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:ed:6c:c7:05:ec:e0:d5:0f:8c:6c:d5:a8:16:c4:74:ac:73:08:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  5 21:48:01 2023 GMT
            Not After : Jan  4 21:53:01 2024 GMT
        Subject: CN=1D569212494BC425E2B21168705CD2C462292557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:f5:93:34:70:7b:de:27:e0:23:00:33:b0:
                    97:8f:43:4e:13:95:78:6b:b8:e1:df:9c:87:8b:d9:
                    3b:9c:47:ec:a1:bc:1b:ad:cf:1e:94:13:f8:2c:a2:
                    42:42:cf:f3:45:23:ee:8d:7e:af:51:06:b4:9b:88:
                    04:0f:5b:e3:9b:72:62:7f:2f:8c:c2:6b:bf:7f:a9:
                    8a:d2:01:2f:b6:4d:88:d2:8f:25:1a:15:b3:27:a2:
                    ed:c7:fa:df:9a:bd:b1:66:42:41:08:ed:f5:a9:57:
                    cc:83:33:42:7c:7b:33:e0:b3:13:cb:7c:c7:2f:7b:
                    57:cf:99:cb:93:89:69:be:e5:bf:40:85:cd:1e:d2:
                    ce:12:f4:12:79:bd:6a:f2:ed:54:92:11:ab:0a:04:
                    7d:b6:f5:1c:e4:83:7d:bb:de:a2:ed:8a:53:b3:9a:
                    2d:ec:5c:6e:03:24:e9:06:87:30:fe:22:9b:93:6f:
                    12:5b:49:85:0d:73:df:81:01:0a:e7:9c:0d:c1:84:
                    a3:ef:03:46:71:ef:5d:97:0b:86:2e:56:28:a1:1a:
                    ba:18:89:79:82:77:02:c1:3b:ba:9a:b0:01:d7:9e:
                    89:1b:e3:e2:94:37:c6:5d:21:05:81:39:9d:81:e9:
                    aa:eb:69:67:50:2c:df:05:86:10:e6:d7:71:e8:55:
                    4a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:56:92:12:49:4B:C4:25:E2:B2:11:68:70:5C:D2:C4:62:29:25:57
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/1D569212494BC425E2B21168705CD2C462292557.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.240.0/22
                IPv6:
                  2804:48c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267142

    Signature Algorithm: sha256WithRSAEncryption
         29:4d:d5:ee:3e:f0:3b:5e:84:9a:44:d0:e5:2e:f4:20:6a:7e:
         13:36:19:8b:d2:7e:85:8a:f8:34:93:83:74:ff:03:36:5b:6b:
         71:dd:68:33:20:6d:7b:d2:21:ed:60:12:31:52:eb:3f:e0:86:
         0d:a6:5f:7d:b1:11:59:a3:eb:d6:a3:52:b5:24:97:9e:e1:3d:
         de:bf:0c:02:16:1f:15:31:a1:97:3d:e9:8f:93:c3:ea:0f:fd:
         d1:9b:0b:27:63:a0:56:7c:e2:7b:6b:22:cb:fb:f5:e6:51:91:
         8e:5e:76:c9:50:7e:40:46:56:94:03:87:62:e3:05:cc:9c:1e:
         6e:d4:5d:75:49:36:db:0f:62:15:9d:80:eb:97:2e:26:cd:ab:
         5a:bc:a5:5f:a7:f7:67:e7:62:f0:10:74:47:23:32:77:79:7a:
         85:e2:64:c3:f7:2d:c2:57:fa:c0:dc:0f:e3:11:54:a1:ac:47:
         18:77:0a:91:d0:5b:3e:bb:23:a2:5b:5f:5a:ae:ca:3d:82:c0:
         5f:ae:92:41:11:51:ab:d6:7c:dd:ce:3d:70:f9:61:93:5e:56:
         a4:f1:f5:8c:6f:d8:60:27:ed:4f:ad:a1:f3:25:fa:dd:db:db:
         24:4d:da:f1:a2:1c:58:c2:4e:90:0c:47:22:d6:4f:de:13:de:
         77:fd:d8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org