Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2585A8C398BE08A08EC2DD74E3C377E02FCC61F1.cer
File:                     2585A8C398BE08A08EC2DD74E3C377E02FCC61F1.cer (raw, json)
Hash identifier:          wJXDkEwTYV/sfvdgHfBrAd+V1Jlc7yzYz186/xcYr2E=
Subject key identifier:   25:85:A8:C3:98:BE:08:A0:8E:C2:DD:74:E3:C3:77:E0:2F:CC:61:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1F8ECD0A5BEF8F0421141B266333D4148C7A9FE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/2585A8C398BE08A08EC2DD74E3C377E02FCC61F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 05 Jun 2022 16:55:37 +0000
Certificate not after:    Sun 04 Jun 2023 17:00:37 +0000
Subordinate resources:    AS: 266487
                          IP: 170.83.184.0/22
                          IP: 2804:3894::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:8e:cd:0a:5b:ef:8f:04:21:14:1b:26:63:33:d4:14:8c:7a:9f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  5 16:55:37 2022 GMT
            Not After : Jun  4 17:00:37 2023 GMT
        Subject: CN=2585A8C398BE08A08EC2DD74E3C377E02FCC61F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:01:d1:90:d7:2b:a5:2d:43:e7:eb:b7:3a:57:
                    bb:89:47:0c:a1:7d:83:ad:34:3f:8c:9f:7b:c4:66:
                    db:2e:5b:55:1f:5e:a8:3a:24:4a:8f:bf:03:9c:73:
                    de:f9:92:64:ac:29:e4:0a:45:60:f0:f4:8c:6d:9a:
                    7a:d6:18:dd:5f:ef:66:7e:72:5c:f6:57:bb:2c:cd:
                    22:af:ed:40:a0:2c:b3:97:8c:f4:62:89:9d:1e:2c:
                    22:29:50:af:76:a8:0d:4f:a8:1a:a3:e7:c4:87:4d:
                    72:9a:92:fc:14:32:06:fd:3b:34:95:83:d7:a0:1c:
                    4b:a7:4e:d2:d7:68:21:b8:c0:e1:20:22:92:ec:0b:
                    9a:50:a7:05:48:dc:cc:17:f7:c7:a3:07:79:c9:1a:
                    3c:b9:fb:8e:32:21:cd:00:0d:2a:34:c7:fb:54:e6:
                    eb:0a:4e:cc:37:55:cd:29:cd:a8:11:e2:06:52:f2:
                    ae:f8:b0:71:55:4b:e6:b4:77:80:0c:68:4e:07:b5:
                    c8:51:2b:4f:61:3a:12:1d:75:c0:40:91:b9:29:45:
                    20:11:1c:b7:18:d6:fe:e7:b6:de:03:72:b3:e9:2f:
                    12:c4:7c:fb:70:03:7b:c8:77:6f:45:47:92:11:c3:
                    89:92:0b:b9:b4:23:f3:6a:cf:16:d7:f1:d6:c4:21:
                    16:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:85:A8:C3:98:BE:08:A0:8E:C2:DD:74:E3:C3:77:E0:2F:CC:61:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9qcYFbmdgit3byHLvEgn1G2RCqLavmCSH4WQeuFDy7pU/0/2585A8C398BE08A08EC2DD74E3C377E02FCC61F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.184.0/22
                IPv6:
                  2804:3894::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266487

    Signature Algorithm: sha256WithRSAEncryption
         77:39:75:64:f6:c0:ba:88:1d:95:58:e0:6b:7b:01:80:30:f1:
         1e:7e:c4:fa:a6:c1:13:a3:38:ae:4c:d6:60:f5:42:e1:6c:0f:
         62:b0:0f:bc:86:1d:89:7a:ba:d3:ad:ac:00:e0:32:cd:44:c7:
         f9:59:ef:5a:1d:86:a3:64:d3:75:55:04:ab:ca:e0:09:41:c9:
         ad:1d:de:c4:c6:7a:6e:5d:c5:4f:4e:5f:bf:0a:52:29:c5:8e:
         9c:c5:b3:60:fe:44:61:45:ce:fc:a8:b8:3c:5e:da:4d:59:a5:
         3d:34:18:d9:2e:60:3b:b1:9f:14:19:94:8b:3f:9a:f2:ee:9b:
         ed:76:4a:80:d2:9c:b9:79:f7:b1:f6:a7:f8:15:75:ec:ec:4c:
         41:c1:e6:59:08:d2:70:0d:c5:cd:fd:53:15:be:44:02:62:41:
         29:6c:ab:fe:a6:05:7e:5c:6b:67:e1:a6:f2:ac:f2:d8:cd:dc:
         6a:08:82:20:28:21:9f:4e:8d:14:1c:03:57:b0:ea:aa:d4:3c:
         e8:a1:da:24:bd:b8:45:9c:a7:a9:18:6c:3a:0c:ae:a2:ce:af:
         43:d3:8d:62:7a:c7:e3:12:a9:23:a3:a2:33:c8:64:be:67:c8:
         17:97:aa:3a:af:e0:8b:9f:5f:8b:83:7b:a3:9a:05:95:f8:1f:
         60:42:b4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org