Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/80CCE5DC17368603D854F7805B1D4566D307DB0B.cer
File:                     80CCE5DC17368603D854F7805B1D4566D307DB0B.cer (raw, json)
Hash identifier:          8LmH8t/cey9cKlnmcfU/nSRxEKXtwBnhh8YQMYlbiCU=
Subject key identifier:   80:CC:E5:DC:17:36:86:03:D8:54:F7:80:5B:1D:45:66:D3:07:DB:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04343975466FC28BB58543A08B645F13CE6ECEFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/80CCE5DC17368603D854F7805B1D4566D307DB0B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 20 Sep 2022 22:52:07 +0000
Certificate not after:    Tue 19 Sep 2023 22:57:07 +0000
Subordinate resources:    AS: 264999
                          IP: 170.84.76.0/22
                          IP: 2804:3130::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:34:39:75:46:6f:c2:8b:b5:85:43:a0:8b:64:5f:13:ce:6e:ce:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 20 22:52:07 2022 GMT
            Not After : Sep 19 22:57:07 2023 GMT
        Subject: CN=80CCE5DC17368603D854F7805B1D4566D307DB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:a1:83:23:aa:19:da:a3:5e:fd:12:9c:1c:
                    b2:88:d5:eb:0e:20:f0:15:0e:c4:bd:c9:e5:e0:70:
                    34:6b:d2:67:07:6f:cd:db:32:a2:20:52:dc:f5:1d:
                    b7:a9:e2:44:5e:54:67:aa:04:a7:ec:07:ca:45:42:
                    62:d9:e7:88:81:20:89:e1:62:83:c3:6d:1b:28:6e:
                    df:73:b8:f4:c2:22:5a:a8:c0:db:3a:80:2c:d4:dd:
                    0e:57:71:56:7c:08:d1:5b:d9:e4:a9:d5:fb:3b:93:
                    88:0a:ac:0f:75:da:d4:d4:f0:25:c8:f8:52:18:cc:
                    cd:88:39:0d:35:a1:92:f0:83:f3:f9:bb:d0:38:0e:
                    f1:e8:7b:d3:d3:ad:26:d5:45:b4:e5:35:a0:63:9e:
                    1c:5a:13:73:a5:94:1b:07:f8:c0:7d:72:90:92:2b:
                    70:65:ac:37:53:d6:cc:33:87:16:bb:04:da:e0:b6:
                    bf:80:59:fd:8b:90:46:89:99:22:8d:27:52:80:25:
                    1b:a2:4e:97:65:67:32:7f:60:51:e0:6a:d9:6a:b9:
                    c8:05:5f:9b:f7:9a:1e:c1:bd:ce:62:06:8c:82:56:
                    0e:86:e6:7e:8d:36:56:05:b1:42:ba:96:a7:6c:db:
                    f0:80:b7:ca:89:73:0c:4d:ad:91:d8:1a:da:60:c2:
                    e1:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:CC:E5:DC:17:36:86:03:D8:54:F7:80:5B:1D:45:66:D3:07:DB:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Eg1jgK2EZ5zxoGsFMZDkmeReoaaiYwEnqx5rwPAQvMxN/0/80CCE5DC17368603D854F7805B1D4566D307DB0B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.76.0/22
                IPv6:
                  2804:3130::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264999

    Signature Algorithm: sha256WithRSAEncryption
         ae:98:8b:a1:92:3a:68:48:de:e2:3d:ca:e1:66:dd:f5:a0:78:
         f4:82:34:08:8f:8b:6c:af:97:25:67:d9:1e:90:3d:c9:ef:1b:
         04:ac:1c:16:55:dc:8a:4e:d4:a7:f1:56:b9:61:55:de:a3:0e:
         e9:2c:dc:b9:f7:60:88:d4:af:67:e3:9b:db:b7:d3:25:29:d3:
         0f:b0:0e:f5:1a:6a:75:b5:bc:42:8d:4c:c9:12:57:c9:86:b4:
         06:ca:65:2b:c1:6a:aa:a7:78:73:ee:6c:ba:72:b2:ab:6b:09:
         b3:9f:ba:b0:78:ac:fd:74:4c:f3:57:bb:fd:ae:3d:ba:70:0d:
         f7:ac:8c:0b:04:98:e0:cd:b8:0d:02:ff:3f:49:c3:31:05:03:
         5e:27:be:74:1f:1f:76:41:74:ab:b6:32:46:65:c0:a5:05:13:
         81:b3:6d:78:c5:17:da:69:dc:2d:28:cb:fa:1c:d0:57:ab:3f:
         5f:4e:31:19:49:21:03:c8:fb:eb:aa:9c:ae:0f:ec:e3:7f:1a:
         f9:36:84:95:c2:41:7f:bf:e5:3f:72:fd:f9:68:39:57:1e:99:
         70:7b:02:0d:95:13:42:ba:14:da:bf:ca:6a:c3:f5:2e:7b:22:
         4c:b3:bc:58:ed:99:ba:60:fb:1b:a7:b7:5d:bb:41:6a:22:23:
         50:70:69:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:37 2024 by rpki-client on console-ams.rpki-client.org