Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/870453DACF074ABE20B962113F3DEDD36316C446.cer
File:                     870453DACF074ABE20B962113F3DEDD36316C446.cer (raw, json)
Hash identifier:          gx1RJBmZXVa41nM6k650h3ZXmpTtPDL7+q0C9Zz9+oY=
Subject key identifier:   87:04:53:DA:CF:07:4A:BE:20:B9:62:11:3F:3D:ED:D3:63:16:C4:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10EA81909AD1E930AEC59D2D8326028DCF050DA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BsuoLiRegQiBAKEc4FtrcV6qgGnQ6Q7ug3Y2jRoKYUff/0/870453DACF074ABE20B962113F3DEDD36316C446.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BsuoLiRegQiBAKEc4FtrcV6qgGnQ6Q7ug3Y2jRoKYUff/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Sep 2022 04:19:02 +0000
Certificate not after:    Thu 07 Sep 2023 04:24:02 +0000
Subordinate resources:    AS: 266025
                          IP: 170.245.52.0/22
                          IP: 2804:3958::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ea:81:90:9a:d1:e9:30:ae:c5:9d:2d:83:26:02:8d:cf:05:0d:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  8 04:19:02 2022 GMT
            Not After : Sep  7 04:24:02 2023 GMT
        Subject: CN=870453DACF074ABE20B962113F3DEDD36316C446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:b8:2f:e9:28:b7:67:b7:34:8f:5b:ae:8d:
                    b5:24:42:b0:57:a9:d1:3b:e2:1b:f9:f1:b7:26:81:
                    59:66:94:68:a4:5e:39:f6:9c:95:9b:90:9a:cb:92:
                    a5:67:e4:d8:ac:5a:64:a1:31:12:8a:50:16:e5:2c:
                    3e:6b:c8:aa:7a:77:6e:12:c2:b1:e3:e8:19:6a:0e:
                    16:81:41:8c:1e:a3:89:15:de:34:1e:f5:f5:9e:33:
                    60:23:97:40:df:00:66:bb:fa:8e:96:4b:ba:77:52:
                    65:96:5d:45:35:1f:73:a6:f7:47:e3:73:c1:ef:36:
                    de:f3:64:ea:a5:03:41:f7:31:d0:6c:84:3c:71:73:
                    3d:b9:e6:67:6a:0a:1f:4b:5f:5c:0a:78:88:eb:33:
                    de:02:42:9d:da:6f:29:8b:07:59:5b:c9:d8:83:55:
                    73:6c:61:26:a4:c4:02:03:19:12:15:8b:ac:64:aa:
                    22:ab:8f:8b:cd:11:b8:f8:d0:b8:c2:bd:42:09:c0:
                    43:77:f8:bd:06:58:2f:f6:cb:3f:fe:c5:74:01:d7:
                    74:f8:c1:b5:77:4d:71:83:eb:4b:4f:75:99:90:b3:
                    fa:81:75:74:68:e7:c9:c6:f5:7e:27:68:ae:df:a7:
                    34:72:5a:fe:69:85:d6:8b:b4:04:38:00:d3:f6:42:
                    2f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                87:04:53:DA:CF:07:4A:BE:20:B9:62:11:3F:3D:ED:D3:63:16:C4:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BsuoLiRegQiBAKEc4FtrcV6qgGnQ6Q7ug3Y2jRoKYUff/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BsuoLiRegQiBAKEc4FtrcV6qgGnQ6Q7ug3Y2jRoKYUff/0/870453DACF074ABE20B962113F3DEDD36316C446.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.52.0/22
                IPv6:
                  2804:3958::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266025

    Signature Algorithm: sha256WithRSAEncryption
         b2:84:6e:e6:59:4b:03:99:51:79:73:d3:75:90:77:1b:f1:c2:
         e9:b3:5c:4f:df:d8:c4:aa:de:d5:de:1c:44:76:3c:21:98:89:
         f5:5e:b7:cb:b9:ce:9a:b5:e1:a4:42:7c:48:90:7f:75:f8:64:
         9f:2a:01:a0:5d:3a:d7:0e:58:cf:2f:0f:f4:4c:e5:0a:1a:db:
         7c:b6:7c:46:2d:13:20:50:43:5d:cf:f8:a2:7a:26:9a:7e:8c:
         8c:89:1b:85:d3:be:05:fa:df:be:60:1c:80:fa:4f:c5:90:69:
         a4:23:0c:da:ed:69:ca:bf:f9:d9:27:6e:f6:02:fc:bd:bd:3b:
         62:64:af:a7:d0:17:7e:a0:80:35:04:5d:af:67:f1:d6:35:be:
         3e:87:8d:49:97:26:8e:1c:73:89:d5:98:76:12:68:37:e1:b6:
         b4:98:6b:07:45:91:67:aa:5d:56:29:c7:8c:1b:03:4c:10:e3:
         bd:ad:ba:05:83:1f:a2:15:fe:4f:6d:06:d8:7d:9c:1b:c3:8f:
         1f:fd:eb:79:50:70:9e:ee:31:b7:e3:0f:d7:57:fe:03:24:4a:
         ba:fb:e2:45:ab:ca:8d:9d:6b:83:cf:f0:39:a4:d0:d5:3f:a7:
         c2:19:49:3b:47:b5:66:2a:67:ac:aa:87:75:78:a7:90:51:4f:
         53:3a:9c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org