Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6743A4412889174AEDC50685B9F5B84FCB2DD33F.cer
File:                     6743A4412889174AEDC50685B9F5B84FCB2DD33F.cer (raw, json)
Hash identifier:          hB+jXNqDaSor0yXEt0wAOaUxcoWAY4c2SXsDi9vNC9I=
Subject key identifier:   67:43:A4:41:28:89:17:4A:ED:C5:06:85:B9:F5:B8:4F:CB:2D:D3:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B8033B8F28905C61D4B35399ECC06F6D8704AAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/6743A4412889174AEDC50685B9F5B84FCB2DD33F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Sep 2022 13:42:51 +0000
Certificate not after:    Tue 26 Sep 2023 13:47:51 +0000
Subordinate resources:    AS: 264384
                          IP: 131.161.176.0/22
                          IP: 2804:1da8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:80:33:b8:f2:89:05:c6:1d:4b:35:39:9e:cc:06:f6:d8:70:4a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 13:42:51 2022 GMT
            Not After : Sep 26 13:47:51 2023 GMT
        Subject: CN=6743A4412889174AEDC50685B9F5B84FCB2DD33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e2:f3:b0:bf:c9:86:8c:35:75:dc:dd:a6:62:
                    35:83:e8:41:30:dd:51:86:41:d8:df:1a:ea:bb:42:
                    49:79:2d:d7:b1:57:f2:f7:70:1a:9a:fa:69:95:b2:
                    19:19:5a:cd:dd:1f:3b:ff:9e:fd:02:d0:bc:69:25:
                    52:d7:bd:02:55:c2:68:b9:9e:23:24:e6:ba:4d:38:
                    e1:38:b2:4c:1b:7b:82:10:b8:10:4d:8e:df:40:f5:
                    c6:02:3b:2a:45:c2:2e:29:d1:0c:d8:41:15:aa:37:
                    da:ea:f2:10:d0:88:88:f4:3d:d2:85:ee:30:6e:fb:
                    88:7b:38:29:3a:bc:8c:85:bf:52:d2:36:06:b1:78:
                    51:71:12:cb:2e:6d:37:95:8e:25:49:c9:90:6e:c8:
                    68:0a:5b:34:a5:ca:31:e5:4a:43:20:b5:95:11:e6:
                    af:a4:dc:2b:8e:37:4d:40:83:81:1d:20:c9:f6:e4:
                    27:1f:78:0e:d7:5b:8d:38:fb:c5:e8:92:41:7b:1d:
                    e7:96:23:c8:23:9d:44:2c:4a:ce:b7:c3:c4:91:bc:
                    19:c1:94:bc:05:d7:72:04:64:ac:12:3f:af:a6:c8:
                    33:00:c0:14:b6:a0:70:1c:cd:c2:99:9d:7c:be:58:
                    d3:63:88:ac:11:b9:f9:7f:7f:e4:f3:04:02:ff:5c:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:43:A4:41:28:89:17:4A:ED:C5:06:85:B9:F5:B8:4F:CB:2D:D3:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4cvYM6Wvw3CkBjc9H517eevh63zkdXPTYTWySBND7vv/1/6743A4412889174AEDC50685B9F5B84FCB2DD33F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.176.0/22
                IPv6:
                  2804:1da8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264384

    Signature Algorithm: sha256WithRSAEncryption
         a2:24:98:c4:94:4f:e1:7d:ea:8f:bf:bb:e6:e6:99:8f:a3:a5:
         7e:9b:77:fe:68:5d:40:a8:69:71:74:14:70:f8:88:6f:5e:50:
         1e:9d:cd:8d:a2:f2:b8:87:3a:f2:4a:74:49:b7:dd:7f:bb:2e:
         04:fc:e8:6a:1e:d0:72:d8:af:6e:06:74:be:83:7c:0a:49:d9:
         30:fa:ac:30:9d:fc:7b:7c:9b:b1:c5:b8:02:01:63:6f:3f:41:
         be:0c:82:19:a5:79:b6:5e:8d:22:0b:f5:01:c0:ea:b0:cb:c8:
         d9:d6:3d:2c:2b:6e:b7:d1:2c:b1:25:0d:d4:80:29:ff:5f:c9:
         5a:06:04:67:a1:1f:af:8b:1c:b2:3f:bf:c1:9d:65:52:4b:36:
         2d:f1:2f:ed:31:a1:ec:a3:33:2c:df:60:cc:25:55:04:16:17:
         fe:c1:68:a3:7a:1a:d6:70:df:b0:fc:6c:21:34:d9:1f:73:1c:
         2c:07:4c:92:1e:e8:ac:89:08:19:8b:39:02:0e:33:f4:db:8a:
         9a:70:c8:6d:fd:0d:c7:3f:1d:93:c9:cd:78:2e:f3:b3:10:2f:
         25:8c:57:40:21:f1:78:dc:d0:e0:72:1e:87:94:b2:4a:7d:44:
         8d:6d:45:94:c0:a1:ae:ba:00:ec:b7:4f:63:12:9d:b1:12:8f:
         04:ac:6f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:30 2024 by rpki-client on console-ams.rpki-client.org