Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/43F654E25706FCC2EFE6604E797E21855D4A890A.cer
File:                     43F654E25706FCC2EFE6604E797E21855D4A890A.cer (raw, json)
Hash identifier:          jsENDpdk06+aXTVQnhyY8YOyMh9NLKLTj9mTmFrlcEQ=
Subject key identifier:   43:F6:54:E2:57:06:FC:C2:EF:E6:60:4E:79:7E:21:85:5D:4A:89:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       711988C86534D4B78D5C3BAFEA08C01B64374946
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0/43F654E25706FCC2EFE6604E797E21855D4A890A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 02 Aug 2022 13:53:23 +0000
Certificate not after:    Tue 01 Aug 2023 13:58:23 +0000
Subordinate resources:    AS: 267439
                          IP: 181.191.196.0/22
                          IP: 2804:4188::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:19:88:c8:65:34:d4:b7:8d:5c:3b:af:ea:08:c0:1b:64:37:49:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  2 13:53:23 2022 GMT
            Not After : Aug  1 13:58:23 2023 GMT
        Subject: CN=43F654E25706FCC2EFE6604E797E21855D4A890A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:20:f0:ed:a9:df:32:63:17:f3:1f:0c:90:0c:
                    7b:17:cc:e0:86:c1:33:42:39:df:46:59:8a:fd:51:
                    f7:71:4e:54:1a:c7:73:49:71:68:56:3c:6e:e3:50:
                    d8:a8:71:87:a7:e9:5e:b0:aa:ec:67:5c:3a:b9:1f:
                    6d:27:fb:f6:1d:3b:17:ad:7f:9a:86:2b:1b:09:63:
                    68:0d:f7:bc:82:84:24:55:e6:ed:58:e1:96:35:cb:
                    2b:db:24:c8:16:84:66:a0:34:b1:40:53:9c:5e:33:
                    e8:f7:72:a2:fd:cd:5f:ba:0e:56:8d:ea:ef:80:bf:
                    8e:70:a2:9b:d1:10:f0:e7:1f:fe:43:bc:85:86:ff:
                    3d:9f:45:ee:1f:db:a0:77:90:bc:79:67:9d:6a:0a:
                    ee:9e:3c:46:2d:58:39:60:99:a6:70:94:a6:3c:19:
                    27:c5:56:97:d4:91:d2:ad:ac:50:d4:1d:7c:85:e4:
                    2d:38:63:42:50:9d:36:5c:f8:0e:4c:3e:2a:6c:99:
                    fd:14:16:0a:8c:86:68:32:bb:fe:19:e5:64:9e:e1:
                    70:11:34:b3:df:fc:78:7e:73:17:5e:cf:77:e9:d7:
                    4e:7a:a8:73:0c:a5:a0:6e:6d:92:be:0b:fd:4a:5e:
                    f2:e6:6b:9e:b2:25:25:93:9f:ac:dd:8e:9a:6f:ae:
                    06:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:F6:54:E2:57:06:FC:C2:EF:E6:60:4E:79:7E:21:85:5D:4A:89:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/14eKXRXYjZA1JXLuxeuoc8nA97S5gCCLvsjwESqZNSoW/0/43F654E25706FCC2EFE6604E797E21855D4A890A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.196.0/22
                IPv6:
                  2804:4188::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267439

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:a5:25:2e:96:c3:76:a4:e4:96:9a:8c:71:b6:d6:40:19:
         25:07:e2:01:a0:a9:3d:65:02:f8:8b:03:af:f3:be:f3:4d:74:
         e8:a2:7d:d8:1d:4a:ca:fa:f6:64:cb:89:25:72:f3:62:ab:91:
         2e:3f:dc:d7:0e:78:cd:2a:c9:5b:d3:ce:d5:f2:19:0b:1f:2e:
         5a:27:cf:8e:0b:50:5e:8b:15:68:7e:23:fa:f0:b1:f5:15:58:
         9f:d4:aa:8d:5d:6a:18:94:b8:11:5b:f7:ca:66:38:49:d8:66:
         43:c1:00:79:57:4a:c1:fa:20:41:1d:41:2b:c9:f2:57:25:c0:
         c8:8e:f4:77:fe:db:55:43:6c:dd:f6:00:7e:f4:23:95:0e:78:
         ed:eb:92:6c:c0:ef:5d:4f:7d:80:44:58:f7:f6:e7:44:db:77:
         ad:8f:b0:d6:be:bf:88:e7:c1:9c:32:ef:13:60:a0:b0:d5:e9:
         fe:31:2a:0b:6b:49:21:96:ea:6f:49:1b:a7:26:79:76:f6:b6:
         99:fd:b2:97:b2:95:ee:7d:cb:3b:c8:aa:9f:f2:cb:c6:26:92:
         57:06:a9:ee:e9:5f:eb:94:09:a7:ea:3d:7b:6b:ff:a9:bd:ad:
         60:cd:82:e9:15:c7:b2:68:ac:f6:8e:2f:44:c4:26:44:04:e0:
         0a:97:4e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org