Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/21AB0A65EB640BED6DA051750B8F5C71C0B5568D.cer
File:                     21AB0A65EB640BED6DA051750B8F5C71C0B5568D.cer (raw, json)
Hash identifier:          d+u9EyhvRSKuaUrKriB++5id/BWE+OUZq84u7oq/e1Q=
Subject key identifier:   21:AB:0A:65:EB:64:0B:ED:6D:A0:51:75:0B:8F:5C:71:C0:B5:56:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       61EC185E808912C90676F1C2325CB51FE916194E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/21AB0A65EB640BED6DA051750B8F5C71C0B5568D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 08 Aug 2023 09:53:14 +0000
Certificate not after:    Tue 06 Aug 2024 09:58:14 +0000
Subordinate resources:    AS: 271099
                          IP: 179.48.208.0/22
                          IP: 2804:7640::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ec:18:5e:80:89:12:c9:06:76:f1:c2:32:5c:b5:1f:e9:16:19:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  8 09:53:14 2023 GMT
            Not After : Aug  6 09:58:14 2024 GMT
        Subject: CN=21AB0A65EB640BED6DA051750B8F5C71C0B5568D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0d:c5:8a:55:57:03:ba:6f:53:47:8e:8a:de:
                    c9:ee:f1:e8:99:ff:7c:0d:16:78:ef:c0:fd:71:7c:
                    f2:f3:17:fd:4b:f6:53:17:d0:d2:97:7c:f9:4f:df:
                    62:b8:23:0e:db:5b:4a:90:41:bd:73:f1:be:c2:18:
                    be:d9:87:b2:a7:43:9a:79:49:f6:6c:bb:12:41:92:
                    8a:20:1f:71:32:2e:62:f4:12:a0:87:b3:f8:75:dc:
                    24:32:59:78:60:a3:2d:e9:e5:08:ff:68:74:5c:a8:
                    3b:d5:d9:cf:5d:a4:dc:fc:f4:4a:f9:9e:32:6a:60:
                    59:ee:f1:c3:f8:8a:20:54:83:10:54:62:e7:4c:50:
                    75:27:ab:e0:6c:01:1d:d8:23:d0:58:43:07:dc:d9:
                    5f:a5:00:b8:be:21:d6:29:cb:6f:43:3a:2f:c1:e6:
                    52:29:1a:ad:4a:7f:a3:04:24:8c:7b:d4:cb:35:c5:
                    18:f3:ee:ac:f5:1a:91:95:56:c2:c3:49:90:17:5f:
                    be:9c:51:aa:fe:11:35:0a:b1:a1:4b:8b:83:6d:ce:
                    93:54:e6:a8:4e:b7:c3:31:8b:f5:23:e5:54:13:bc:
                    d4:65:e5:a0:e0:01:87:5c:7e:dd:18:d6:19:08:c0:
                    9e:56:ff:91:71:c5:39:90:8d:71:a6:72:49:56:8d:
                    a7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:AB:0A:65:EB:64:0B:ED:6D:A0:51:75:0B:8F:5C:71:C0:B5:56:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/0/21AB0A65EB640BED6DA051750B8F5C71C0B5568D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.208.0/22
                IPv6:
                  2804:7640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271099

    Signature Algorithm: sha256WithRSAEncryption
         6c:25:6e:3a:39:e0:f2:50:71:b6:b4:af:b8:94:8f:d0:c3:49:
         9a:2a:6b:d2:20:71:8b:40:11:64:80:86:0f:9c:e8:8c:35:0b:
         91:2e:40:9e:06:29:c2:1d:35:ac:7e:97:44:77:d8:f8:84:52:
         a9:25:3a:59:45:07:82:3e:86:ae:44:00:6d:77:18:f2:87:b4:
         3f:c8:7e:7d:0a:60:da:a3:46:7e:86:02:e9:14:8d:74:2a:07:
         bd:e1:2e:e9:60:99:f8:1e:eb:c4:24:a6:34:61:34:af:bb:49:
         bc:87:a6:d8:41:0f:8b:f0:f2:ea:66:a3:9e:a4:8e:a8:80:3b:
         fb:74:75:49:f9:b7:05:f5:f8:9b:09:f1:67:ff:b2:be:07:45:
         c5:c2:e2:5f:ff:16:4b:20:7d:c0:b9:68:dc:82:69:62:7f:df:
         e1:31:12:d9:bc:6f:22:17:2d:71:fa:49:60:41:ba:3e:73:1e:
         37:1f:71:81:e0:e1:0c:81:78:35:c4:7e:81:86:9f:3b:57:ed:
         07:bc:7b:dc:6e:27:a6:41:24:73:bf:08:46:05:84:da:18:a2:
         11:a3:4d:b0:88:2e:73:50:1d:a6:10:f9:f6:dd:c1:e7:b7:8d:
         ac:09:d4:8f:2f:02:86:dd:14:9b:21:32:c9:2d:21:9f:8b:bb:
         03:5c:a3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org