Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/42F558F853DE46F55030097C19294E709CC04ECD.cer
File:                     42F558F853DE46F55030097C19294E709CC04ECD.cer (raw, json)
Hash identifier:          PVG6RaBRgE8N2Hsk5hgLwAnU0YgbEqjfxdLwK00rEOk=
Subject key identifier:   42:F5:58:F8:53:DE:46:F5:50:30:09:7C:19:29:4E:70:9C:C0:4E:CD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67F820DF4AF89825863A09CE178D0C712EDA9894
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/42F558F853DE46F55030097C19294E709CC04ECD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 11 Jun 2022 11:33:08 +0000
Certificate not after:    Sat 10 Jun 2023 11:38:08 +0000
Subordinate resources:    AS: 61864
                          IP: 201.148.160.0/22
                          IP: 2804:1a88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f8:20:df:4a:f8:98:25:86:3a:09:ce:17:8d:0c:71:2e:da:98:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 11 11:33:08 2022 GMT
            Not After : Jun 10 11:38:08 2023 GMT
        Subject: CN=42F558F853DE46F55030097C19294E709CC04ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:80:81:7e:cc:3d:4e:83:4b:78:ea:1f:2e:d5:
                    f6:c5:c1:2d:69:90:6b:e5:eb:f2:73:ca:90:83:64:
                    56:e8:8e:41:de:81:5e:53:02:b6:2f:3c:a8:eb:42:
                    d8:27:9a:4c:85:30:41:b1:9a:2c:90:c9:6c:6e:93:
                    2b:cc:87:15:17:83:87:bb:c2:68:35:eb:3a:80:3f:
                    a0:b2:2f:ce:cc:bc:24:c8:6b:70:4c:c2:66:2c:f9:
                    b2:de:3a:d5:2a:d2:c3:9c:7c:5d:3f:1f:12:02:6c:
                    76:80:b6:51:8c:7f:3b:4e:21:51:08:7d:ad:52:c9:
                    1a:1c:1d:e5:35:b9:c5:8d:33:6f:1b:50:7e:56:92:
                    d7:ac:5f:f9:27:7e:02:53:52:be:14:03:7b:8a:34:
                    6d:0e:e0:f6:0a:70:d3:5c:63:4a:1e:c4:61:e6:56:
                    34:6b:2f:1d:1a:7a:0e:ba:82:c5:38:8d:80:a2:b1:
                    c5:a6:b3:41:df:6e:2e:7d:af:37:7b:8e:96:c2:c9:
                    84:c3:0b:65:2c:b9:97:ce:57:ea:3f:a7:d3:f6:26:
                    5f:08:e1:34:ba:1e:c5:b9:99:0e:23:c9:8a:b5:96:
                    9f:d8:dd:7c:9e:63:72:2e:46:ba:64:82:92:12:94:
                    31:9d:ab:36:e6:ea:85:4c:06:28:84:6d:12:42:a7:
                    0a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:F5:58:F8:53:DE:46:F5:50:30:09:7C:19:29:4E:70:9C:C0:4E:CD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2jvikW8D1SQXvBojaq8x7yicXbkwXJYxQWge9Do16GzR/0/42F558F853DE46F55030097C19294E709CC04ECD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.160.0/22
                IPv6:
                  2804:1a88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61864

    Signature Algorithm: sha256WithRSAEncryption
         42:c2:46:78:6d:11:48:cd:56:30:a6:81:ef:d4:41:a8:d0:55:
         4a:6c:43:a1:9a:4b:2b:73:d2:6e:f4:47:0e:8d:1f:df:ed:72:
         4a:09:54:dc:99:19:6f:27:ef:00:c9:ef:62:23:45:d4:78:98:
         99:76:ac:e2:39:87:dd:25:d9:31:85:e8:38:48:8c:43:80:05:
         53:49:da:63:66:21:7f:cb:cf:e2:d8:ae:82:f0:78:0d:8f:5b:
         22:f4:b9:09:28:bb:0f:62:5f:c6:69:fd:ef:97:f0:03:68:88:
         b2:6c:47:1a:1c:5d:cb:b3:6c:45:cd:13:96:0f:a1:12:6d:85:
         6a:18:b1:a7:2e:4e:94:0f:fa:94:e7:ed:e0:69:50:24:60:25:
         62:c8:be:2b:e1:ec:2e:6a:ba:14:6a:6c:86:9d:48:3f:0e:37:
         c2:0b:60:1f:d6:29:29:2f:b4:eb:95:51:0e:90:53:6d:dd:c4:
         31:f5:06:05:54:08:47:6c:ac:60:2a:c3:a4:1c:0c:b8:87:ed:
         c2:07:50:ef:e2:06:e7:d7:9c:c4:9f:33:05:4a:32:ef:0d:c7:
         d4:3a:cf:e7:e5:a1:5f:1c:2c:f8:8a:b9:73:4e:d4:a7:fb:16:
         e5:75:8b:d7:0e:9c:01:b2:cc:4f:ec:e3:af:d3:20:69:b9:59:
         0b:f3:94:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org