Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7221093E2126E445F3F628FB1AD47061EE131706.cer
File:                     7221093E2126E445F3F628FB1AD47061EE131706.cer (raw, json)
Hash identifier:          v7VqGDPEZHJr0YdqgdRHQf4wEpS5ZeLEe46JeYc10cg=
Subject key identifier:   72:21:09:3E:21:26:E4:45:F3:F6:28:FB:1A:D4:70:61:EE:13:17:06
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A5E1A066A8CB352A13CCB81D6E04E7A0DC43C84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/7221093E2126E445F3F628FB1AD47061EE131706.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Dec 2023 14:52:19 +0000
Certificate not after:    Thu 19 Dec 2024 14:57:19 +0000
Subordinate resources:    AS: 268331
                          IP: 45.238.112.0/22
                          IP: 2804:4f84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5e:1a:06:6a:8c:b3:52:a1:3c:cb:81:d6:e0:4e:7a:0d:c4:3c:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 21 14:52:19 2023 GMT
            Not After : Dec 19 14:57:19 2024 GMT
        Subject: CN=7221093E2126E445F3F628FB1AD47061EE131706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:da:d8:cc:b7:39:68:12:07:e8:de:f0:9f:57:
                    8c:0d:ab:27:01:16:42:0a:ae:5e:06:0a:f6:61:5c:
                    d5:82:a8:88:73:3e:c7:56:15:a8:ba:12:e6:59:06:
                    39:92:75:30:d9:0d:1f:4f:9f:4f:e9:97:c4:2f:ff:
                    d3:11:ec:19:5d:bd:c1:37:8b:ef:69:35:27:d7:12:
                    c7:1d:a5:a6:a8:b6:97:30:cb:74:01:fa:fb:f3:a4:
                    25:9e:d7:1a:c7:65:2b:27:84:a8:44:dc:9b:39:d7:
                    df:aa:f4:08:ca:89:ef:25:e5:46:02:dd:ac:e1:01:
                    26:bd:26:8d:0e:1c:23:56:04:96:94:75:e3:7c:20:
                    23:5d:e1:13:e2:a6:69:ee:46:84:14:77:95:c6:1b:
                    56:6f:fb:84:49:7a:4d:8a:de:cd:bc:72:88:53:ee:
                    d8:b2:a3:0f:74:6f:72:ce:25:42:e6:b5:b3:fd:fd:
                    59:38:7a:61:5c:53:a1:bf:4f:24:15:13:b5:3f:02:
                    b8:23:82:8d:23:d4:95:41:03:6b:8e:e9:3f:85:e4:
                    ae:de:db:ed:2e:9e:67:a7:8c:79:d0:00:39:cb:76:
                    81:80:a1:d5:3c:d3:91:b9:d1:e0:f3:ef:65:39:63:
                    09:4e:83:cc:94:c3:d9:41:dc:07:f4:14:84:e0:49:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:21:09:3E:21:26:E4:45:F3:F6:28:FB:1A:D4:70:61:EE:13:17:06
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/0/7221093E2126E445F3F628FB1AD47061EE131706.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.112.0/22
                IPv6:
                  2804:4f84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268331

    Signature Algorithm: sha256WithRSAEncryption
         57:ec:8b:cb:cd:76:7f:4b:a6:ea:76:62:f6:42:a5:76:80:aa:
         89:bb:1a:78:00:e0:71:5e:38:83:30:d5:85:ac:1e:b0:7f:40:
         aa:de:cc:e4:86:b2:e4:72:46:36:a4:c4:08:c8:da:0c:8f:ef:
         c2:c8:a7:b8:a0:df:5d:62:e3:9f:a2:3c:bf:17:7f:f2:71:3b:
         57:0f:61:35:e0:ee:6b:1c:50:cf:bf:62:2c:ad:7c:6a:3f:6b:
         12:34:68:1a:8c:76:e8:e6:82:a3:4e:62:00:1c:2e:3f:35:1c:
         48:4b:26:ea:e6:c9:2b:a0:46:11:9d:5d:2e:b8:f7:ec:b5:0c:
         af:da:bc:76:c0:cc:0c:16:42:b7:b1:8a:97:9c:57:54:aa:92:
         e5:f7:d4:e5:ad:a6:f8:60:ee:51:58:8f:6f:cc:f9:6f:26:46:
         18:3d:ac:09:59:fd:dd:be:29:80:8a:7c:05:53:1f:91:33:5c:
         92:b8:2a:c9:f4:1e:06:e9:48:95:91:53:62:ab:06:f4:80:91:
         20:4e:fe:05:0f:f5:ee:b8:a6:33:8a:93:52:eb:f2:4c:55:bb:
         9c:c4:08:f7:f3:ff:8e:84:5e:9f:74:3e:ff:94:bd:56:6c:37:
         22:5b:b6:16:47:72:7c:de:9c:18:f6:4b:19:20:a1:83:66:ce:
         58:a9:7d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org