Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/447EECD24927FECC2F1795CABFFCF5BF2230A2C6.cer
File:                     447EECD24927FECC2F1795CABFFCF5BF2230A2C6.cer (raw, json)
Hash identifier:          7hdxjcKZ/AFbWyAq0/pOFSo/nWBXw2grBBAkUDtsFH4=
Subject key identifier:   44:7E:EC:D2:49:27:FE:CC:2F:17:95:CA:BF:FC:F5:BF:22:30:A2:C6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       157ACA6E616943F0917CE0AD0C0C1C636C127CA0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/447EECD24927FECC2F1795CABFFCF5BF2230A2C6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 16 Mar 2022 12:52:14 +0000
Certificate not after:    Wed 15 Mar 2023 12:57:14 +0000
Subordinate resources:    AS: 264273
                          IP: 138.118.220.0/22
                          IP: 2804:2550::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:7a:ca:6e:61:69:43:f0:91:7c:e0:ad:0c:0c:1c:63:6c:12:7c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 12:52:14 2022 GMT
            Not After : Mar 15 12:57:14 2023 GMT
        Subject: CN=447EECD24927FECC2F1795CABFFCF5BF2230A2C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b7:84:0c:f5:ed:a1:11:df:b9:72:0a:55:46:
                    11:f3:61:24:99:06:65:82:7a:b9:21:74:b1:22:1d:
                    c5:0a:0d:29:01:5b:e2:07:25:de:9f:ec:f7:fa:f8:
                    73:a8:60:43:14:b2:69:60:d0:16:6e:39:70:db:c3:
                    44:7e:94:40:72:4f:94:fa:2d:9c:a0:27:08:6d:05:
                    f4:5c:f7:1b:e4:ce:f3:fa:c4:70:02:e2:1c:03:74:
                    f7:fd:f4:08:d2:e8:25:e2:fc:9c:d6:24:36:09:78:
                    6b:e4:e0:33:c5:3d:82:a6:74:bd:b9:03:83:db:7a:
                    70:99:5f:4e:96:30:87:98:ad:cd:21:17:75:df:d2:
                    72:71:e9:78:09:7c:19:79:7d:7c:ed:73:97:6d:9c:
                    9e:5e:ec:63:ab:c0:e1:54:38:b5:a4:0f:57:86:e2:
                    f1:a9:33:c8:e1:4d:a0:83:9f:f0:67:52:71:ac:f4:
                    9e:d4:a4:92:0c:ac:11:80:56:17:fe:6b:4d:4f:a9:
                    b2:e4:10:e0:16:38:0f:b0:e1:ef:c3:8a:2f:9f:41:
                    75:92:26:bd:c9:3b:95:5a:ba:bd:67:fb:df:10:5a:
                    5a:ef:6f:43:76:df:d7:71:63:1d:76:67:49:d1:b0:
                    22:1d:5b:4a:08:a3:ee:46:93:a9:0b:9d:a9:71:8c:
                    ee:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:7E:EC:D2:49:27:FE:CC:2F:17:95:CA:BF:FC:F5:BF:22:30:A2:C6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/31MVnQni99vwA7Hr6jWnNEw4kWtnT4GP9efgYnHm5g2Y/0/447EECD24927FECC2F1795CABFFCF5BF2230A2C6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.220.0/22
                IPv6:
                  2804:2550::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264273

    Signature Algorithm: sha256WithRSAEncryption
         7e:5a:34:9e:97:cf:1b:3a:5e:75:ac:ff:c3:62:89:38:e6:bb:
         b6:a0:d4:c6:0e:6c:68:4a:ea:76:6a:bc:ab:75:30:ea:7f:f5:
         c0:36:d5:cc:87:48:31:72:55:c2:9f:4e:cf:09:a2:ac:9e:cc:
         d8:34:58:6f:2e:0e:f9:5d:d2:ba:48:0a:3f:96:0b:10:17:cd:
         ca:7f:38:2a:99:53:d1:dd:ed:ea:38:e9:c9:ce:a9:27:35:35:
         66:82:f8:7a:ae:19:5f:8e:dd:d7:02:d8:a1:eb:99:07:a4:b1:
         57:11:d0:93:23:91:cd:7b:a5:5f:71:4f:24:ac:f1:6a:31:05:
         88:c4:c1:aa:7b:0c:ee:94:f8:6f:45:6f:12:19:a9:8f:c7:8a:
         48:cd:b7:e6:2b:ad:50:62:13:20:65:b9:26:2c:65:cc:95:77:
         6c:b7:3e:84:ea:dc:c9:9a:ac:c6:60:a7:1c:7b:ea:bc:6b:e7:
         94:77:06:81:8e:84:ab:f7:6a:69:93:3a:dc:e1:25:20:ab:65:
         8e:1e:b1:9b:85:6c:d5:3b:45:90:30:ec:28:dd:fb:c3:27:d0:
         2d:52:5b:0d:8f:d1:83:5d:05:49:a7:4b:89:a2:13:14:2c:1f:
         93:3a:f0:7b:8c:61:bb:a5:51:2d:3f:93:2e:40:30:a2:21:5a:
         b6:94:ee:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org