Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/47F21865C67AD13D2144340B5BB71F3468C03689.cer
File:                     47F21865C67AD13D2144340B5BB71F3468C03689.cer (raw, json)
Hash identifier:          nKHmhw0j3gwHymgouSqNBJJ8oRMT5AZsB26WsohSGw4=
Subject key identifier:   47:F2:18:65:C6:7A:D1:3D:21:44:34:0B:5B:B7:1F:34:68:C0:36:89
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6AE0986AFB5FD56FA6CE18C8277BB8519E81DB8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/47F21865C67AD13D2144340B5BB71F3468C03689.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Mar 2022 19:32:54 +0000
Certificate not after:    Tue 21 Mar 2023 19:37:54 +0000
Subordinate resources:    AS: 264927
                          IP: 168.228.184.0/22
                          IP: 2804:3008::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e0:98:6a:fb:5f:d5:6f:a6:ce:18:c8:27:7b:b8:51:9e:81:db:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 22 19:32:54 2022 GMT
            Not After : Mar 21 19:37:54 2023 GMT
        Subject: CN=47F21865C67AD13D2144340B5BB71F3468C03689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:57:ea:50:a0:da:72:81:fc:4c:e5:92:6d:b1:
                    21:6b:90:f8:0a:41:94:1b:a2:fd:50:d7:d1:f8:7d:
                    28:36:80:ee:c9:0b:cf:5e:66:eb:64:b8:64:68:1f:
                    a2:78:e0:2c:ce:d8:6a:54:84:44:4c:18:19:3d:d3:
                    a1:4a:b0:65:f4:79:e2:6b:d4:d9:a2:4d:79:09:d8:
                    13:9c:78:5c:76:91:77:72:5b:2e:6f:99:b7:bd:d3:
                    f7:81:81:2a:d3:df:54:4d:dd:d5:81:b1:11:e0:8a:
                    51:00:3f:d9:66:f6:58:19:02:80:a5:fd:d2:32:63:
                    12:eb:dc:4c:0c:2b:07:c5:aa:23:05:35:98:63:60:
                    14:c9:d1:0c:ef:b5:47:cf:eb:64:2c:ee:ee:b9:40:
                    b7:cd:a6:6a:ca:22:ac:6e:6f:22:82:ae:35:80:09:
                    eb:e9:c8:8e:ad:00:30:f9:b8:d7:5d:23:cc:fa:3b:
                    f5:9f:da:eb:8c:64:61:32:2c:7c:ff:31:46:73:fc:
                    19:54:f9:2d:cf:34:fe:8e:6c:40:24:79:23:23:e3:
                    c1:bf:a5:30:52:6f:2b:c2:4f:ff:3a:34:6e:f5:c4:
                    02:d1:5c:64:ae:e0:b6:42:20:f7:bc:5d:39:47:61:
                    c0:9e:c4:5f:11:3d:0f:0e:c9:94:f4:56:d2:20:02:
                    cb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:F2:18:65:C6:7A:D1:3D:21:44:34:0B:5B:B7:1F:34:68:C0:36:89
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/47F21865C67AD13D2144340B5BB71F3468C03689.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.184.0/22
                IPv6:
                  2804:3008::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264927

    Signature Algorithm: sha256WithRSAEncryption
         82:77:35:23:48:86:ef:f6:b6:38:be:a9:2f:82:80:fe:62:fe:
         ee:0e:36:ce:88:35:fa:f3:36:cc:c1:b3:40:54:33:7f:2b:bf:
         c9:a7:4f:59:29:32:bb:78:68:c9:8a:36:8d:1a:50:f0:8d:b7:
         3b:6b:8e:88:96:53:d9:d4:4d:2d:a2:fd:7e:40:48:bc:fa:a1:
         03:ac:72:9e:d2:4e:91:1c:6b:f0:27:a8:f5:45:a0:20:13:88:
         8b:a8:9a:67:0d:02:2a:e9:f3:6a:a4:da:33:6c:78:76:36:56:
         f6:ec:21:ba:1c:5f:7b:50:6c:ed:a3:a1:52:85:01:86:9f:a1:
         44:88:f9:cf:ed:7a:3f:fe:ac:98:a2:4e:c7:a1:55:8d:68:e0:
         47:aa:0d:95:cc:0b:11:a7:a6:e2:83:e0:35:c9:54:b2:4c:a8:
         de:99:15:3b:04:b0:56:88:ac:58:e0:9f:c9:d7:73:97:7e:91:
         1e:14:41:ed:28:ed:79:b0:da:f7:a3:8b:f7:fd:10:34:25:13:
         9f:a4:25:3a:c6:c9:2f:68:5e:eb:36:7d:0e:af:f0:3d:4e:16:
         bf:8c:5e:52:03:63:e3:22:f7:ca:37:74:34:d7:59:9c:eb:9f:
         37:c1:5a:88:3c:6a:6a:85:61:8a:19:5c:4d:de:f6:25:a4:45:
         a7:34:fc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org