Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/953C20849494211C871ED33EC10446FED42AF4C7.cer
File:                     953C20849494211C871ED33EC10446FED42AF4C7.cer (raw, json)
Hash identifier:          ttJqU+Rv10+w13x0pUZM7R3YoCBDVTM6rq2Vm1Nat5A=
Subject key identifier:   95:3C:20:84:94:94:21:1C:87:1E:D3:3E:C1:04:46:FE:D4:2A:F4:C7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       135B33ACE920FCDFDF54CAC3B0472364A31C3285
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/953C20849494211C871ED33EC10446FED42AF4C7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Oct 2022 21:03:00 +0000
Certificate not after:    Thu 12 Oct 2023 21:08:00 +0000
Subordinate resources:    AS: 271443
                          IP: 179.0.72.0/22
                          IP: 2804:7ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5b:33:ac:e9:20:fc:df:df:54:ca:c3:b0:47:23:64:a3:1c:32:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 21:03:00 2022 GMT
            Not After : Oct 12 21:08:00 2023 GMT
        Subject: CN=953C20849494211C871ED33EC10446FED42AF4C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:04:c7:5e:31:c7:81:a7:cd:bb:fb:68:58:
                    9d:14:da:93:3d:b2:c9:0f:5a:9d:b9:30:57:3c:0a:
                    60:1c:f1:a1:8c:33:ef:02:33:25:90:ec:dc:1d:7d:
                    dd:a8:b0:c2:c5:a9:14:76:4d:a7:3a:c7:0b:11:06:
                    88:5f:d4:ca:d3:f8:3b:0d:4d:97:a6:02:bf:0d:b4:
                    72:13:80:34:10:c1:a5:dc:bc:31:0c:10:50:34:32:
                    91:04:6b:90:66:a7:90:e7:74:cc:77:f0:68:38:97:
                    6d:08:46:cf:80:a1:b8:75:bf:d0:ed:d0:0a:d7:97:
                    aa:3f:ad:c0:3d:89:ca:f4:f7:f3:52:90:1d:14:45:
                    eb:dd:a6:43:c3:cc:29:12:9a:63:cb:b1:a3:57:6f:
                    80:f4:fe:ac:85:b6:e0:bd:05:7e:49:73:bf:5f:ff:
                    c4:2f:f3:7d:9f:25:b3:b5:7a:f7:86:66:c8:62:92:
                    be:12:0f:e3:0c:23:a4:e2:e5:92:11:f2:ae:ef:00:
                    c3:9f:76:3b:4c:f5:b4:6d:68:64:d4:20:30:1e:a1:
                    46:31:94:97:aa:99:34:aa:3b:eb:12:90:e7:d7:f0:
                    08:50:52:19:53:21:0f:e5:8f:f9:23:b6:b7:6c:79:
                    92:48:3a:2c:d5:f9:a3:3f:ff:19:31:24:82:c7:a8:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:3C:20:84:94:94:21:1C:87:1E:D3:3E:C1:04:46:FE:D4:2A:F4:C7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/5/953C20849494211C871ED33EC10446FED42AF4C7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.72.0/22
                IPv6:
                  2804:7ba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271443

    Signature Algorithm: sha256WithRSAEncryption
         39:d4:55:d1:2f:01:32:39:b3:f4:ef:2d:24:e0:09:53:d0:f3:
         31:75:3b:97:df:ee:51:ba:79:af:d3:af:06:3f:d0:70:6e:3b:
         cc:2a:19:05:9d:c0:d2:38:37:a4:99:b8:3b:20:04:4f:68:2c:
         32:11:a5:1e:a0:26:26:e5:33:6c:ed:bd:06:04:aa:c3:42:5a:
         90:48:d5:d7:11:f4:09:63:68:0f:42:9c:9c:2b:8b:bb:99:d7:
         65:75:d3:91:1e:5e:1c:2f:50:2e:9b:a7:af:72:13:2c:7e:6c:
         42:c2:81:5c:cd:19:7c:a6:ad:15:30:90:76:65:3d:a0:29:b2:
         99:c3:1b:2b:e5:9e:91:7d:e8:af:e7:07:27:ad:c9:54:12:28:
         c9:2a:ab:6a:24:9c:f4:10:b4:d0:08:2c:b1:45:76:ca:5d:69:
         14:28:a9:8d:30:ee:11:8b:62:a1:ad:84:4f:6f:b7:37:e4:af:
         fa:97:f0:bb:b6:03:9d:35:c7:27:37:ee:72:16:50:55:42:64:
         c8:0c:a6:34:bf:a1:fa:06:34:23:8a:28:98:e1:af:c2:1c:e9:
         5e:b7:a1:27:21:95:fb:05:f4:ee:93:37:a5:b9:6e:2e:46:31:
         d7:cf:0c:99:a6:c3:1b:d5:eb:06:60:50:1a:07:73:b7:27:3d:
         44:11:2f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org