Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/86F6303867F3852D21929CF29FA61F3A746FC984.cer
File:                     86F6303867F3852D21929CF29FA61F3A746FC984.cer (raw, json)
Hash identifier:          zBuwODyCWIIzEO5eKLGH7OAsYPi3kZWI6ksekCWVENU=
Subject key identifier:   86:F6:30:38:67:F3:85:2D:21:92:9C:F2:9F:A6:1F:3A:74:6F:C9:84
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       204A140BCA3F5714C40F33029A53955F4EEC98DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/86F6303867F3852D21929CF29FA61F3A746FC984.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Dec 2021 11:42:48 +0000
Certificate not after:    Tue 13 Dec 2022 11:47:48 +0000
Subordinate resources:    AS: 262825
                          IP: 186.251.40.0/21
                          IP: 191.6.128.0/22
                          IP: 2804:13c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4a:14:0b:ca:3f:57:14:c4:0f:33:02:9a:53:95:5f:4e:ec:98:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 11:42:48 2021 GMT
            Not After : Dec 13 11:47:48 2022 GMT
        Subject: CN=86F6303867F3852D21929CF29FA61F3A746FC984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c5:52:ee:01:da:3d:70:83:1f:96:c3:fd:76:
                    7d:06:cd:64:09:9e:10:b1:25:69:32:af:d3:95:cc:
                    29:f5:31:dd:90:f5:4c:36:3e:7f:d5:4d:be:e8:79:
                    ae:6a:69:50:f6:4b:e9:a1:e7:f3:28:47:07:bc:3b:
                    ce:e5:32:07:92:d3:18:c6:62:8e:ed:da:c3:5a:d8:
                    ec:96:2a:94:7b:14:c4:59:36:3c:b7:4d:97:71:6d:
                    77:9c:61:59:c8:f6:38:93:f5:b1:5e:77:61:17:81:
                    71:fb:f9:a5:74:a6:03:4e:c3:16:7a:3e:40:88:d1:
                    6c:89:b9:3d:65:07:96:3f:04:c5:bd:90:d6:22:ab:
                    f6:0c:3a:36:63:36:5f:a5:ff:7d:d0:39:63:14:59:
                    60:47:e7:77:a4:f9:46:f2:62:4c:c7:c5:ef:04:d4:
                    61:2b:e7:1a:77:3e:21:8d:cf:16:df:fc:90:c6:de:
                    5d:d2:b2:fa:6d:60:6f:52:11:cd:ce:25:0b:43:ab:
                    b4:cf:c5:39:c1:47:fe:5c:19:64:00:8f:b2:54:b9:
                    89:26:a4:bb:82:18:b0:b1:e1:e1:43:1d:96:1b:e4:
                    8c:a6:b4:30:7e:6c:70:13:ef:61:3c:28:91:1f:e6:
                    60:cc:cf:69:76:a9:ff:8c:e5:3b:c0:06:c2:8c:0a:
                    50:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                86:F6:30:38:67:F3:85:2D:21:92:9C:F2:9F:A6:1F:3A:74:6F:C9:84
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9DwaJ31p6VNGJUzE3RUixumqG71kU7EvWcv5CVTcsgv8/0/86F6303867F3852D21929CF29FA61F3A746FC984.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.40.0/21
                  191.6.128.0/22
                IPv6:
                  2804:13c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262825

    Signature Algorithm: sha256WithRSAEncryption
         22:c8:3e:f8:48:13:7f:46:ec:95:d9:af:c0:08:a2:02:c2:ad:
         9e:f3:18:1a:0d:b9:2b:e6:05:cd:e6:6d:c8:9f:e2:9d:11:df:
         97:94:03:ad:29:fd:5b:eb:38:ee:76:86:2e:f0:c8:e1:6b:56:
         d0:13:a0:22:cd:5a:5e:e2:9c:36:89:4d:33:be:fd:0d:12:43:
         1f:09:09:61:62:75:6b:03:7c:b1:1c:32:ce:53:8b:95:ea:4c:
         a6:a7:f0:4c:5e:ef:f5:d9:38:02:17:e2:d7:a5:18:61:3c:f8:
         55:b6:b6:ae:d2:31:8e:a9:08:1a:93:6a:81:31:df:16:94:f1:
         cb:09:60:76:4d:2a:31:63:06:93:a2:d6:ee:1d:ef:c3:42:c6:
         f6:a3:ca:1c:83:5d:01:d7:78:8c:21:46:39:1e:c0:b6:83:22:
         34:9d:da:1d:5d:ff:2d:0b:cb:ec:6f:1f:e9:5f:ed:28:1c:63:
         3c:f6:b6:2c:a9:19:59:d6:ab:ea:73:55:40:4c:9a:cf:af:61:
         58:67:ae:9e:68:c3:39:bb:79:51:10:27:06:ac:98:ad:9b:e0:
         d5:5f:47:90:a2:c9:5c:68:d5:f4:00:a6:c8:09:82:82:22:be:
         27:8a:32:14:e0:19:58:52:cf:1b:78:e2:ee:84:1b:4e:2f:d2:
         a2:5b:5f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org