Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/86820D0B7A959E43A8F413514A96C5825B5B2485.cer
File:                     86820D0B7A959E43A8F413514A96C5825B5B2485.cer (raw, json)
Hash identifier:          75WG8/WhrnH+poRyomGViSw35HFYsEuEKVqwqR7AYUk=
Subject key identifier:   86:82:0D:0B:7A:95:9E:43:A8:F4:13:51:4A:96:C5:82:5B:5B:24:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21E04BE37F7F13B9551B55C7C9CFF8482AB7062C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/86820D0B7A959E43A8F413514A96C5825B5B2485.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 17 Mar 2023 11:41:03 +0000
Certificate not after:    Fri 15 Mar 2024 11:46:03 +0000
Subordinate resources:    AS: 266964
                          IP: 45.225.232.0/22
                          IP: 2804:4608::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:e0:4b:e3:7f:7f:13:b9:55:1b:55:c7:c9:cf:f8:48:2a:b7:06:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 17 11:41:03 2023 GMT
            Not After : Mar 15 11:46:03 2024 GMT
        Subject: CN=86820D0B7A959E43A8F413514A96C5825B5B2485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:58:35:38:c2:e3:ed:25:26:0e:07:da:17:d8:
                    b5:0f:57:ac:76:68:1e:67:0d:8e:fa:09:61:19:54:
                    d1:c9:74:94:00:bd:3e:85:71:b5:52:db:02:55:96:
                    d2:80:a4:af:92:7c:7d:94:91:03:ef:2d:59:34:ac:
                    a5:9d:8b:a4:b1:14:d3:2b:4a:17:5c:c1:a1:65:0f:
                    38:ca:c8:6a:94:3f:0b:22:0c:af:1d:47:2c:a2:6a:
                    e7:5f:42:6a:05:e3:2f:26:aa:af:b0:99:b2:9e:b7:
                    d3:22:2f:77:bd:f6:69:ab:ad:91:a2:b8:ad:32:1c:
                    6f:f6:e9:bc:36:cd:c9:52:a5:b5:13:5d:ad:c5:77:
                    17:8f:a7:9d:96:ae:8d:95:0b:dc:e6:d5:29:b7:5c:
                    33:06:21:65:7f:61:ca:93:ca:b9:17:04:7f:8f:fe:
                    05:20:0a:e4:de:d5:c8:22:81:b4:a9:a0:2e:49:18:
                    ff:a1:ef:c7:3d:9b:da:64:be:b6:4f:01:53:80:e4:
                    b0:19:e3:48:22:c7:d6:43:2b:1d:68:41:68:b0:ba:
                    55:86:b8:60:5e:4a:9e:cf:a4:12:29:0b:5c:0a:f1:
                    a0:89:cf:f9:18:82:49:0a:98:9b:99:f2:1c:9b:4d:
                    d4:74:23:05:4a:98:4a:a1:cc:ed:01:15:00:9a:92:
                    4c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:82:0D:0B:7A:95:9E:43:A8:F4:13:51:4A:96:C5:82:5B:5B:24:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EiymtTMF2nSFWQN2rm5smCP1wv2AzbKGVu1hyZaiPSDA/0/86820D0B7A959E43A8F413514A96C5825B5B2485.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.232.0/22
                IPv6:
                  2804:4608::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266964

    Signature Algorithm: sha256WithRSAEncryption
         80:8d:7f:65:15:34:b2:22:15:7b:b0:2d:11:0b:e5:a1:24:a8:
         d6:f5:f7:a9:ef:6f:19:92:36:cb:57:54:73:a6:cf:46:b0:7f:
         8a:12:27:80:1c:dc:05:43:8a:cf:8c:9a:4d:21:ca:29:56:bf:
         c4:05:66:6f:6a:ab:a3:6f:c9:06:62:1e:92:6a:da:8d:34:35:
         70:ac:f3:a6:6d:78:49:84:f6:2e:b5:f3:73:9e:67:cb:4e:99:
         a8:84:68:c6:6d:13:0e:1c:58:3e:59:1e:54:d7:4e:48:46:87:
         3c:ee:fa:4b:96:4d:bc:67:10:45:87:9b:40:8d:09:d8:e8:18:
         ce:31:44:ed:ec:ef:4f:db:ed:da:b3:60:bd:52:45:8f:ae:09:
         e3:36:95:78:d9:fe:d3:a7:bc:ec:34:9e:95:fd:fa:ed:4d:db:
         c1:01:bf:a7:c0:95:2e:2d:fd:e7:a9:bd:93:c3:19:77:7d:8e:
         d1:4b:0d:c0:7f:57:b0:87:ef:16:c5:03:0c:d5:ea:dc:aa:75:
         92:1a:fa:87:e4:a6:46:45:ab:a9:4b:37:33:2d:fc:dc:48:d0:
         fd:7a:22:9b:90:b2:86:f9:50:7f:f6:a0:8b:21:a8:69:18:80:
         7f:1f:fa:5f:69:ff:d2:26:86:78:9b:db:28:26:02:09:d6:a8:
         17:42:1e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org