Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC.cer
File:                     420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC.cer (raw, json)
Hash identifier:          xWE3VRyijOfCbnLPR4lkEZpab2A+JfOpjVu24wcftxE=
Subject key identifier:   42:04:04:B7:5A:E7:FF:DD:CD:CD:7A:39:3D:2F:26:AA:CE:AD:4E:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68BE1E4A459FE1B5D142B2E54891CDCC044FEBF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 28 Nov 2022 20:40:37 +0000
Certificate not after:    Mon 27 Nov 2023 20:45:37 +0000
Subordinate resources:    AS: 269654
                          IP: 45.190.232.0/22
                          IP: 2804:67d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:be:1e:4a:45:9f:e1:b5:d1:42:b2:e5:48:91:cd:cc:04:4f:eb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 28 20:40:37 2022 GMT
            Not After : Nov 27 20:45:37 2023 GMT
        Subject: CN=420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c7:c6:37:dd:d0:74:e0:cf:ef:0e:3c:be:ac:
                    35:f1:4e:72:53:2b:53:f5:bf:2f:d5:0e:e9:56:71:
                    af:39:04:ab:be:db:2f:13:a1:09:a3:14:96:72:dc:
                    52:52:3f:25:7c:50:1d:48:89:33:56:cb:f5:de:d3:
                    a6:36:c4:19:d7:16:36:19:8a:a4:c2:51:3a:7b:cc:
                    c4:4d:2b:df:3e:f0:5c:4c:e2:7b:d7:db:f8:4e:5c:
                    c8:21:66:a0:ee:8d:a3:16:70:6c:33:b6:96:06:b2:
                    85:38:ec:5d:10:1e:05:6c:9f:78:fe:87:6f:9c:84:
                    29:b1:0c:53:42:2a:24:1a:9f:ea:91:91:52:b1:bd:
                    dd:dd:66:51:98:1a:c6:7f:79:a2:89:f0:4c:1e:35:
                    32:6a:5b:51:95:f2:c0:9e:47:f5:07:2d:9e:25:42:
                    82:88:90:a9:64:c0:74:3b:1a:cc:64:c2:64:03:ba:
                    4b:e7:44:db:76:f4:b1:6c:91:8b:48:d0:b9:4c:04:
                    e7:e0:19:42:74:eb:a4:07:d8:e9:b7:cb:7b:02:5f:
                    9e:57:0b:e7:2e:8b:8f:01:03:84:d4:b8:91:1f:2a:
                    9c:dd:83:c6:03:a9:51:92:4b:e5:0b:a2:66:bc:9a:
                    99:81:20:a5:5d:86:4d:7d:f3:1b:dd:d4:3f:dd:de:
                    40:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:04:04:B7:5A:E7:FF:DD:CD:CD:7A:39:3D:2F:26:AA:CE:AD:4E:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FdsBUmK3wUSpMneBWz694VPoRujxFudFpSKy47sgAnJu/0/420404B75AE7FFDDCDCD7A393D2F26AACEAD4EFC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.232.0/22
                IPv6:
                  2804:67d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269654

    Signature Algorithm: sha256WithRSAEncryption
         7d:e0:5a:0a:82:e8:25:9d:46:b6:4a:c9:36:36:d8:85:9c:e4:
         84:c3:72:7f:90:3e:bd:5d:4d:28:73:63:72:a8:65:02:b9:62:
         21:1d:c5:17:54:60:31:8f:55:55:51:14:33:bf:0c:51:7b:7f:
         f1:22:d1:92:44:bc:6d:2a:cf:f3:3d:6f:a3:7c:89:db:af:ce:
         cb:9a:cf:c1:c2:78:10:9b:e8:84:ad:95:75:c5:eb:12:b8:1c:
         d6:29:f9:52:71:42:e5:64:0f:d4:df:9c:61:e6:86:e6:79:b8:
         49:12:ea:93:45:93:b0:e9:e4:1a:81:97:9a:2c:9c:65:15:27:
         63:df:57:58:59:45:bb:7c:5d:10:d9:04:20:f5:cb:59:cf:26:
         54:91:b9:aa:44:7f:41:80:ec:8e:64:ba:b7:0a:f9:89:99:91:
         d4:56:2f:19:f2:82:9f:f1:32:2b:32:dd:70:db:bd:d8:b6:34:
         39:50:f3:5b:39:c7:31:2f:f3:4f:c8:9e:d5:76:e8:31:b8:b1:
         04:93:32:f2:db:04:1b:38:3d:4b:8b:ef:af:74:86:cc:f3:38:
         d6:cb:98:e8:5c:8b:78:75:29:87:54:5b:be:17:08:6b:ed:d7:
         11:91:79:73:8a:7a:95:ba:11:8e:ca:6f:78:38:93:e0:24:03:
         86:7d:0b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org