Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/824E3F5F6429DCD00EA632F53CB250BD562E8EB8.cer
File:                     824E3F5F6429DCD00EA632F53CB250BD562E8EB8.cer (raw, json)
Hash identifier:          EJ3VpdaJzbCHbsVfQoi0/Axq939mgYBpY95oNbWS6RI=
Subject key identifier:   82:4E:3F:5F:64:29:DC:D0:0E:A6:32:F5:3C:B2:50:BD:56:2E:8E:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       495C7B8D43A731105DC90F4BC11ACE2F48C3026A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/824E3F5F6429DCD00EA632F53CB250BD562E8EB8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Sep 2021 17:05:52 +0000
Certificate not after:    Tue 20 Sep 2022 17:10:52 +0000
Subordinate resources:    AS: 262582
                          IP: 138.99.32.0/22
                          IP: 177.84.96.0/21
                          IP: 177.93.88.0/21
                          IP: 2804:664::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5c:7b:8d:43:a7:31:10:5d:c9:0f:4b:c1:1a:ce:2f:48:c3:02:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 21 17:05:52 2021 GMT
            Not After : Sep 20 17:10:52 2022 GMT
        Subject: CN=824E3F5F6429DCD00EA632F53CB250BD562E8EB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:41:b1:73:bb:02:08:29:14:11:56:6f:b7:7b:
                    40:ae:2e:90:0b:a6:ca:9c:7e:ca:27:82:73:20:13:
                    f0:13:8f:9b:a2:90:1b:c9:3a:d6:16:9b:f9:2f:51:
                    19:03:da:67:51:91:78:8a:69:b1:eb:88:87:f6:93:
                    92:b9:0c:ed:ba:50:e8:1c:98:a0:85:84:65:e9:05:
                    49:c8:d7:e7:45:dc:e7:ff:58:ec:1e:b6:79:cc:0e:
                    ba:f6:12:97:14:90:99:36:58:cb:1e:60:50:ea:55:
                    05:67:9b:dd:2b:52:62:ac:46:2c:9b:a9:7b:30:c1:
                    dc:b4:39:9a:19:f9:5f:6c:fa:70:45:a1:19:09:3f:
                    ca:8c:94:09:42:7b:77:64:3e:c0:04:bf:78:99:9a:
                    af:9e:f7:b8:1b:4d:b3:79:46:c8:f4:4c:c9:2f:e6:
                    7b:a4:db:5c:6e:1c:03:c8:7c:5c:b1:3b:15:88:06:
                    20:f6:59:d9:db:c9:fd:f9:e1:82:b2:1a:50:15:e4:
                    a9:ea:f7:f7:97:23:f2:eb:00:52:02:e6:6d:42:72:
                    2d:58:ca:36:8f:e4:b7:13:3f:ed:d0:f1:94:3c:b0:
                    4a:11:e7:54:ba:1b:8b:8f:92:05:29:39:2b:5f:5f:
                    98:cf:8e:30:d9:14:bf:77:bd:b3:60:1c:7d:b6:38:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                82:4E:3F:5F:64:29:DC:D0:0E:A6:32:F5:3C:B2:50:BD:56:2E:8E:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZPLKvcpHzP8Cy2jDRJMQUHiLUPNtzvXfQmKNCGcELvE/0/824E3F5F6429DCD00EA632F53CB250BD562E8EB8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.32.0/22
                  177.84.96.0/21
                  177.93.88.0/21
                IPv6:
                  2804:664::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262582

    Signature Algorithm: sha256WithRSAEncryption
         12:96:2f:0d:33:be:d2:4b:9a:87:02:85:35:8a:d0:80:44:73:
         a2:bd:38:e8:c4:bf:2b:72:e7:30:10:a4:13:cf:2c:ce:91:a3:
         65:66:ed:b0:f8:ff:7c:71:a5:3b:f9:88:04:6d:35:22:c1:25:
         9a:fb:53:8b:47:47:75:30:0f:38:6d:fa:0c:2f:fd:4a:5b:b1:
         7f:b0:60:58:a0:a5:b4:99:4d:b2:41:8b:1d:61:0f:f9:ab:42:
         61:cf:46:ec:a3:df:fb:5a:fd:cd:ba:5b:95:ff:ae:9e:14:ca:
         79:e2:ff:ee:15:f3:3f:09:4c:21:d0:90:53:e6:77:be:55:c6:
         31:f9:5b:2c:da:bb:18:36:a3:8b:47:6e:e2:35:3b:c5:27:49:
         62:4b:27:4f:71:f4:a6:9e:55:58:42:3d:5d:f0:49:e2:1c:e5:
         f8:0e:2e:0e:68:90:33:43:d3:ce:35:db:07:c7:e7:69:16:6d:
         92:a8:99:99:2e:27:37:10:09:0e:b2:51:61:78:be:a0:cf:29:
         68:65:97:5a:7c:c5:7a:01:b5:f5:53:e9:95:a4:40:d0:30:58:
         44:3c:0e:5d:de:2f:12:45:74:0d:5a:8b:70:ad:89:5b:3c:1a:
         a3:32:f8:69:36:94:8c:eb:d3:7e:21:14:b5:6d:a2:24:4a:c9:
         84:21:21:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org