Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1F209AA846293F705FB5E5250354EC9F4C3D838B.cer
File:                     1F209AA846293F705FB5E5250354EC9F4C3D838B.cer (raw, json)
Hash identifier:          tA5ppLDWZdLyftsidgEaoJFW0yZKzmI9SRhjlvHaZt4=
Subject key identifier:   1F:20:9A:A8:46:29:3F:70:5F:B5:E5:25:03:54:EC:9F:4C:3D:83:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3DFD1C81209B0062E223B66BA1C37E21C3D80CC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/1F209AA846293F705FB5E5250354EC9F4C3D838B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Jul 2022 01:36:23 +0000
Certificate not after:    Wed 12 Jul 2023 01:41:23 +0000
Subordinate resources:    AS: 270602
                          IP: 177.85.240.0/22
                          IP: 2804:6e84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fd:1c:81:20:9b:00:62:e2:23:b6:6b:a1:c3:7e:21:c3:d8:0c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 01:36:23 2022 GMT
            Not After : Jul 12 01:41:23 2023 GMT
        Subject: CN=1F209AA846293F705FB5E5250354EC9F4C3D838B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a5:4e:33:b2:2e:d1:79:25:65:ee:f4:8c:ad:
                    17:f0:01:35:73:35:12:70:f5:40:9e:43:e7:03:41:
                    48:64:76:19:54:99:53:fc:26:3c:cb:50:e7:5f:b0:
                    ce:88:4f:90:c3:ef:e7:82:17:ed:4c:77:ec:e0:01:
                    a3:25:e8:45:3c:5a:23:e7:6e:13:27:af:70:a2:94:
                    16:26:91:b0:60:6f:e3:0f:3f:da:3a:a3:07:8c:b9:
                    db:83:94:04:4a:40:79:fc:75:40:40:58:f2:fc:35:
                    c6:7a:8b:c0:fc:a8:47:8d:7b:b7:d4:7e:f6:a8:ea:
                    18:c4:db:62:34:3a:6e:6e:83:31:7a:00:8e:9d:0d:
                    83:3e:02:43:1e:75:5a:0e:70:ee:24:60:5f:14:8e:
                    98:d3:86:ba:b4:d4:01:61:ff:57:ba:47:5a:dc:30:
                    ac:59:2a:39:8b:1e:ff:0c:e8:d0:09:11:f0:b2:a3:
                    f4:c2:97:22:3c:ce:ff:5b:08:78:ba:a5:f8:85:ed:
                    dc:46:72:61:67:85:bd:cb:a7:b7:06:44:f7:a0:b7:
                    a9:b2:8d:b0:39:30:81:10:dc:71:bd:48:7b:d5:00:
                    80:ba:2a:1d:08:63:e3:88:a3:79:1d:77:08:7d:53:
                    c3:8d:8e:10:34:bf:b4:f2:0b:ca:d6:29:1b:7f:6f:
                    ba:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1F:20:9A:A8:46:29:3F:70:5F:B5:E5:25:03:54:EC:9F:4C:3D:83:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3oa8cTktbzMcsVopZa1sKjiCgHbkX5n38xjZnqoMj2yr/0/1F209AA846293F705FB5E5250354EC9F4C3D838B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.240.0/22
                IPv6:
                  2804:6e84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270602

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:0e:b8:af:51:bf:cf:16:c4:c4:dc:1a:0f:9c:af:51:f2:
         60:3a:73:f6:90:33:57:5f:df:1f:66:98:10:2b:5b:63:7c:92:
         eb:7d:a1:1a:de:7f:50:51:43:ff:3b:58:dc:f0:fc:ad:fe:86:
         91:c5:9f:de:a7:ff:b0:ff:9c:98:9c:8e:37:45:17:8f:af:7d:
         7e:b9:6e:50:66:8d:78:c4:38:25:70:21:46:bb:e6:5b:d9:9d:
         35:b3:bc:2d:62:b1:cb:e3:bf:22:28:70:9d:d5:b1:71:e4:8e:
         32:49:23:85:ae:cf:11:af:87:34:30:d4:a6:31:52:91:1f:49:
         60:81:5f:5c:49:74:79:42:96:cb:85:c2:c9:48:64:66:5a:29:
         87:62:71:a6:f9:1b:4c:c2:0c:fa:86:fa:47:ab:0a:26:3c:3b:
         01:62:a5:c3:b3:c3:59:ab:95:a1:2d:24:0a:51:d0:e9:e0:08:
         f6:55:4c:66:25:d3:66:4d:4f:72:68:1d:bd:d1:c0:33:57:0c:
         30:94:16:97:1d:43:55:ea:44:2d:9c:45:83:54:bc:bc:56:88:
         b1:2a:f3:b7:ee:a1:61:2a:4f:16:37:ad:da:3e:23:db:58:be:
         60:dc:7c:7e:aa:f4:5c:08:fe:bb:47:a9:b8:5b:0a:70:97:61:
         38:b6:b0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org