Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41BBCAF32C7158F069662D048CCCA087F19C8448.cer
File:                     41BBCAF32C7158F069662D048CCCA087F19C8448.cer (raw, json)
Hash identifier:          apilKqavD20CKCX/5XN0KhxWOOABxitpsyW4z+JT5hg=
Subject key identifier:   41:BB:CA:F3:2C:71:58:F0:69:66:2D:04:8C:CC:A0:87:F1:9C:84:48
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6A8E74CB1465698549C52BAE54176DCCCAD663AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5NratkMaQP27fSvKBo4DYu9KzMwbZGYMcK2TrLFe7SKd/0/41BBCAF32C7158F069662D048CCCA087F19C8448.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5NratkMaQP27fSvKBo4DYu9KzMwbZGYMcK2TrLFe7SKd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Jul 2022 21:24:33 +0000
Certificate not after:    Mon 17 Jul 2023 21:29:33 +0000
Subordinate resources:    AS: 267615
                          IP: 45.71.76.0/22
                          IP: 2804:4400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8e:74:cb:14:65:69:85:49:c5:2b:ae:54:17:6d:cc:ca:d6:63:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 18 21:24:33 2022 GMT
            Not After : Jul 17 21:29:33 2023 GMT
        Subject: CN=41BBCAF32C7158F069662D048CCCA087F19C8448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3f:1b:b2:78:1c:f0:e2:19:d0:6e:4b:34:0d:
                    9c:84:3a:64:51:21:2d:d0:98:2f:54:10:c7:3c:63:
                    5f:f0:17:1a:8f:99:81:c8:0d:cd:72:4c:23:5b:a2:
                    b9:6e:6f:37:35:ac:d6:d3:c7:9a:94:5b:0b:bd:67:
                    4b:87:d8:c9:08:d7:b3:cd:c1:d9:4f:c8:c5:af:e6:
                    cb:1b:53:6a:29:07:f4:48:a1:5b:ed:40:d7:8e:e1:
                    24:ee:c7:ff:6e:e6:35:bf:9a:b4:0d:08:dc:16:33:
                    8a:e5:b7:31:e5:50:6e:c2:89:a6:cc:dd:1f:3e:d3:
                    37:07:76:63:54:df:ce:25:65:76:93:7b:10:a9:5b:
                    88:46:90:4b:56:85:0e:26:ad:3c:aa:e6:0f:e9:93:
                    a7:a5:42:9b:2a:61:ee:cd:eb:ea:8b:a0:9f:62:45:
                    08:fe:21:a3:55:af:08:f2:9d:f8:1c:51:6e:c3:5b:
                    b4:7d:49:b3:14:3c:f9:23:5c:ea:ad:13:e5:d2:5b:
                    c7:8d:45:39:f6:8d:70:3d:71:f3:c1:b4:c4:9a:53:
                    3b:d7:b3:e8:d9:5d:6b:ab:b1:ea:b2:34:9f:19:0a:
                    17:5b:22:42:09:41:59:95:9c:ae:ba:4c:d0:2f:7c:
                    7d:d9:b7:20:30:e1:39:8e:d1:1c:5e:c9:b1:51:ca:
                    37:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:BB:CA:F3:2C:71:58:F0:69:66:2D:04:8C:CC:A0:87:F1:9C:84:48
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5NratkMaQP27fSvKBo4DYu9KzMwbZGYMcK2TrLFe7SKd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5NratkMaQP27fSvKBo4DYu9KzMwbZGYMcK2TrLFe7SKd/0/41BBCAF32C7158F069662D048CCCA087F19C8448.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.76.0/22
                IPv6:
                  2804:4400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267615

    Signature Algorithm: sha256WithRSAEncryption
         7c:3e:c1:2a:5b:64:cd:1e:e1:36:c8:a9:80:8a:ae:90:c4:9b:
         fc:3c:4d:33:f5:f8:15:f9:b2:a5:53:ca:f6:bb:3c:2f:2d:f5:
         6a:21:21:0e:3e:23:6d:e5:89:e0:84:74:94:35:16:df:25:cc:
         e8:25:cd:0d:75:e9:eb:72:88:01:46:c1:7c:56:62:60:68:a0:
         e2:01:32:38:be:68:7e:7e:64:32:3b:66:4d:b1:bc:18:84:c6:
         2c:ec:74:aa:4b:dd:04:12:d4:60:db:27:9e:37:04:cb:2e:6d:
         c3:d8:ba:c2:2d:23:0a:d8:86:98:96:fc:c8:cc:03:73:13:f7:
         fc:72:9d:97:58:b8:12:d8:15:2f:9c:db:6b:56:03:39:91:80:
         4f:4a:4d:0b:85:46:ed:c4:f9:30:2a:19:21:a2:11:a5:49:0d:
         5e:d4:10:25:0d:72:85:69:33:c9:1d:32:7c:37:39:93:e5:1e:
         67:dc:dc:3e:25:70:4e:d5:7a:32:b5:bd:5d:f3:e2:5c:b5:32:
         dd:c1:d9:7f:5e:fd:13:20:f4:b1:a4:2b:8f:a9:4a:c6:c5:e3:
         90:77:97:9d:df:48:31:10:01:b3:5d:ab:92:45:6d:34:a4:c8:
         43:91:64:b7:0f:c8:f0:13:94:ac:bd:21:42:59:92:2f:c8:7e:
         b2:ae:81:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org