Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/833F11CCF102E5976E0364A6E86AF73B65A381FB.cer
File:                     833F11CCF102E5976E0364A6E86AF73B65A381FB.cer (raw, json)
Hash identifier:          HpdiWdeBlQiCet6+w+TmMVh8IGcAGIVumXxBO3Xi/h8=
Subject key identifier:   83:3F:11:CC:F1:02:E5:97:6E:03:64:A6:E8:6A:F7:3B:65:A3:81:FB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0FD465B7DE1D568D45AECF3234FAEAEE0DFDB29D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/833F11CCF102E5976E0364A6E86AF73B65A381FB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 May 2022 15:04:02 +0000
Certificate not after:    Tue 02 May 2023 15:09:02 +0000
Subordinate resources:    AS: 28606
                          IP: 138.59.112.0/22
                          IP: 201.20.160.0/20
                          IP: 2804:44::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d4:65:b7:de:1d:56:8d:45:ae:cf:32:34:fa:ea:ee:0d:fd:b2:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  3 15:04:02 2022 GMT
            Not After : May  2 15:09:02 2023 GMT
        Subject: CN=833F11CCF102E5976E0364A6E86AF73B65A381FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5d:1a:bf:f6:6e:a6:80:c1:3d:c9:8e:b5:9a:
                    81:39:b9:ad:7d:b0:72:81:41:a4:43:64:ae:35:aa:
                    6d:07:2a:5f:cb:38:81:63:e5:2c:44:4d:86:72:bd:
                    8f:38:6c:15:a7:c0:33:85:cd:55:24:5a:fc:39:fc:
                    1f:54:9c:ec:c8:af:d8:81:f9:19:63:10:6c:10:33:
                    bc:eb:4c:3b:39:5a:61:63:b6:cf:86:89:c5:0c:f5:
                    2a:c3:5c:ce:08:f6:72:30:b5:de:d7:30:72:00:c2:
                    33:e3:ef:18:6f:85:f0:dd:15:10:f9:9a:c1:b6:80:
                    2d:31:ce:90:c3:ad:61:8b:be:e7:8d:23:8c:80:f3:
                    cc:21:f6:4c:90:98:33:46:8f:fa:16:86:e2:4e:e8:
                    a6:28:c0:aa:0a:63:72:ee:96:a0:fc:2c:56:26:c8:
                    c0:6e:a7:87:63:64:8f:c6:a3:f6:46:4d:be:27:1b:
                    4b:09:f8:c8:c4:07:1e:03:48:8b:10:97:eb:3d:d4:
                    f6:a6:c4:21:d9:f2:36:6b:5a:1f:29:fe:9c:10:6f:
                    97:db:5d:25:33:31:72:68:ba:65:ba:5e:91:60:a0:
                    2d:d0:9b:64:fa:51:15:18:33:d4:43:3e:71:83:da:
                    4b:19:37:d9:1b:44:e9:0f:a1:3b:17:65:57:c2:f3:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:3F:11:CC:F1:02:E5:97:6E:03:64:A6:E8:6A:F7:3B:65:A3:81:FB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/833F11CCF102E5976E0364A6E86AF73B65A381FB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.112.0/22
                  201.20.160.0/20
                IPv6:
                  2804:44::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28606

    Signature Algorithm: sha256WithRSAEncryption
         1f:91:d6:97:4e:50:d0:f8:7a:f0:d6:97:f6:bf:30:28:e9:2f:
         92:5e:1a:99:fb:16:01:fc:53:20:f2:ee:ff:1d:25:cc:d6:9f:
         8e:ca:46:ee:84:04:79:e6:ac:04:be:bf:d9:8e:cd:d7:a4:f4:
         6c:b9:88:54:9f:d2:17:70:a5:f6:6a:8d:b5:8a:44:cf:70:27:
         58:df:fe:0f:f2:b2:3f:d7:ed:22:da:38:6b:ae:fe:f7:2d:2f:
         c6:f7:69:54:94:91:0b:46:cb:98:c9:06:6c:dd:a9:ff:b2:f3:
         be:6b:0c:07:ed:72:47:ba:01:6e:92:9d:d3:bc:97:d4:ac:13:
         42:a9:22:fb:93:3d:b1:7e:29:1c:41:86:b7:7c:7d:41:d6:0f:
         d3:d3:c4:1e:d4:33:03:7b:0f:b0:7d:47:38:f5:00:4b:eb:8a:
         23:d0:94:d1:4d:85:f4:51:c8:70:ed:a4:c1:25:97:b6:7e:70:
         3f:4f:d6:41:a0:40:cf:6d:e2:88:07:26:a0:b7:5c:0f:6a:6b:
         54:6a:bc:02:00:8d:5f:97:42:10:09:7e:8b:16:ed:a1:d2:ca:
         0a:51:6f:32:f9:0b:88:61:1a:e4:28:a5:ba:d4:c7:2a:a9:3e:
         bb:8c:5f:a0:ef:c8:11:7e:93:9a:0d:a0:c8:b6:91:d8:81:9f:
         6b:87:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org