Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0.cer
File:                     67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0.cer (raw, json)
Hash identifier:          bvhmNk1ffCd92SoRYsTZGCavQA1jcPJVyTUy75WpYMU=
Subject key identifier:   67:F9:F3:AF:B6:CC:A6:AC:41:CA:29:62:B8:CD:ED:84:54:09:A8:F0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10224A8B02210683F01F7FF78FE4187508332AD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Apr 2022 14:50:42 +0000
Certificate not after:    Thu 06 Apr 2023 14:55:42 +0000
Subordinate resources:    AS: 266202
                          IP: 192.140.36.0/22
                          IP: 2804:3c4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:22:4a:8b:02:21:06:83:f0:1f:7f:f7:8f:e4:18:75:08:33:2a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  7 14:50:42 2022 GMT
            Not After : Apr  6 14:55:42 2023 GMT
        Subject: CN=67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b3:d2:cf:a1:ba:06:2e:7e:cb:47:8b:d8:3d:
                    f5:5c:1b:93:60:4b:e0:02:87:1d:7b:6b:ec:89:51:
                    6a:2b:91:d9:8c:3a:63:dc:af:49:1b:87:f9:50:15:
                    39:9a:89:5a:9e:e1:99:78:62:11:36:94:9a:96:eb:
                    6f:75:db:9c:44:bc:fd:e0:58:85:bf:f8:c1:a9:fb:
                    0c:6e:bf:4a:b6:fa:b1:36:65:60:be:bd:db:54:10:
                    78:01:60:2a:67:33:3c:24:81:4b:a5:f4:13:7f:70:
                    19:76:06:cf:b5:49:d7:22:13:07:b9:8d:53:48:50:
                    c5:84:ba:90:7f:c0:ba:e1:9f:28:0a:bb:85:b9:e5:
                    d7:4e:19:a7:99:94:51:3f:ae:43:6d:38:33:cc:92:
                    e9:3a:28:12:a3:aa:b1:a1:54:ff:be:5f:e8:26:f3:
                    5c:a2:82:63:29:44:eb:55:aa:25:e5:0b:c6:d4:58:
                    f8:2e:76:95:d8:cf:12:e0:c9:33:d0:0a:70:df:2c:
                    78:58:2d:54:b0:fb:3e:3a:58:d4:f7:53:92:c2:fa:
                    5a:19:10:21:cd:4e:e8:cf:82:40:8a:dd:23:71:46:
                    0b:11:67:d1:b0:6e:df:03:20:95:12:85:92:c3:ce:
                    26:b1:3c:a3:26:93:bf:06:56:f2:ea:7c:dd:94:05:
                    4f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:F9:F3:AF:B6:CC:A6:AC:41:CA:29:62:B8:CD:ED:84:54:09:A8:F0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ugP1uLhJi9YonWDt7PT7NLuZwdbM8Vek1L37FRgJe7V/0/67F9F3AFB6CCA6AC41CA2962B8CDED845409A8F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.36.0/22
                IPv6:
                  2804:3c4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266202

    Signature Algorithm: sha256WithRSAEncryption
         05:b9:06:5e:38:92:96:16:33:f4:8b:3c:ae:3f:0e:5b:85:d2:
         b8:8e:48:8f:1e:9f:39:8b:9f:13:29:fe:11:4e:52:6d:7f:ed:
         06:ff:f2:ed:90:58:33:44:b2:bf:5b:cf:25:b5:40:f4:e7:de:
         0b:82:6e:e2:de:3f:24:6c:1f:b5:2e:29:1b:8f:63:9f:54:58:
         38:2a:6c:85:68:8c:e3:08:3c:1b:1f:23:c5:c5:4a:36:f0:73:
         33:ec:f9:0b:ac:91:91:c8:f5:ad:dd:cc:02:4c:54:dc:37:ff:
         41:06:f5:b6:76:7c:57:70:56:18:e4:ac:b3:b5:b6:6d:9d:65:
         57:cc:83:ec:d8:f9:99:f0:15:b9:1c:f0:69:86:9f:51:ac:e2:
         49:1f:07:10:56:a3:b3:f9:b0:88:d1:2a:c9:26:b0:bd:65:25:
         0e:84:04:de:02:a2:53:e8:33:fa:27:0c:47:c0:23:63:c1:98:
         56:95:dd:6b:38:18:2c:a5:36:92:94:ef:e6:a6:bb:9b:3e:b0:
         b8:0c:f4:b7:89:32:b0:d9:e4:ee:0f:fd:01:24:38:ef:95:8e:
         67:2f:61:34:25:4b:ec:5d:f2:ef:bb:c1:a8:90:d7:99:2d:b4:
         42:f7:e0:f1:cd:1f:0a:9f:74:0f:29:09:9f:f5:c1:40:4c:48:
         56:10:64:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org