Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/25C2D875F5CBA31070CD57D8D61496748E38F2FE.cer
File:                     25C2D875F5CBA31070CD57D8D61496748E38F2FE.cer (raw, json)
Hash identifier:          cJGfhBfh/u8SHZ1IDBbKwmWrbY0aU11FdAbSERXxZt0=
Subject key identifier:   25:C2:D8:75:F5:CB:A3:10:70:CD:57:D8:D6:14:96:74:8E:38:F2:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B22992EDD9CD2DF14CD6E7BAA350A0D9FE700A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/25C2D875F5CBA31070CD57D8D61496748E38F2FE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 26 Jan 2023 12:20:25 +0000
Certificate not after:    Thu 25 Jan 2024 12:25:25 +0000
Subordinate resources:    AS: 265442
                          IP: 168.196.40.0/22
                          IP: 2804:3434::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:22:99:2e:dd:9c:d2:df:14:cd:6e:7b:aa:35:0a:0d:9f:e7:00:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 26 12:20:25 2023 GMT
            Not After : Jan 25 12:25:25 2024 GMT
        Subject: CN=25C2D875F5CBA31070CD57D8D61496748E38F2FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:bc:8b:d6:7b:b5:00:ab:16:fe:98:d1:d5:
                    97:af:f3:59:ff:b0:9c:39:6d:07:33:83:a1:08:88:
                    43:ed:57:bf:d0:a3:e5:c7:6e:a9:df:75:66:d8:b4:
                    8f:cf:5f:f1:f6:2b:a5:5d:89:80:3c:16:3f:1d:94:
                    ed:e0:0a:a2:07:5f:45:d7:b8:40:dc:f2:71:58:b3:
                    5c:fc:8d:0d:1f:55:10:7b:55:c0:a7:d7:ec:df:a8:
                    03:72:75:f5:95:7f:37:f5:0f:5a:be:cd:a8:61:84:
                    94:47:f4:34:15:4e:83:70:b9:25:b4:d3:46:f3:14:
                    0d:6d:e7:bd:b8:4f:15:71:01:53:f8:66:0a:96:9a:
                    8e:08:db:5c:c4:04:3c:82:a3:66:41:39:4a:24:71:
                    51:71:a5:55:a7:c5:e5:2d:40:01:3b:ea:8c:16:89:
                    c4:b9:48:a8:19:66:56:2c:89:79:5c:8a:71:66:5e:
                    3c:0f:d3:d7:da:28:d7:bf:a4:db:d0:cb:75:49:77:
                    4e:92:e2:77:d7:d0:14:96:b2:97:9c:7e:61:50:3d:
                    ef:37:14:c1:28:4f:93:35:95:36:06:05:3c:d2:59:
                    f2:72:44:35:72:43:03:cc:a2:27:f5:5b:f2:40:27:
                    75:9d:31:d4:37:1c:92:99:be:8a:92:ee:20:ce:90:
                    15:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:C2:D8:75:F5:CB:A3:10:70:CD:57:D8:D6:14:96:74:8E:38:F2:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Uo7k29SyAHHQe3vsW26GJc2CzXwyAFr5kXFdFNJiYo2/0/25C2D875F5CBA31070CD57D8D61496748E38F2FE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.40.0/22
                IPv6:
                  2804:3434::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265442

    Signature Algorithm: sha256WithRSAEncryption
         52:59:21:8d:01:ea:81:50:a5:ec:99:2e:50:82:fc:6b:64:db:
         e4:cb:b2:63:cb:ca:03:f9:ad:dc:e9:c5:81:c2:88:72:7a:63:
         48:52:35:d0:27:d3:cd:6e:7f:53:8c:de:12:06:94:6e:4e:2d:
         08:83:6e:0c:d5:25:c5:69:ac:6e:98:a9:bb:56:5d:ef:16:39:
         e2:05:99:d9:cf:a7:91:b2:7c:d3:88:6c:23:67:11:67:66:a6:
         79:36:80:98:a7:cc:5d:6d:94:9f:4a:2e:73:cd:e1:d6:f1:33:
         72:d5:eb:8a:e5:4c:c4:91:38:e7:13:a6:26:24:48:3b:df:3d:
         e0:0b:84:e3:e4:a8:43:fb:c7:69:7c:2e:b0:b7:be:fb:34:9a:
         a7:cd:1f:53:d3:4f:b8:40:e1:41:5b:93:c4:76:a0:3c:b8:c6:
         60:eb:0c:09:2e:06:57:c4:c1:fc:48:55:91:18:ba:f2:04:1a:
         12:09:70:7a:be:66:2c:bb:e8:7b:29:7b:b2:a6:8b:72:1f:25:
         ed:d0:c0:cb:05:7e:67:32:66:49:43:e9:2e:ef:42:18:eb:2f:
         d9:08:5d:14:ab:a3:27:05:e8:6f:38:e8:33:ec:0a:ca:92:b2:
         c6:f3:a4:15:78:62:dd:59:82:e2:54:99:89:a7:75:f9:13:f0:
         ef:a6:7b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org