Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1D680C9FD9C2DB971134090F2DBF7AF6460044F1.cer
File:                     1D680C9FD9C2DB971134090F2DBF7AF6460044F1.cer (raw, json)
Hash identifier:          Nn4xgVGBtxwPoCvL6pbjmK6qFEz8MM4sI5nQtN25OEQ=
Subject key identifier:   1D:68:0C:9F:D9:C2:DB:97:11:34:09:0F:2D:BF:7A:F6:46:00:44:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74D73A08DDF2322AC3CC75A7AF4FD9A5D4E3CBD8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/1D680C9FD9C2DB971134090F2DBF7AF6460044F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 20 Dec 2021 13:01:43 +0000
Certificate not after:    Mon 19 Dec 2022 13:06:43 +0000
Subordinate resources:    AS: 268637
                          IP: 45.164.208.0/22
                          IP: 2804:5440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d7:3a:08:dd:f2:32:2a:c3:cc:75:a7:af:4f:d9:a5:d4:e3:cb:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 20 13:01:43 2021 GMT
            Not After : Dec 19 13:06:43 2022 GMT
        Subject: CN=1D680C9FD9C2DB971134090F2DBF7AF6460044F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f4:a5:57:a2:32:ee:9b:74:11:84:53:ad:6d:
                    63:19:a2:a6:60:c5:1f:06:6b:8d:45:66:98:cf:ad:
                    e8:b0:ee:0d:38:c9:e8:e6:48:67:60:c7:98:4d:ec:
                    de:f9:59:88:21:ac:bd:7e:c0:be:26:84:7e:f2:e6:
                    fc:b9:03:4c:2a:46:17:bb:4e:c0:20:d1:18:71:49:
                    bf:9b:e8:15:67:2e:c9:8f:ed:6e:91:28:61:a7:10:
                    6b:18:ca:ac:e3:cf:8f:be:d2:43:11:2a:d5:ce:07:
                    fe:8f:d4:cf:30:ac:c0:4f:f9:a1:27:ec:0e:f7:01:
                    e3:41:59:80:e5:ec:5b:d3:2b:13:0e:c1:9b:a8:bb:
                    ea:e8:d6:93:c4:b3:1f:39:2f:9a:8a:4f:61:e0:54:
                    d0:40:88:36:39:e9:de:27:8c:b2:32:bb:ed:e5:5b:
                    82:1f:cc:08:8a:cb:52:dd:a8:f1:12:a6:73:58:c7:
                    d6:67:32:fd:80:33:28:05:8f:a7:59:11:39:39:b7:
                    92:3c:fb:36:2f:af:f0:04:41:96:7c:4a:5c:45:3b:
                    31:66:1f:62:23:28:8b:2f:c1:b3:76:49:65:2c:f3:
                    6c:69:bc:66:7d:99:af:ca:1c:8b:9d:af:de:04:ae:
                    61:a9:b7:75:0e:9b:d8:08:c4:74:4c:89:da:7a:e1:
                    4a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:68:0C:9F:D9:C2:DB:97:11:34:09:0F:2D:BF:7A:F6:46:00:44:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3ueyG71jaZjJXTpQavtuPttmLrHJy4it954Jq6n3fvMn/0/1D680C9FD9C2DB971134090F2DBF7AF6460044F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.208.0/22
                IPv6:
                  2804:5440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268637

    Signature Algorithm: sha256WithRSAEncryption
         b3:55:17:12:de:91:05:af:8f:23:e9:e1:95:c3:7f:e2:09:6b:
         4f:4b:c2:e0:c7:ab:53:a4:38:a2:3e:b5:01:1b:ea:1b:58:09:
         d1:2b:12:83:46:d4:63:6f:67:9c:e8:ff:fd:d4:9c:c0:42:fb:
         0f:04:a0:38:f8:d0:dc:a2:71:c3:eb:40:31:ec:0b:92:07:98:
         2b:d6:6a:42:a3:7a:2f:6d:54:47:2e:c3:b0:08:c3:3d:97:99:
         62:e9:a8:11:0b:e5:b2:91:71:1a:ee:88:92:97:32:e0:cd:6a:
         98:90:c7:ae:58:32:39:06:2a:f0:32:b1:3b:b9:be:22:cf:46:
         15:63:eb:4d:dd:12:10:49:b9:28:54:e0:27:ae:e7:7b:0d:78:
         15:2d:4d:e6:a6:e6:b4:b4:6c:e1:df:fa:33:e8:e5:04:78:a0:
         74:1e:b5:49:33:73:04:e4:20:44:35:a7:85:bb:65:37:a7:6a:
         a3:cc:84:b9:58:5b:7d:c4:8c:66:c3:ea:16:68:e7:ed:ea:c6:
         b1:ee:d3:e7:40:db:10:d6:37:89:07:80:a9:b9:25:44:41:b4:
         98:7b:36:10:1b:a0:76:42:28:05:f8:28:ad:39:97:6c:eb:a1:
         fc:1c:99:66:c9:34:63:7d:a0:f2:f2:60:81:e1:90:b0:45:49:
         34:2f:5f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org