Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/696C7FDBC89501359968A6737BF462C540AA5CFE.cer
File:                     696C7FDBC89501359968A6737BF462C540AA5CFE.cer (raw, json)
Hash identifier:          NJXq5D4FA9xltmjoqNvx+I883xfkbTwWL0Chd1ELBOQ=
Subject key identifier:   69:6C:7F:DB:C8:95:01:35:99:68:A6:73:7B:F4:62:C5:40:AA:5C:FE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6B25BE05FA3655F4FB5F1F7A5FF6A0B53BB737E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/696C7FDBC89501359968A6737BF462C540AA5CFE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Jul 2021 12:37:14 +0000
Certificate not after:    Fri 08 Jul 2022 12:42:14 +0000
Subordinate resources:    AS: 265438
                          IP: 168.195.212.0/22
                          IP: 2804:3424::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:25:be:05:fa:36:55:f4:fb:5f:1f:7a:5f:f6:a0:b5:3b:b7:37:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  9 12:37:14 2021 GMT
            Not After : Jul  8 12:42:14 2022 GMT
        Subject: CN=696C7FDBC89501359968A6737BF462C540AA5CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:62:f4:32:72:1f:5d:4d:56:bc:1c:1b:37:b4:
                    c2:4a:42:ce:e0:62:75:cd:7a:f1:b9:cf:4d:8f:ef:
                    72:0e:64:83:03:ab:1c:d2:5a:28:07:6e:08:e8:01:
                    a7:fa:ea:9f:81:4d:4c:d8:b2:0c:96:28:8a:62:ea:
                    10:60:49:a4:13:f5:69:41:ce:57:21:ec:29:94:a3:
                    5d:35:ab:00:95:ed:33:9c:0c:7d:d1:55:1e:e1:05:
                    64:f1:26:91:f9:3c:37:2a:00:b1:ad:9c:70:44:fe:
                    cc:1a:07:48:14:b4:01:6f:89:ad:d9:60:5e:8f:3b:
                    f5:a8:df:28:4b:f4:bb:fb:a5:e6:60:49:5c:44:e8:
                    d4:d5:2d:27:bc:84:12:ed:67:6d:b0:17:22:41:d5:
                    9c:bd:ac:c9:8e:5a:c8:9a:96:42:ca:fc:84:15:29:
                    5b:03:e3:ba:c2:8b:c0:c3:3c:0c:02:3e:ca:e1:a4:
                    5f:ff:fd:96:82:5e:09:04:5d:be:f8:ee:d9:e5:aa:
                    d0:13:c7:c3:5a:72:10:21:9f:1e:0a:94:01:b4:ca:
                    f6:cd:12:09:44:cc:8a:17:9a:00:d4:e0:1f:11:0a:
                    92:72:a0:11:e0:04:d0:e0:93:07:e8:8b:96:55:de:
                    f1:35:e5:7f:3c:88:1a:62:fb:f9:56:2a:2f:ad:4d:
                    3a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:6C:7F:DB:C8:95:01:35:99:68:A6:73:7B:F4:62:C5:40:AA:5C:FE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6aFyUzsQv515RBuYaapg7ot8v2yBWytcpfn57shREgHY/0/696C7FDBC89501359968A6737BF462C540AA5CFE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.212.0/22
                IPv6:
                  2804:3424::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265438

    Signature Algorithm: sha256WithRSAEncryption
         55:57:9e:0a:60:dd:2e:ff:8a:ce:37:03:6d:df:d8:09:bd:3a:
         4a:ee:f5:4a:f3:49:ba:66:f7:15:a7:5b:62:ff:d9:26:c7:69:
         24:59:ca:d2:ad:70:3b:50:aa:32:28:f5:fb:79:a9:f8:17:3a:
         73:aa:eb:ec:a0:f4:51:d9:4a:a8:d2:55:88:5c:8f:6b:1c:0a:
         55:c3:d6:a0:36:1d:59:32:4f:30:d9:51:a3:67:9a:db:52:3a:
         6e:9f:ef:ea:8a:d4:6f:1c:93:62:60:f2:bf:4c:1c:4c:3d:84:
         d3:c5:26:75:fb:9a:88:57:95:e2:ff:75:f8:e6:24:88:9d:2a:
         0a:c3:92:41:db:80:55:50:4e:4b:e1:09:f6:ae:20:e0:63:74:
         81:5d:e8:6b:eb:6d:da:3d:f1:9e:12:a2:d6:a3:17:41:48:84:
         2a:5b:ee:65:9e:9d:1c:52:e6:fc:8e:d1:c6:3a:80:ca:f1:b7:
         91:73:c0:42:7a:c9:c6:78:99:38:f4:12:f6:5a:18:02:49:4e:
         9f:4b:d2:5d:87:39:8a:39:d2:2f:33:27:cf:14:4b:1b:30:cf:
         36:59:6e:a9:fa:5d:f8:3b:ed:a6:99:de:2f:46:a8:20:fa:c9:
         18:d9:44:4d:eb:0a:b2:98:e1:49:9d:23:5b:02:67:86:21:27:
         f3:ee:d5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org