Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/862009D4161A11807908B0E9BCD73252750A152D.cer
File:                     862009D4161A11807908B0E9BCD73252750A152D.cer (raw, json)
Hash identifier:          fbUcJjFtyDCZsqkDFjZwLpRfRzao3M3opdZvNrUx5vY=
Subject key identifier:   86:20:09:D4:16:1A:11:80:79:08:B0:E9:BC:D7:32:52:75:0A:15:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D29159B238A15FC87A6646CE3BA9C04414F249C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/862009D4161A11807908B0E9BCD73252750A152D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 12 Jan 2023 18:39:56 +0000
Certificate not after:    Thu 11 Jan 2024 18:44:56 +0000
Subordinate resources:    AS: 52739
                          IP: 177.85.72.0/22
                          IP: 200.0.56.0/22
                          IP: 2804:17bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:29:15:9b:23:8a:15:fc:87:a6:64:6c:e3:ba:9c:04:41:4f:24:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 12 18:39:56 2023 GMT
            Not After : Jan 11 18:44:56 2024 GMT
        Subject: CN=862009D4161A11807908B0E9BCD73252750A152D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:51:70:07:fc:9e:f6:50:1f:2d:9e:4c:ec:
                    ba:ca:0f:c8:a9:10:3f:bb:a9:83:39:e0:c7:ab:0f:
                    96:b3:bd:f1:6e:9c:09:39:8b:84:77:68:4d:3b:d0:
                    3d:d1:f9:46:dd:35:25:a7:86:1c:bd:fb:8a:76:fe:
                    3b:e1:b7:a1:cc:70:5c:90:f6:09:46:0c:1a:08:b4:
                    1c:21:02:63:38:17:30:bb:54:18:72:5a:fd:13:3c:
                    56:42:c3:55:95:84:5e:95:91:3c:8a:73:cc:f9:64:
                    95:77:4f:d3:41:7a:50:3f:c9:19:16:1d:8c:55:db:
                    49:7d:04:f6:08:1b:1c:6e:19:1e:39:af:c2:c9:1c:
                    84:58:c1:4c:e1:5b:66:5d:ed:a9:1b:04:56:dd:a7:
                    1a:08:b5:05:49:37:c0:d6:11:55:e9:4f:f0:f8:40:
                    c3:94:11:86:d6:d5:4a:6a:5a:65:e6:d7:b9:1b:e7:
                    31:29:f6:90:bd:19:b8:c8:ce:e0:01:8c:77:3c:bf:
                    ee:b9:d7:a7:2a:56:29:af:c8:01:10:1c:c6:4c:12:
                    7d:29:9c:63:c5:83:6a:d6:5b:0d:31:17:74:16:62:
                    57:ed:e4:6c:d7:68:fb:49:de:66:68:6f:56:3a:11:
                    e8:6e:12:68:5f:5e:0b:df:5a:1f:b7:bc:d2:fd:7e:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:20:09:D4:16:1A:11:80:79:08:B0:E9:BC:D7:32:52:75:0A:15:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/862009D4161A11807908B0E9BCD73252750A152D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.85.72.0/22
                  200.0.56.0/22
                IPv6:
                  2804:17bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52739

    Signature Algorithm: sha256WithRSAEncryption
         9f:2b:c6:41:f7:86:b9:f6:02:e5:89:fe:46:f6:66:e5:dc:91:
         0b:93:68:73:4a:80:dd:2b:5d:8b:ea:68:bc:e9:60:66:ae:eb:
         56:f9:41:bb:c4:1a:40:3f:d6:74:f8:0f:d1:22:2f:80:ca:40:
         e2:20:2f:16:3e:b2:97:51:21:6c:85:ef:fe:7e:74:bb:3a:d6:
         53:ae:f2:9d:27:10:41:8e:8a:9d:88:b4:c1:73:ec:fb:ff:e4:
         3b:4e:fe:99:c8:61:c4:b2:f4:2e:13:5c:93:b7:c7:e2:9f:8f:
         30:fe:e2:a4:7d:ac:f0:93:ff:cf:ee:11:c1:d3:4e:d1:9c:53:
         02:c8:a1:d6:1d:89:7a:1b:a6:3d:63:2d:30:fa:6a:13:a4:e5:
         97:2e:2f:24:c5:d6:ba:59:44:47:4c:69:61:72:cd:5e:c9:fd:
         a4:d9:d7:19:bd:33:bc:24:5f:d3:c8:e5:79:ad:9d:76:fc:08:
         a4:15:6f:73:41:ae:e4:ec:6a:63:6d:f7:48:c2:50:20:7d:df:
         46:3d:1a:28:58:9e:62:3f:96:77:d2:93:54:ab:fa:aa:71:63:
         6b:5a:c6:0f:5c:41:b1:23:df:0c:ce:22:07:6c:62:43:d5:29:
         a8:05:5c:23:88:9b:f9:67:e8:4e:59:d1:78:96:96:40:0e:30:
         20:d8:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org