Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer
File:                     2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer (raw, json)
Hash identifier:          5FVdi4oY4mlxPXceVqDLVE2cbuVS2Tjzq9rCXFy5o6E=
Subject key identifier:   2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       60C08130AFC5C71DBA94810488DAC2567AAE2CE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 07 Nov 2022 18:19:28 +0000
Certificate not after:    Mon 06 Nov 2023 18:24:28 +0000
Subordinate resources:    AS: 262495
                          IP: 177.66.120.0/22
                          IP: 191.6.8.0/21
                          IP: 2804:51c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c0:81:30:af:c5:c7:1d:ba:94:81:04:88:da:c2:56:7a:ae:2c:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 18:19:28 2022 GMT
            Not After : Nov  6 18:24:28 2023 GMT
        Subject: CN=2A020A5FE3C599222BE72D3E9F37B50FE4D89331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:28:9a:6a:b9:4b:f7:58:fd:ea:f1:1d:a2:
                    18:73:40:77:17:84:4a:0f:d5:e0:9e:8f:d1:2c:2d:
                    2e:5d:e1:96:4f:6a:0a:a8:5a:33:9e:ac:c8:4c:33:
                    24:60:14:6c:60:f2:ab:46:52:a4:22:7a:20:4b:10:
                    8e:95:eb:6e:bb:9a:b7:b2:fe:e6:a7:58:6e:37:f0:
                    84:e1:b3:d7:a8:22:4e:92:8f:54:88:09:6a:d5:dc:
                    56:8f:22:93:a4:e3:a3:a4:39:55:fb:c0:60:92:68:
                    52:91:1e:05:e7:65:81:9a:d6:94:81:78:d6:00:16:
                    64:87:e1:0a:a8:75:5b:c1:ef:91:d6:fa:a0:3a:ec:
                    34:71:77:a1:ee:64:bf:a9:8c:23:92:f2:7f:f5:fb:
                    f7:84:a1:a7:00:15:39:28:b2:98:f2:10:bd:54:dd:
                    6a:0f:70:73:1b:d3:4b:97:b0:d7:4b:97:32:18:aa:
                    24:d0:71:ff:0f:60:e7:91:c3:0a:e2:ba:80:42:c2:
                    4b:fe:42:af:f5:ca:c5:e2:6d:36:e9:16:18:97:d8:
                    a8:f2:48:01:4a:34:60:34:29:af:b8:93:f1:34:71:
                    e9:78:01:7f:45:85:6c:9f:8b:0e:3c:27:a1:a0:39:
                    cb:f6:f7:65:0f:aa:c3:91:9d:76:58:2a:f0:23:67:
                    3a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.120.0/22
                  191.6.8.0/21
                IPv6:
                  2804:51c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262495

    Signature Algorithm: sha256WithRSAEncryption
         6e:f7:fe:45:9e:52:5c:f3:63:ef:bd:c3:ae:c7:1b:73:48:3d:
         ff:16:46:47:c4:45:55:fd:ae:6f:e9:94:69:7d:fd:f2:69:28:
         8b:1b:69:99:3a:21:1d:f8:d7:cb:af:f9:91:78:e0:4d:1f:50:
         40:78:c8:0d:3d:43:d0:9b:dd:56:f9:07:d7:66:2e:42:c8:42:
         4f:44:7a:78:e5:e5:ce:60:5b:65:a9:8e:80:39:5d:a6:d8:bc:
         c8:69:68:bd:3d:f6:b4:aa:28:56:8d:cb:e4:09:bb:bd:38:ee:
         36:c5:53:19:fa:ad:46:ea:b9:e5:63:1c:43:08:3c:66:6f:82:
         c6:51:8c:01:45:fc:60:cf:17:1a:1a:b8:ca:29:3d:8e:b5:dd:
         b6:8e:c4:e3:8f:a1:9e:75:07:84:36:00:4c:c0:0b:f8:45:0c:
         1f:26:a0:89:46:75:33:e8:9c:31:9f:5a:d0:ff:09:96:65:3d:
         a4:e6:28:c0:a6:18:5d:24:c0:fd:1d:c0:90:12:79:9d:e5:65:
         2c:d2:8b:42:f6:c8:29:57:81:92:e0:2a:38:b1:2e:a2:f6:e6:
         38:67:d6:f2:c2:66:68:b0:81:31:6e:c4:77:c7:99:79:da:94:
         49:04:8b:7e:5d:17:ce:34:c0:f7:eb:71:9f:37:c7:e3:6c:3d:
         02:a3:91:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org