Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/42E7D79A75CBB202B57664488D04DE79D288BDEC.cer
File:                     42E7D79A75CBB202B57664488D04DE79D288BDEC.cer (raw, json)
Hash identifier:          awy9d4+G6qZaO31BpILGdxurdha7eqAajmOXuDYwFks=
Subject key identifier:   42:E7:D7:9A:75:CB:B2:02:B5:76:64:48:8D:04:DE:79:D2:88:BD:EC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       664AB187AEBE79CFCA9E6650FFCFE70731C0ADE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/25A79kiCDFs6T9UjvkwUJC2BYi5JHG95fyNXPFZ1fwFZ/0/42E7D79A75CBB202B57664488D04DE79D288BDEC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/25A79kiCDFs6T9UjvkwUJC2BYi5JHG95fyNXPFZ1fwFZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 02 Sep 2021 15:34:50 +0000
Certificate not after:    Thu 01 Sep 2022 15:39:50 +0000
Subordinate resources:    AS: 267631
                          IP: 45.71.24.0/22
                          IP: 2804:4468::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4a:b1:87:ae:be:79:cf:ca:9e:66:50:ff:cf:e7:07:31:c0:ad:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  2 15:34:50 2021 GMT
            Not After : Sep  1 15:39:50 2022 GMT
        Subject: CN=42E7D79A75CBB202B57664488D04DE79D288BDEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:96:6a:f5:1d:8a:ad:cb:6a:60:fd:1e:7a:
                    8a:a1:09:52:ca:e2:ac:4c:db:03:cc:d3:b7:35:e0:
                    59:bb:0d:93:9a:40:8a:69:af:6c:fd:e0:d0:cd:3e:
                    ed:8c:80:7f:ea:9d:aa:05:57:4c:ef:24:19:07:29:
                    46:45:85:62:3e:58:3e:6b:6e:b1:ac:02:21:47:1b:
                    7a:5f:68:05:18:4d:a0:3f:9c:df:fc:ce:18:f5:0b:
                    4a:48:42:28:73:c1:79:95:22:fe:6a:df:d6:0f:bf:
                    3b:23:53:90:22:b8:2c:94:b8:91:5a:58:43:ab:b6:
                    e7:24:6f:25:ab:ce:52:6f:23:07:1c:d6:c2:ec:18:
                    fb:f2:68:25:29:4e:fd:f6:74:39:16:15:c2:35:bc:
                    f0:e7:82:23:ef:51:4a:f6:07:96:93:9c:69:7a:d7:
                    f6:ef:27:76:84:8e:5e:ff:ea:74:8b:e7:bb:4f:14:
                    77:2c:4b:9c:d7:3c:d2:d0:70:b3:67:7d:b6:1b:4e:
                    9e:1c:ce:24:99:19:09:33:0b:7b:f1:a8:30:69:cd:
                    29:61:70:bb:4e:23:61:52:fb:97:71:92:ac:ee:62:
                    07:16:a2:dd:9f:c6:1d:ad:f7:04:a2:42:78:73:0d:
                    2d:df:bc:1b:6c:44:d1:5a:ea:10:ad:5d:b5:7b:c1:
                    2c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:E7:D7:9A:75:CB:B2:02:B5:76:64:48:8D:04:DE:79:D2:88:BD:EC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/25A79kiCDFs6T9UjvkwUJC2BYi5JHG95fyNXPFZ1fwFZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/25A79kiCDFs6T9UjvkwUJC2BYi5JHG95fyNXPFZ1fwFZ/0/42E7D79A75CBB202B57664488D04DE79D288BDEC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.24.0/22
                IPv6:
                  2804:4468::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267631

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:6f:5c:2d:90:f6:16:80:6c:64:b1:7c:f0:d8:d3:59:6c:
         bc:25:35:20:59:6a:32:93:83:11:13:a6:57:1c:e5:f1:9a:0a:
         7a:49:80:3d:8e:8d:bf:1d:b7:6d:03:7b:99:2a:ea:c9:a3:4f:
         b6:5c:e7:a7:f2:a7:53:f2:2a:17:33:78:82:4b:89:d7:b6:17:
         85:60:82:72:74:08:68:a4:5b:e2:48:7e:06:82:ce:05:01:a3:
         38:4f:2e:f8:1f:f0:a1:97:bd:a9:93:27:4a:44:e2:9d:eb:61:
         91:0b:87:b6:c8:1b:ed:66:49:6d:b6:47:83:d0:60:18:09:9c:
         14:43:a8:fc:ca:7f:48:6a:2f:6e:28:a0:07:d4:44:0f:7c:66:
         80:c1:cf:1a:16:45:c7:36:ae:33:57:42:ef:bc:34:72:b5:ca:
         b3:46:64:27:0f:65:d1:fa:03:bf:53:e5:bd:ad:a8:5d:04:b8:
         a8:0e:50:9e:e6:34:15:08:1e:6a:ed:48:06:66:94:2a:ba:55:
         90:96:46:58:e1:aa:b1:94:5b:b4:cb:88:c8:1b:0d:1c:a5:f9:
         a4:0b:bb:94:cb:6f:cd:c5:de:ab:f3:69:f9:9d:8d:e8:65:63:
         43:bc:4a:8c:55:42:36:6c:2a:94:f5:9d:80:c9:46:45:db:c6:
         08:a5:50:80
-----BEGIN CERTIFICATE-----
MIIGETCCBPmgAwIBAgIUZkqxh66+ec/KnmZQ/8/nBzHArekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU5MTdFQkM3QTE1ODc4M0I0NEJDNkVEODIyMTc0MzRG
MjhBREVGQjAeFw0yMTA5MDIxNTM0NTBaFw0yMjA5MDExNTM5NTBaMDMxMTAvBgNV
BAMTKDQyRTdENzlBNzVDQkIyMDJCNTc2NjQ0ODhEMDRERTc5RDI4OEJERUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpiJZq9R2KrctqYP0eeoqhCVLK
4qxM2wPM07c14Fm7DZOaQIppr2z94NDNPu2MgH/qnaoFV0zvJBkHKUZFhWI+WD5r
brGsAiFHG3pfaAUYTaA/nN/8zhj1C0pIQihzwXmVIv5q39YPvzsjU5AiuCyUuJFa
WEOrtuckbyWrzlJvIwcc1sLsGPvyaCUpTv32dDkWFcI1vPDngiPvUUr2B5aTnGl6
1/bvJ3aEjl7/6nSL57tPFHcsS5zXPNLQcLNnfbYbTp4cziSZGQkzC3vxqDBpzSlh
cLtOI2FS+5dxkqzuYgcWot2fxh2t9wSiQnhzDS3fvBtsRNFa6hCtXbV7wSzFAgMB
AAGjggMbMIIDFzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRC59eadcuyArV2
ZEiNBN550oi97DAfBgNVHSMEGDAWgBTukX68ehWHg7RLxu2CIXQ08ore+zAOBgNV
HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u
cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzAvRUU5MTdFQkM3QTE1ODc4M0I0
NEJDNkVEODIyMTc0MzRGMjhBREVGQi5jcmwwgZoGCCsGAQUFBwEBBIGNMIGKMIGH
BggrBgEFBQcwAoZ7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDhmMDgzYmItZjYwMy00ODkzLTk5OTAtMDI4NGMwNGNlYjg1L2ZkMjVj
OWJiN2U1Y2FjNzQxOWZhOTE5Mzc3MGY2NGE2ZWRmMjBjMTkuY2VyMIIBQAYIKwYB
BQUHAQsEggEyMIIBLjBeBggrBgEFBQcwBYZScnN5bmM6Ly9ycGtpLXJlcG8ucmVn
aXN0cm8uYnIvcmVwby8yNUE3OWtpQ0RGczZUOVVqdmt3VUpDMkJZaTVKSEc5NWZ5
TlhQRloxZndGWi8wLzCBigYIKwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJl
Z2lzdHJvLmJyL3JlcG8vMjVBNzlraUNERnM2VDlVanZrd1VKQzJCWWk1SkhHOTVm
eU5YUEZaMWZ3RlovMC80MkU3RDc5QTc1Q0JCMjAyQjU3NjY0NDg4RDA0REU3OUQy
ODhCREVDLm1mdDA/BggrBgEFBQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0
cm8uYnIvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAItRxgwDQQCAAIwBwMF
ACgERGgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBVvMA0GCSqGSIb3DQEBCwUA
A4IBAQBbAm9cLZD2FoBsZLF88NjTWWy8JTUgWWoyk4MRE6ZXHOXxmgp6SYA9jo2/
HbdtA3uZKurJo0+2XOen8qdT8ioXM3iCS4nXtheFYIJydAhopFviSH4Ggs4FAaM4
Ty74H/Chl72pkydKROKd62GRC4e2yBvtZklttkeD0GAYCZwUQ6j8yn9Iai9uKKAH
1EQPfGaAwc8aFkXHNq4zV0LvvDRytcqzRmQnD2XR+gO/U+W9rahdBLioDlCe5jQV
CB5q7UgGZpQqulWQlkZY4aqxlFu0y4jIGw0cpfmkC7uUy2/Nxd6r82n5nY3oZWND
vEqMVUI2bCqU9Z2AyUZF28YIpVCA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org