Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/21A7FFF8A2033216510A90AF0F8CAB3AB7EBEF62.cer
File:                     21A7FFF8A2033216510A90AF0F8CAB3AB7EBEF62.cer (raw, json)
Hash identifier:          96UBEyPUVmsUD7Eco+BDFcEAuBj9ix2gKbcgZ5xOuJU=
Subject key identifier:   21:A7:FF:F8:A2:03:32:16:51:0A:90:AF:0F:8C:AB:3A:B7:EB:EF:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B3271E49714428EF9D1C7DBBE8AAD223A17AE47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/21A7FFF8A2033216510A90AF0F8CAB3AB7EBEF62.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Oct 2021 13:46:39 +0000
Certificate not after:    Fri 21 Oct 2022 13:51:39 +0000
Subordinate resources:    AS: 268973
                          IP: 45.176.252.0/22
                          IP: 2804:5d74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:32:71:e4:97:14:42:8e:f9:d1:c7:db:be:8a:ad:22:3a:17:ae:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 22 13:46:39 2021 GMT
            Not After : Oct 21 13:51:39 2022 GMT
        Subject: CN=21A7FFF8A2033216510A90AF0F8CAB3AB7EBEF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:27:1e:17:58:ce:aa:fe:80:40:61:d3:04:7c:
                    6f:38:92:67:46:96:38:af:83:73:d6:73:03:58:ed:
                    c6:b9:39:ab:ca:5d:07:8a:dd:d1:0e:b4:ef:70:f3:
                    f9:d1:a3:fc:59:4c:07:0d:d3:e6:61:b8:5d:a7:03:
                    02:f5:60:bb:6f:10:9b:18:e6:b7:e1:e5:da:85:38:
                    e5:56:d0:f2:46:32:66:06:25:32:27:ad:47:47:bd:
                    e1:8d:10:66:37:53:12:fe:a7:fc:dd:ca:5a:7d:62:
                    6c:2d:ba:f5:b2:9e:0b:66:99:d0:13:d6:6a:e7:90:
                    c7:82:64:61:f5:b4:6f:b5:bc:6c:88:1f:26:f2:2d:
                    4e:86:64:57:a3:7c:81:b8:96:3d:47:90:3a:e9:25:
                    5b:a5:0c:7b:24:1d:ec:54:71:a5:06:c3:05:85:aa:
                    d0:07:e2:0e:b1:a1:67:91:39:0b:39:66:8b:b8:d9:
                    ba:e5:e0:ff:68:95:f0:b7:59:4f:c7:6a:af:c4:13:
                    12:bb:17:1d:f6:ca:18:f2:15:02:90:9c:bb:e3:cf:
                    1e:62:1f:ca:e2:24:06:9e:f6:30:d1:e2:e6:bd:d2:
                    92:8c:a7:0a:65:d6:03:ea:22:41:59:94:89:84:41:
                    1e:df:85:f5:31:9c:a0:14:c7:82:ff:72:77:0c:1c:
                    5d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:A7:FF:F8:A2:03:32:16:51:0A:90:AF:0F:8C:AB:3A:B7:EB:EF:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/21A7FFF8A2033216510A90AF0F8CAB3AB7EBEF62.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.252.0/22
                IPv6:
                  2804:5d74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268973

    Signature Algorithm: sha256WithRSAEncryption
         23:0a:c5:ac:9d:0e:cf:66:a8:cf:db:06:83:a9:bf:47:1b:b2:
         0b:c4:2b:cc:54:05:0c:23:b2:a2:ff:82:24:77:43:91:0a:8a:
         b7:ae:c2:81:b4:dc:c6:80:c6:65:1b:08:d0:98:52:21:b3:69:
         9e:0d:1f:6b:89:ab:1d:ff:de:99:29:75:94:3a:1e:72:c7:30:
         d5:6c:56:a5:ed:df:99:b2:83:98:96:0c:d2:ec:91:c9:80:19:
         1c:ec:73:0e:0b:64:61:49:45:92:1c:92:40:67:59:a5:50:08:
         f8:a9:f7:18:7f:c5:6a:da:88:40:3c:47:11:0c:9e:d9:63:93:
         a7:5b:18:85:e1:b8:88:84:0a:cf:90:57:71:60:49:f4:00:c7:
         0d:a4:76:cb:5a:07:3c:d4:31:d7:cf:f8:0c:03:2a:fc:db:7f:
         7e:29:8d:67:91:3c:49:55:41:98:57:8c:ff:4b:b6:22:0f:56:
         f4:d6:99:a4:ac:8a:a6:5c:8d:c5:86:29:79:3f:b8:1f:a5:f3:
         0a:08:03:83:c3:9a:cc:6a:a9:9f:3e:af:71:42:90:a1:86:5b:
         8b:74:14:e4:ca:73:cc:9a:57:bc:a1:74:46:b9:7c:5c:74:b1:
         d5:e3:37:1e:19:28:b5:65:8c:e4:d6:f2:64:48:e7:05:51:06:
         a8:c1:c8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org