Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7451D0120506AE8A3C3FE6A31D4196898654FF55.cer
File:                     7451D0120506AE8A3C3FE6A31D4196898654FF55.cer (raw, json)
Hash identifier:          mc8roG1HQmLsYcdwvvtwq8AIaU6GsI9IadW86oZ2YJs=
Subject key identifier:   74:51:D0:12:05:06:AE:8A:3C:3F:E6:A3:1D:41:96:89:86:54:FF:55
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5736BECAB226AFC8CB734B97FCA706406E619FF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/7451D0120506AE8A3C3FE6A31D4196898654FF55.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Nov 2022 13:41:29 +0000
Certificate not after:    Thu 09 Nov 2023 13:46:29 +0000
Subordinate resources:    AS: 265066
                          IP: 168.121.200.0/22
                          IP: 170.79.96.0/22
                          IP: 170.231.112.0/22
                          IP: 179.125.20.0/22
                          IP: 2804:3244::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:36:be:ca:b2:26:af:c8:cb:73:4b:97:fc:a7:06:40:6e:61:9f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 10 13:41:29 2022 GMT
            Not After : Nov  9 13:46:29 2023 GMT
        Subject: CN=7451D0120506AE8A3C3FE6A31D4196898654FF55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2c:0d:9b:46:4d:c7:6b:7f:bc:d3:27:74:cd:
                    23:bd:0e:4a:e4:d6:d9:da:a5:a8:05:d8:9e:79:46:
                    27:88:1c:44:ef:85:77:dc:89:ad:99:84:9c:ea:a1:
                    3c:33:78:69:e5:2f:bd:30:5f:16:eb:a8:8e:3e:7b:
                    81:78:1f:8b:7c:f0:ef:bd:e4:c4:8f:68:80:cf:77:
                    5a:37:a5:ba:b6:0d:54:41:24:6c:7b:df:d0:3b:9b:
                    c5:e2:0e:9e:04:70:61:68:26:99:cb:4a:02:3f:40:
                    54:05:bc:df:0c:7e:ba:c6:f3:b3:f8:57:b2:69:83:
                    42:1f:d9:50:72:be:c8:1d:cf:64:b1:b2:5f:c9:76:
                    f6:37:39:fc:37:4e:c7:94:52:f2:e5:f3:47:a3:68:
                    15:1f:ac:d3:d6:14:14:23:24:31:98:f2:56:ac:4d:
                    a2:60:b2:55:22:04:ac:2a:22:3f:df:1e:1c:c2:5b:
                    6a:99:69:8e:45:2d:3a:ef:cf:73:4f:b0:72:fe:73:
                    05:f8:dc:c7:28:f2:b8:b5:1f:2b:3b:90:c1:ff:5f:
                    3b:f5:4a:82:04:0a:f0:5b:3a:9e:1c:7a:b0:37:07:
                    5e:3b:86:3b:c5:e8:43:1b:01:f8:7b:70:89:7b:7e:
                    fe:6b:2b:45:38:14:16:0c:35:a4:58:83:f4:8e:a7:
                    47:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                74:51:D0:12:05:06:AE:8A:3C:3F:E6:A3:1D:41:96:89:86:54:FF:55
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/7451D0120506AE8A3C3FE6A31D4196898654FF55.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/22
                  170.79.96.0/22
                  170.231.112.0/22
                  179.125.20.0/22
                IPv6:
                  2804:3244::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265066

    Signature Algorithm: sha256WithRSAEncryption
         ae:99:f5:c8:23:22:fc:a8:60:fc:7c:01:a3:0c:19:7d:e0:ea:
         35:4a:ee:d1:97:79:dc:4a:8f:b1:d0:6b:d0:49:e1:03:11:34:
         99:06:40:3c:1a:a7:09:a3:5b:ce:f8:4b:4d:f4:ef:84:a9:90:
         82:76:4d:94:66:0b:8a:d0:06:3e:31:a6:1c:d6:f9:fb:b2:f1:
         15:53:22:bb:59:ac:8e:01:1f:57:28:96:48:5c:67:15:1b:de:
         99:bc:d7:c2:89:5f:9a:39:ea:90:29:d6:99:44:76:56:db:61:
         3b:d6:f3:03:27:c6:c5:ad:0f:45:31:c9:be:0c:40:bb:18:b9:
         de:c0:64:44:88:68:29:07:9b:f3:fc:cc:a0:b0:e5:e3:67:02:
         58:80:d1:6a:11:3f:92:ca:47:30:5d:51:df:60:70:51:10:6b:
         e2:d8:d0:48:10:8c:c3:c6:68:5e:33:e0:88:71:14:55:a7:ca:
         2d:b5:d7:4f:16:eb:2d:1a:d2:d9:85:b3:68:d6:fb:2e:46:68:
         33:4b:76:94:3c:a5:af:dd:b3:54:4f:63:78:56:3d:6e:a8:fb:
         5a:29:1e:c6:b2:df:09:0f:a1:06:20:47:b6:e6:ae:7c:5d:6c:
         07:43:cc:d1:d5:bb:53:54:8c:5c:a8:e0:49:23:13:3a:24:a2:
         9d:c4:f5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org