Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5441C89573DCAFFFD99B4A1F74D03AF6039AA4A1.cer
File:                     5441C89573DCAFFFD99B4A1F74D03AF6039AA4A1.cer (raw, json)
Hash identifier:          sTCOml0mzR+uUvSX98LukSVKBjSWhx2fzbnzQp3CtXY=
Subject key identifier:   54:41:C8:95:73:DC:AF:FF:D9:9B:4A:1F:74:D0:3A:F6:03:9A:A4:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       323B8CEF23970692F790852FCDE962FB687EB89C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/0/5441C89573DCAFFFD99B4A1F74D03AF6039AA4A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Oct 2021 13:13:16 +0000
Certificate not after:    Tue 25 Oct 2022 13:18:16 +0000
Subordinate resources:    AS: 270664
                          IP: 186.65.92.0/22
                          IP: 2804:6f80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3b:8c:ef:23:97:06:92:f7:90:85:2f:cd:e9:62:fb:68:7e:b8:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 26 13:13:16 2021 GMT
            Not After : Oct 25 13:18:16 2022 GMT
        Subject: CN=5441C89573DCAFFFD99B4A1F74D03AF6039AA4A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:5a:83:70:55:ae:c3:a6:de:79:81:32:0d:
                    93:dd:d6:c7:9e:a8:6e:a7:ea:32:1b:dd:b6:2c:bf:
                    57:6c:4c:f9:27:03:d1:1e:7b:64:28:56:4a:89:80:
                    aa:b3:74:2f:69:59:53:f8:fd:ac:7b:85:e3:96:1c:
                    46:60:34:13:57:a1:8c:76:b7:d2:b8:77:58:ce:c1:
                    38:fd:5e:e3:47:d6:26:23:11:19:15:4e:fc:44:9f:
                    d2:ec:12:ad:37:d4:1c:d9:3c:87:97:28:07:56:60:
                    80:b2:0f:97:f9:55:47:00:7f:10:23:33:3f:63:99:
                    f4:da:a6:ce:ac:1b:4f:2a:13:20:51:39:33:de:07:
                    e2:04:bb:fb:35:49:1b:6f:29:19:70:59:25:aa:00:
                    81:40:6c:45:c3:19:f2:98:99:3a:85:38:50:35:dd:
                    ad:38:f6:97:9c:44:ee:0f:3e:27:28:f7:7d:b7:fe:
                    ac:ae:1e:ca:2d:4e:26:5b:74:d2:f0:92:c9:5a:54:
                    5e:07:42:4a:52:cc:74:93:51:ef:30:c4:7d:06:e5:
                    35:99:fe:fa:fa:0f:1c:a1:f7:80:a4:c5:e5:97:7f:
                    dd:33:ef:99:4c:1b:57:9b:bd:4f:55:99:c3:43:56:
                    73:8f:d1:3b:e5:9e:c0:83:d8:00:7d:85:fe:cb:9f:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                54:41:C8:95:73:DC:AF:FF:D9:9B:4A:1F:74:D0:3A:F6:03:9A:A4:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/0/5441C89573DCAFFFD99B4A1F74D03AF6039AA4A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.92.0/22
                IPv6:
                  2804:6f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270664

    Signature Algorithm: sha256WithRSAEncryption
         72:e8:7f:98:eb:50:18:17:a7:a3:21:30:e1:0d:96:af:d0:17:
         db:47:53:fb:9e:90:c0:85:db:14:fc:8a:91:28:c2:fd:5f:42:
         17:84:1a:0c:39:2f:59:3b:c8:37:50:12:10:66:a1:31:67:88:
         25:07:69:1a:4b:ca:c5:74:22:b9:b9:82:b8:ea:7f:c2:f1:31:
         43:1f:cc:e0:70:3f:30:ff:bf:e0:70:14:1b:e4:62:3b:36:83:
         4b:c8:63:c4:3c:44:50:0f:7e:a6:6b:5b:6e:51:46:32:6c:46:
         7c:2e:ed:29:ce:8d:4b:b4:bd:0a:12:cc:8c:62:2d:d0:42:ad:
         20:02:58:07:bf:22:2f:4c:18:49:22:a9:d3:21:79:e3:6f:39:
         b8:ca:83:1d:bf:2b:03:d7:c3:77:a5:86:aa:f5:27:7e:9c:c8:
         9e:a1:62:1c:e1:a5:82:ea:68:5f:75:65:bc:db:6e:6c:4e:1c:
         b8:a6:9a:e1:f5:82:bf:f8:73:ed:9a:b6:f5:02:54:56:5c:31:
         0b:ba:36:00:78:f2:27:c8:c8:2a:60:02:22:00:1c:f6:a3:9b:
         21:c9:b4:8f:3a:62:39:f6:34:c7:5f:9a:37:b0:29:98:2b:36:
         93:a8:46:2e:98:18:50:80:f7:2e:73:96:23:65:b3:ae:cc:03:
         dd:50:66:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org