Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/25E5311706B1D00ED4ACF315CAFE90568ABC9AAD.cer
File:                     25E5311706B1D00ED4ACF315CAFE90568ABC9AAD.cer (raw, json)
Hash identifier:          inesvATpgqDXZxEZ26KNNXjpOsBJLD7as+oHz1d79hA=
Subject key identifier:   25:E5:31:17:06:B1:D0:0E:D4:AC:F3:15:CA:FE:90:56:8A:BC:9A:AD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       070AF5A1959E6E921D609AAF2F98EC38C699DE4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/25E5311706B1D00ED4ACF315CAFE90568ABC9AAD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Sep 2022 18:30:05 +0000
Certificate not after:    Thu 21 Sep 2023 18:35:05 +0000
Subordinate resources:    AS: 262702
                          IP: 187.103.80.0/20
                          IP: 2804:85e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:0a:f5:a1:95:9e:6e:92:1d:60:9a:af:2f:98:ec:38:c6:99:de:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 22 18:30:05 2022 GMT
            Not After : Sep 21 18:35:05 2023 GMT
        Subject: CN=25E5311706B1D00ED4ACF315CAFE90568ABC9AAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:f5:1f:2b:55:0d:74:f3:cd:51:a8:8d:0f:
                    fd:f6:48:dd:bf:ed:e3:0b:18:14:1d:15:c0:ab:4a:
                    e6:fa:15:8a:d3:b5:b6:e7:ba:99:46:a8:e1:ce:b8:
                    0d:3a:00:4b:b1:4a:cd:0d:b5:12:e9:a4:c8:46:78:
                    3d:ac:ad:34:89:b4:6d:b5:93:66:23:16:48:c1:99:
                    bf:53:20:44:0e:89:d1:16:c5:61:51:5b:4c:5b:c3:
                    2e:9c:3c:cc:b3:c5:ff:7c:ea:36:d1:b6:38:5a:d1:
                    69:c6:bb:2e:6b:25:8a:04:f3:ce:ab:be:76:26:47:
                    65:f1:01:9d:e2:58:b6:d8:2d:27:b5:bf:4c:6c:ee:
                    6e:2e:4b:26:75:73:34:fc:f3:92:a9:55:82:d1:c7:
                    99:9d:0f:78:7c:08:44:5d:3d:64:fb:ea:e1:26:e2:
                    64:eb:cd:9a:84:24:9a:42:72:ba:93:a9:c1:a1:0f:
                    41:ab:f2:a7:d5:c5:ac:e1:8f:eb:aa:9b:87:8c:33:
                    81:ab:3b:39:69:d9:d7:70:65:6e:b7:a7:5a:55:f0:
                    a7:5c:0b:0e:62:6f:89:b7:d9:63:71:77:22:8f:88:
                    83:2a:ab:01:82:89:1e:ac:88:73:4d:9d:d7:1d:00:
                    df:bd:9f:35:55:66:36:31:6b:ea:67:46:aa:14:3d:
                    73:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:E5:31:17:06:B1:D0:0E:D4:AC:F3:15:CA:FE:90:56:8A:BC:9A:AD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/0/25E5311706B1D00ED4ACF315CAFE90568ABC9AAD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.80.0/20
                IPv6:
                  2804:85e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262702

    Signature Algorithm: sha256WithRSAEncryption
         8e:4e:ed:13:50:22:b9:63:63:b5:ff:35:21:5c:81:e2:40:87:
         53:09:85:c5:3d:09:4e:30:93:28:bb:df:d6:c0:b4:b0:55:d9:
         99:6b:d8:37:7b:0e:45:b0:e6:d8:53:05:af:16:c3:59:4b:05:
         18:70:f5:b9:d9:df:bf:14:6b:1d:a8:38:48:d7:fc:1f:64:12:
         23:32:4b:fd:f8:af:7e:12:9e:07:8f:18:78:4a:15:f3:c3:be:
         98:7b:f0:99:80:90:fc:77:cc:00:87:04:2b:17:d3:c8:a0:9f:
         51:b4:d7:e8:9a:93:4a:25:62:fa:82:d8:3e:45:ed:6a:f7:b9:
         7e:6b:3e:43:24:c2:41:41:1a:46:0d:49:e7:b9:0f:e2:d9:02:
         4d:15:8d:63:c3:3c:a7:81:4b:fe:42:6c:a3:79:6e:94:28:4b:
         52:d2:0d:67:0d:1a:d7:64:0a:e7:9c:4a:77:dd:92:af:0d:d7:
         43:91:fb:ff:bc:a8:7a:0d:ed:f6:fa:00:b4:6a:80:ea:a3:8c:
         35:c6:38:1a:c3:5c:1a:0a:7b:d2:30:ea:e8:a0:98:31:0d:01:
         fa:02:94:32:51:fe:52:e4:29:de:9d:8c:e8:92:c8:a3:5e:a7:
         5a:d5:12:0a:06:06:49:58:85:36:1c:89:f4:29:23:2c:b8:71:
         99:85:85:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org