Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer
File:                     211521895B0953E6883D5163D7C6562ED21685BD.cer (raw, json)
Hash identifier:          rJzMAK4muKaJR/+lv0j9Mxe+fzqHqt6zNVvg4Cmtsvo=
Subject key identifier:   21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58B1B01174093EA86EFBDC24F694BBC53AD3CD4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/211521895B0953E6883D5163D7C6562ED21685BD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Feb 2023 22:08:14 +0000
Certificate not after:    Mon 05 Feb 2024 22:13:14 +0000
Subordinate resources:    AS: 269202
                          IP: 45.181.212.0/22
                          IP: 2804:60f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b1:b0:11:74:09:3e:a8:6e:fb:dc:24:f6:94:bb:c5:3a:d3:cd:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 22:08:14 2023 GMT
            Not After : Feb  5 22:13:14 2024 GMT
        Subject: CN=211521895B0953E6883D5163D7C6562ED21685BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f3:1a:c0:1e:75:5f:43:e6:2b:80:b5:1c:57:
                    49:d6:6c:24:08:7d:60:df:a8:dd:12:e5:a5:26:af:
                    14:68:b5:5d:e8:ae:ba:30:34:11:b4:9a:0f:a4:94:
                    db:ad:22:03:f1:49:ce:75:39:3c:4b:f3:fc:c9:ed:
                    1b:eb:a4:e1:a0:13:68:e8:9e:b4:e2:83:1f:69:f4:
                    75:33:c3:bf:fc:eb:1c:a3:74:51:ad:40:6c:f7:65:
                    bd:d7:af:f3:00:26:7b:b9:ae:ac:4b:0f:1d:f0:bf:
                    12:90:58:8f:ea:73:ac:b7:25:44:f1:24:69:c0:55:
                    45:7f:8b:3a:e2:03:9b:86:6d:3f:f2:91:00:c8:4c:
                    68:32:f9:3c:46:14:51:b1:fc:f6:33:89:8f:f5:f6:
                    53:23:6c:4e:92:b6:8f:f5:14:37:ad:d3:57:b7:d1:
                    e5:d2:8c:9a:88:7c:77:c0:4e:8b:43:20:93:5e:31:
                    1a:e7:cd:4b:73:c0:4b:91:a7:fc:2b:b8:ae:8f:58:
                    16:33:77:0d:d1:95:d1:44:a4:78:dd:23:8f:87:47:
                    57:d5:48:b9:42:c1:80:19:5b:e4:a3:ef:ce:9e:4f:
                    eb:11:9f:17:6a:39:18:76:bd:2b:a4:1b:d5:ff:f9:
                    2f:88:7f:6f:82:e4:db:56:18:98:0e:7d:ad:2e:f0:
                    95:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/211521895B0953E6883D5163D7C6562ED21685BD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.212.0/22
                IPv6:
                  2804:60f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269202

    Signature Algorithm: sha256WithRSAEncryption
         42:62:f7:09:ed:6a:45:51:a1:5a:f1:9f:91:cb:6f:20:8d:f2:
         7b:c1:74:21:28:ef:ff:2d:e7:cd:ce:ea:0e:b0:46:1a:9f:38:
         7d:77:67:9c:7e:dc:f5:e2:c9:5e:c4:ed:51:1e:23:72:74:92:
         f6:c7:fe:96:36:86:89:2c:e8:b5:db:76:7c:3b:f2:a0:80:c1:
         4c:7a:5c:7c:f7:08:51:dc:00:56:3b:2c:b6:e0:a9:72:9d:9e:
         22:8c:98:0c:ce:c3:1d:d0:25:aa:24:e4:36:f0:c1:cc:83:91:
         97:eb:2f:3c:37:1d:b6:32:9f:17:52:3f:fa:99:91:52:98:4e:
         60:a4:25:5d:4b:70:df:16:68:70:52:3a:4f:7d:53:ef:14:34:
         56:0d:bf:be:75:46:0a:a0:39:dc:2c:ed:d9:4a:52:70:d0:be:
         b0:c6:05:0b:a5:c1:e8:29:65:25:58:83:62:44:ad:d8:cc:13:
         84:c0:87:f6:b4:83:08:0a:41:1b:a9:47:90:47:2d:5f:e7:3e:
         cb:53:a9:dd:bb:ec:ff:04:2e:2f:59:a7:c0:e3:93:7b:00:d4:
         ed:0c:b4:6a:d0:63:ab:5c:c0:f1:7b:6f:3d:80:58:4c:d0:b6:
         8b:fd:b5:63:58:ab:76:7d:23:98:1f:1e:25:0b:e8:34:35:24:
         4b:e5:fb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org