Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.cer
File:                     84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.cer (raw, json)
Hash identifier:          jW5ToQe62XZgoJoCcNL6kjcn1cRVw4ABD+RGGtI0FoI=
Subject key identifier:   84:68:54:01:BC:E2:CB:DE:0A:53:CF:FE:D2:59:71:B4:8B:B8:AD:5E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3D28C75C7041E288676959CB4FCE5FE0ACF83F34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 29 May 2022 20:08:21 +0000
Certificate not after:    Sun 28 May 2023 20:13:21 +0000
Subordinate resources:    AS: 270570
                          IP: 201.49.136.0/22
                          IP: 2804:6e04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:28:c7:5c:70:41:e2:88:67:69:59:cb:4f:ce:5f:e0:ac:f8:3f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 29 20:08:21 2022 GMT
            Not After : May 28 20:13:21 2023 GMT
        Subject: CN=84685401BCE2CBDE0A53CFFED25971B48BB8AD5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:ea:96:98:d8:c1:61:ee:73:59:bf:e7:14:
                    46:d3:77:f5:a7:28:25:97:50:f7:0f:cd:a0:cc:4b:
                    51:7e:58:4b:56:b3:cf:3b:e1:2e:48:bd:f4:46:1b:
                    99:72:fb:cf:21:26:64:35:47:6b:e9:9f:8f:2a:91:
                    8f:66:43:75:5f:10:32:a6:29:d6:21:9a:eb:20:52:
                    83:6e:86:77:63:34:58:b7:93:53:09:8c:f7:8e:55:
                    4e:74:ec:92:32:8e:bc:5e:74:48:6a:86:6c:4d:cb:
                    69:e3:f8:53:af:9e:e9:94:c3:c3:d9:a0:c5:b9:64:
                    a9:a3:ab:9a:78:cf:56:92:ec:95:1c:e1:93:a9:df:
                    6f:4c:a4:38:4d:b2:06:c6:14:7e:2c:07:2b:fd:fe:
                    44:bd:84:07:b3:c4:a6:6f:36:e2:95:43:64:ea:bd:
                    82:59:f3:77:e2:b9:3d:4a:b0:43:eb:c0:ef:a8:70:
                    76:3d:92:bb:12:d9:92:ff:42:0f:dc:01:a7:92:a9:
                    bd:6e:3e:ac:b2:c7:ea:50:b2:76:e7:6a:c6:b6:27:
                    63:63:e4:e0:94:86:b2:ae:68:bf:df:e3:8a:47:1c:
                    51:43:c0:4b:aa:a2:11:1e:64:15:82:e8:4e:fd:95:
                    4f:e0:4b:8d:2f:c8:60:19:34:7c:71:e1:e4:fc:c6:
                    e9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:68:54:01:BC:E2:CB:DE:0A:53:CF:FE:D2:59:71:B4:8B:B8:AD:5E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/54jWfSUX4rs2Cxf53Gm95XLPVSpRcZAsPV1p2wQQhxwn/0/84685401BCE2CBDE0A53CFFED25971B48BB8AD5E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.49.136.0/22
                IPv6:
                  2804:6e04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270570

    Signature Algorithm: sha256WithRSAEncryption
         54:3c:33:6d:d3:85:23:ba:f7:f8:75:bd:3b:82:02:4e:32:5e:
         a8:f0:5e:18:f6:c7:3e:bc:2a:e0:76:21:56:a4:2a:37:d6:ff:
         c1:bc:fa:08:78:d6:1e:db:62:67:5a:7c:bb:3b:7f:b9:92:a0:
         7d:44:c5:b4:4f:19:78:de:21:54:1b:23:1d:31:7d:4f:50:e6:
         48:8e:15:00:74:2a:57:62:dd:cd:4d:23:e2:c9:99:e1:66:f7:
         32:f5:cb:96:60:b5:71:e6:73:a5:87:b2:d1:af:20:96:79:8f:
         02:f1:f1:ad:01:b7:4c:cc:72:90:71:ab:ba:d3:5b:c2:53:90:
         af:52:f4:6f:23:70:dd:00:6f:c2:d4:ee:e8:69:38:95:18:fb:
         e7:01:72:bd:fa:5d:0d:b4:82:08:ae:3c:0f:11:f3:fd:40:98:
         51:f7:a9:e3:c5:b3:22:59:a9:04:f5:92:d2:ca:98:de:8e:33:
         41:7b:7f:d9:f3:13:b6:69:77:42:7f:68:98:ed:2e:a7:4c:05:
         81:28:d8:06:c6:80:2d:0b:6e:57:66:88:64:30:4b:19:95:60:
         74:5a:a2:75:df:b7:98:1f:12:4b:49:c9:92:c7:87:c8:05:d6:
         2f:8c:6c:ce:a9:1d:c5:55:0e:a7:1c:e7:13:c6:3e:5b:c6:0b:
         3a:ec:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org