Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/69250002F2E1D855A06C021E9997D0E063B84D7D.cer
File:                     69250002F2E1D855A06C021E9997D0E063B84D7D.cer (raw, json)
Hash identifier:          OBWS99tAmobRdCfqzpMnrKgQwmvVOTTxC4mCCyph4OI=
Subject key identifier:   69:25:00:02:F2:E1:D8:55:A0:6C:02:1E:99:97:D0:E0:63:B8:4D:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       56F66D364276F7F229BB57DEE83C5E5E52E0DC50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/45EM2KuJCxUqV3FNZktUM3ZxaqkPdrG2tsmo2ze3HNTu/1/69250002F2E1D855A06C021E9997D0E063B84D7D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/45EM2KuJCxUqV3FNZktUM3ZxaqkPdrG2tsmo2ze3HNTu/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Jan 2023 16:14:29 +0000
Certificate not after:    Mon 08 Jan 2024 16:19:29 +0000
Subordinate resources:    AS: 270771
                          IP: 179.109.120.0/22
                          IP: 2804:7128::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f6:6d:36:42:76:f7:f2:29:bb:57:de:e8:3c:5e:5e:52:e0:dc:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 16:14:29 2023 GMT
            Not After : Jan  8 16:19:29 2024 GMT
        Subject: CN=69250002F2E1D855A06C021E9997D0E063B84D7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ef:83:c9:3c:37:e9:bf:7e:c6:31:f1:5f:eb:
                    ad:c9:db:c9:a1:d4:ec:14:58:1b:82:4e:c8:0e:6f:
                    1c:ea:f9:1a:94:85:0d:92:b2:1d:06:03:64:bb:28:
                    36:c6:51:81:96:ce:e9:aa:c0:cc:ed:08:10:ae:06:
                    5e:43:03:dd:75:60:6a:b4:65:3c:ca:db:86:54:11:
                    ae:ab:fb:0b:c9:91:7c:8c:7a:db:47:e1:7a:15:31:
                    b3:df:9e:42:28:2b:50:69:e8:a4:b4:89:9e:f4:ee:
                    ac:0b:a8:17:1c:be:09:ae:29:d2:15:94:d6:cd:b8:
                    32:f4:dd:df:76:84:b8:1b:b2:4b:bf:43:32:2b:a0:
                    89:e5:9d:f7:aa:76:72:22:7d:96:23:1b:e4:e0:9a:
                    99:1a:ca:02:4a:3e:fe:9d:88:bb:fb:34:3e:de:ae:
                    24:af:59:de:6e:2a:ea:c3:86:cc:32:5a:d9:71:51:
                    da:8a:49:3d:14:f9:7b:22:94:1a:cc:4f:c2:39:10:
                    fc:57:52:ce:21:a9:e2:ba:db:46:60:22:ff:92:1a:
                    22:a3:58:9a:bf:1e:db:3e:cf:0b:18:87:ca:8d:a6:
                    4d:33:aa:06:c4:be:72:d5:ea:ea:b7:f0:a9:5c:1d:
                    b6:a9:1b:f7:b9:74:39:e4:88:8c:d7:08:7b:6f:6a:
                    97:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:25:00:02:F2:E1:D8:55:A0:6C:02:1E:99:97:D0:E0:63:B8:4D:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/45EM2KuJCxUqV3FNZktUM3ZxaqkPdrG2tsmo2ze3HNTu/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/45EM2KuJCxUqV3FNZktUM3ZxaqkPdrG2tsmo2ze3HNTu/1/69250002F2E1D855A06C021E9997D0E063B84D7D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.109.120.0/22
                IPv6:
                  2804:7128::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270771

    Signature Algorithm: sha256WithRSAEncryption
         4e:8c:90:e9:5c:2a:d7:a9:0d:80:f2:79:1c:a0:2b:50:93:e0:
         50:71:78:1f:43:99:89:b8:91:ab:78:ec:f0:91:dc:53:b7:c5:
         5d:8e:28:ca:58:2b:1c:e3:a4:a9:3c:b6:7b:40:8f:78:36:2a:
         10:2d:eb:51:ff:35:14:70:7d:87:52:12:87:af:49:1e:95:b1:
         5e:07:0a:b0:2c:bb:e9:ad:0d:01:50:e1:fe:1f:4a:29:2f:e3:
         b2:d1:b4:11:c5:f7:bf:fb:6d:d1:9b:5a:14:8c:62:fb:52:35:
         65:4e:60:cf:8b:62:2b:4c:d0:18:3c:7c:bd:13:f2:3d:7e:a6:
         2f:94:a8:8e:e6:c6:8a:8b:d3:89:31:55:03:6d:08:e3:56:2d:
         62:f4:32:b8:b4:e9:2d:da:f5:08:14:04:97:0b:74:3b:0e:80:
         48:9a:6f:df:0c:a9:23:d6:ce:7f:50:1a:8f:60:db:5c:c1:5b:
         40:f8:ad:e5:e6:35:5d:43:fe:fe:9e:6d:36:51:6d:0e:6e:4b:
         ac:52:d1:8b:f3:2e:71:ad:39:70:58:a0:a0:ab:30:2e:ec:c5:
         47:7d:af:08:24:1f:1c:3f:82:55:25:0c:9f:29:10:bf:70:b8:
         0b:c8:a1:3f:6c:7a:2e:e0:64:a0:26:70:6e:0a:51:dc:aa:b3:
         4d:d9:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org