Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/86A7724E37C4CF9FB7002ED5381C769A74EDC599.cer
File:                     86A7724E37C4CF9FB7002ED5381C769A74EDC599.cer (raw, json)
Hash identifier:          neQJNsUFNrOUy82jMxmvoCp5dX06MQxmKK579wF47kI=
Subject key identifier:   86:A7:72:4E:37:C4:CF:9F:B7:00:2E:D5:38:1C:76:9A:74:ED:C5:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       46FEB22625D5138296FE85BEBB9B5FC7E62144FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EHUN38g4mDyNHRpU4fbyAqpBQB39rkQgVtbAY6DPwj3q/0/86A7724E37C4CF9FB7002ED5381C769A74EDC599.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EHUN38g4mDyNHRpU4fbyAqpBQB39rkQgVtbAY6DPwj3q/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Apr 2022 12:58:09 +0000
Certificate not after:    Tue 11 Apr 2023 13:03:09 +0000
Subordinate resources:    AS: 267541
                          IP: 201.182.220.0/22
                          IP: 2804:42fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:fe:b2:26:25:d5:13:82:96:fe:85:be:bb:9b:5f:c7:e6:21:44:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 12:58:09 2022 GMT
            Not After : Apr 11 13:03:09 2023 GMT
        Subject: CN=86A7724E37C4CF9FB7002ED5381C769A74EDC599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:87:99:6f:4c:1e:55:18:d7:d9:db:24:73:09:
                    99:6d:9c:e7:58:63:35:0e:63:c7:b8:b2:41:a0:00:
                    09:98:d1:cf:b8:a7:b6:c8:23:8a:b7:08:77:79:9f:
                    79:0b:b6:3f:79:7c:5d:0f:85:e9:50:d9:26:4d:a7:
                    b6:63:85:b0:96:2c:11:e5:88:de:07:fc:2a:19:d7:
                    30:c6:b1:c9:8d:1d:57:83:8e:02:9d:ac:69:6e:74:
                    69:3e:e7:69:79:f3:0b:4b:b3:3e:e6:cd:2b:74:b2:
                    61:dd:36:09:80:ae:0d:01:e8:8e:88:fe:86:08:78:
                    3d:89:83:6c:6a:21:aa:53:12:67:78:61:5f:a9:f3:
                    11:84:61:b8:d1:21:1a:66:7a:34:37:a3:b9:2e:25:
                    3b:cf:fd:ee:f0:3c:9e:1d:ea:a2:57:07:6a:b7:6d:
                    9e:04:3f:87:28:14:07:6a:42:5c:8d:ce:ab:25:0e:
                    1e:16:bc:65:95:8b:eb:e9:57:0b:0f:9e:68:32:06:
                    0b:55:57:06:40:1d:5c:f6:dd:67:ac:74:47:64:8c:
                    d7:93:29:89:c5:2f:f1:1c:9f:53:d2:63:ab:0a:d6:
                    f2:22:64:c0:ef:9a:ec:63:93:60:8e:e5:8f:13:d7:
                    74:7d:40:2f:72:3b:27:fa:43:5a:3f:d3:57:3d:73:
                    f7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:A7:72:4E:37:C4:CF:9F:B7:00:2E:D5:38:1C:76:9A:74:ED:C5:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EHUN38g4mDyNHRpU4fbyAqpBQB39rkQgVtbAY6DPwj3q/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EHUN38g4mDyNHRpU4fbyAqpBQB39rkQgVtbAY6DPwj3q/0/86A7724E37C4CF9FB7002ED5381C769A74EDC599.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.220.0/22
                IPv6:
                  2804:42fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267541

    Signature Algorithm: sha256WithRSAEncryption
         1f:0b:91:91:9b:df:88:90:dd:34:6d:d3:11:90:b4:80:25:d3:
         95:a5:b7:f9:9d:7c:5f:6b:af:42:18:4a:41:7e:c2:c7:94:d5:
         f4:d0:12:9b:00:bc:08:34:77:b6:cd:25:9c:9f:b4:26:cc:8a:
         48:a5:9b:b5:0d:48:1f:14:70:a3:c4:2d:91:40:76:9e:b6:d9:
         88:39:68:f5:ae:2e:44:4f:c6:ac:e8:66:2c:81:d1:30:7b:46:
         c3:ae:43:4c:ff:1a:f0:fa:ac:e4:ff:47:40:59:81:46:18:d3:
         9a:4a:00:62:f3:77:bc:60:a0:f0:7a:13:e4:d8:57:37:9c:69:
         2d:96:06:ff:53:1e:c5:95:bc:5d:d4:06:b8:c7:f0:25:de:26:
         4a:82:82:47:3c:2f:49:a7:f5:da:83:80:fb:06:45:3e:ea:34:
         c3:fa:fa:99:d0:15:99:52:37:12:58:ba:f0:ba:7c:43:da:b5:
         90:0c:35:4d:4d:9c:01:a5:4e:75:30:37:79:e9:6c:42:f0:93:
         a4:17:45:06:7d:7f:99:67:3d:e6:b8:ec:f9:52:21:a9:c8:6f:
         0a:c7:a6:60:96:7b:23:3d:1c:3a:6a:86:d0:29:3a:56:29:a1:
         84:08:b0:ea:ad:59:ae:29:31:2a:d7:48:07:80:12:69:bd:5c:
         85:3b:57:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org