Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.cer
File:                     44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.cer (raw, json)
Hash identifier:          kH1oCUtdh21xKOC1N+rT5FW7G122LQWH02NUGLjUI2s=
Subject key identifier:   44:BC:B0:CB:D8:B6:99:5E:11:5D:02:1F:55:65:C1:A2:5F:BF:52:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2D37B870ABB1EF2247B05953C0D60D1696F7845D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Nov 2021 21:10:12 +0000
Certificate not after:    Wed 16 Nov 2022 21:15:12 +0000
Subordinate resources:    AS: 265224
                          IP: 167.250.216.0/22
                          IP: 170.239.40.0/22
                          IP: 2804:2c84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:37:b8:70:ab:b1:ef:22:47:b0:59:53:c0:d6:0d:16:96:f7:84:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 17 21:10:12 2021 GMT
            Not After : Nov 16 21:15:12 2022 GMT
        Subject: CN=44BCB0CBD8B6995E115D021F5565C1A25FBF52AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f1:77:6c:3c:3f:70:82:8e:b2:dd:fd:d8:db:
                    de:8b:a3:33:2d:28:6c:bf:20:19:9c:b1:fd:be:ed:
                    66:d3:ab:f0:35:8f:8d:73:41:fe:c0:16:9c:64:7d:
                    db:2c:87:ad:2c:ca:2a:c1:4a:58:fc:1f:e2:57:35:
                    73:54:72:c0:9c:4c:8c:ef:f4:ad:39:c7:b6:df:8d:
                    b6:4e:99:ca:e6:f0:3e:e3:c3:ed:78:d3:57:13:7c:
                    54:dd:2e:67:ce:55:55:14:7a:c2:b9:4d:97:69:77:
                    63:8d:6c:27:e1:ea:88:24:e0:c9:a8:a8:04:3f:21:
                    15:ed:5f:24:b3:b5:b6:23:61:65:d8:91:40:ef:e3:
                    74:28:e9:3a:54:40:a4:b8:24:18:37:a5:73:fb:8a:
                    5c:57:c2:4c:d6:76:9f:9e:1f:08:ed:48:eb:de:31:
                    1d:b0:fb:3c:31:89:e4:9d:5e:e0:38:bc:17:ad:d4:
                    14:27:a2:6d:80:a8:75:b3:15:a4:9d:52:c5:98:15:
                    9e:1d:e5:bc:f6:08:3d:e2:10:8f:36:4e:b1:8d:68:
                    36:62:af:8c:55:71:f2:cf:50:d6:11:b9:a8:78:f0:
                    22:df:5a:9a:83:b4:64:b0:41:4c:ea:3f:10:69:1e:
                    1a:b5:4a:16:8c:70:47:59:58:e5:e7:d3:43:30:26:
                    53:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                44:BC:B0:CB:D8:B6:99:5E:11:5D:02:1F:55:65:C1:A2:5F:BF:52:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5zEyNAWFj4Wr75NTsavQUcKTsryYqhzEgqdMyzvnd6et/0/44BCB0CBD8B6995E115D021F5565C1A25FBF52AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.216.0/22
                  170.239.40.0/22
                IPv6:
                  2804:2c84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265224

    Signature Algorithm: sha256WithRSAEncryption
         13:39:f4:8a:3a:7d:07:10:8e:b8:40:86:a5:e0:94:7d:3d:a6:
         24:87:83:f4:5f:ce:a2:c7:a0:05:24:1c:9d:89:cd:89:3e:b6:
         5a:92:00:f6:a4:6d:76:05:f7:bd:34:3f:d3:0f:8a:b7:c9:7a:
         85:8f:8b:c6:40:a5:3d:1e:ea:b8:3a:c7:90:02:e5:8e:ce:4d:
         c4:41:5e:ff:06:7a:ff:71:4b:6f:ae:f0:9d:c0:ab:d5:48:4b:
         69:21:18:e2:90:ae:20:91:82:31:f0:37:af:f7:ab:07:78:b4:
         27:67:ca:b8:ea:7b:b6:dd:f6:30:a3:96:6b:89:d3:56:6c:e9:
         44:9a:f9:8f:d8:34:33:7c:61:47:6f:46:d4:35:2d:26:28:f6:
         88:68:90:df:1f:2c:8c:f3:51:00:1f:73:33:86:42:90:f1:3a:
         20:17:f4:b0:62:80:0b:54:36:cb:d8:5b:10:63:07:e5:92:f7:
         6f:2d:d5:4e:ff:a9:1a:d8:68:68:3b:60:60:d1:fd:3a:d1:8d:
         dd:0b:49:67:12:ac:e6:67:84:0d:3a:a7:02:7e:a0:e5:7c:a2:
         ad:23:59:23:ed:88:ee:1f:8f:32:2f:ba:23:4b:95:77:af:fb:
         98:c8:dd:0e:de:8a:fa:1e:ec:56:e9:00:9a:c7:93:39:d7:a6:
         8e:20:5a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org