Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.cer
File:                     86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.cer (raw, json)
Hash identifier:          Djfjs94oSQYytcyRAZXaUNZuZrTa86yZCIUhqvjzKGg=
Subject key identifier:   86:B2:2A:1A:16:17:DF:F7:DC:2C:61:D6:B4:83:C5:C3:E8:C9:99:5A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DCBE059D3D2A3DF7C1BE808925BEE930AAAE5E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/94DAg2gFP7U5cgEXpfJUasydT7tmRsKbFWzwcVEWMZq1/0/86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/94DAg2gFP7U5cgEXpfJUasydT7tmRsKbFWzwcVEWMZq1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Jul 2022 16:21:37 +0000
Certificate not after:    Thu 06 Jul 2023 16:26:37 +0000
Subordinate resources:    AS: 267958
                          IP: 45.166.164.0/22
                          IP: 2804:55d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cb:e0:59:d3:d2:a3:df:7c:1b:e8:08:92:5b:ee:93:0a:aa:e5:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  7 16:21:37 2022 GMT
            Not After : Jul  6 16:26:37 2023 GMT
        Subject: CN=86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:46:94:18:4c:09:9e:71:ef:3e:94:cc:3d:45:
                    09:8b:d5:02:92:46:dc:90:ed:1e:b6:65:3a:71:b5:
                    12:36:36:d2:e4:3b:0a:a6:6c:3c:d9:33:e3:f4:f0:
                    e0:b3:9b:6d:09:9a:7f:1a:82:59:0f:cd:82:27:67:
                    91:70:73:f5:02:b8:d2:ac:2d:c0:89:2d:70:f8:0b:
                    a3:d0:29:ab:90:62:a8:34:49:20:10:e8:db:98:08:
                    9d:d0:47:47:af:33:b0:f5:40:9b:1e:f6:b9:14:f7:
                    d4:f7:2b:22:76:e5:ed:1e:af:e4:7e:ca:01:6c:c3:
                    33:d3:09:9b:b1:af:d1:99:9d:37:20:65:6f:d1:cd:
                    44:53:ac:aa:85:82:a7:1f:0b:b8:cd:0c:ac:11:ef:
                    87:3e:3c:23:f4:e2:cb:15:ea:46:e4:09:9d:6b:f5:
                    e5:65:7d:28:23:c2:4d:82:ec:f2:39:13:8e:40:e6:
                    a4:23:62:e7:5e:80:36:2d:08:c1:6f:e8:2a:16:6a:
                    d3:39:76:ce:4b:62:73:ad:59:41:d8:07:c4:00:d3:
                    be:01:c0:26:be:68:c8:cb:ed:ba:fe:c9:5c:5d:a0:
                    80:11:6c:99:c1:51:5f:ed:36:4a:16:f8:cc:e4:ca:
                    17:f3:cb:13:68:e1:02:9d:eb:4c:55:93:56:7c:f9:
                    ff:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:B2:2A:1A:16:17:DF:F7:DC:2C:61:D6:B4:83:C5:C3:E8:C9:99:5A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/94DAg2gFP7U5cgEXpfJUasydT7tmRsKbFWzwcVEWMZq1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/94DAg2gFP7U5cgEXpfJUasydT7tmRsKbFWzwcVEWMZq1/0/86B22A1A1617DFF7DC2C61D6B483C5C3E8C9995A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.164.0/22
                IPv6:
                  2804:55d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267958

    Signature Algorithm: sha256WithRSAEncryption
         9b:08:40:44:a5:43:f4:b2:fb:52:98:52:b8:d3:eb:d9:fc:58:
         73:bd:28:15:b5:ac:04:63:4d:af:0a:b9:4f:f2:fa:6c:26:3b:
         e1:98:55:40:f0:dc:82:eb:9a:8c:75:43:58:05:8f:b7:f5:b4:
         09:d8:dc:21:af:3e:b9:bf:c4:ca:b6:62:4e:d4:a8:fa:21:9c:
         31:00:72:22:2d:40:87:a5:59:ff:f6:e6:be:af:a5:f6:2f:db:
         52:fd:bf:e9:2a:0a:b1:88:d5:ad:97:d5:bd:29:bc:a2:0d:b3:
         25:25:6a:62:57:18:da:94:87:79:77:20:10:fc:80:f5:f1:8b:
         21:61:5b:3f:09:b7:8e:6d:ae:e5:87:5e:60:ca:33:f6:1d:74:
         ee:6a:63:e5:29:df:08:92:6b:80:a2:8a:d6:c9:60:0d:d3:86:
         22:3e:3d:be:f0:a8:cb:6b:e1:b0:c2:e4:5c:e7:79:f8:da:7e:
         89:a5:8e:45:c9:5d:f2:10:0c:6c:09:e0:fc:bd:78:f2:38:15:
         74:11:8e:70:6c:60:cf:49:57:0f:0a:4a:ca:4d:a1:21:74:3f:
         64:38:62:47:53:d7:13:1e:c9:b7:d1:ef:9b:94:6a:06:88:6c:
         b8:b2:a3:a7:de:ca:49:78:dd:ff:a4:f2:bc:2e:ce:2f:50:ca:
         a1:82:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org