Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.cer
File:                     95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.cer (raw, json)
Hash identifier:          PyhLt5yikO9pRloFne0YpH6WTefYnRpMO0N56aBwVDE=
Subject key identifier:   95:C4:CF:A6:C8:BE:08:45:77:6E:68:1F:37:93:B6:CE:BB:A6:6A:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3074D94602A9BE2FDD4B111B095C689B60A963C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Jul 2022 21:31:06 +0000
Certificate not after:    Wed 12 Jul 2023 21:36:06 +0000
Subordinate resources:    AS: 265022
                          IP: 170.84.48.0/22
                          IP: 2804:3188::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:74:d9:46:02:a9:be:2f:dd:4b:11:1b:09:5c:68:9b:60:a9:63:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 21:31:06 2022 GMT
            Not After : Jul 12 21:36:06 2023 GMT
        Subject: CN=95C4CFA6C8BE0845776E681F3793B6CEBBA66A78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:b0:26:ab:3a:d8:a0:3c:ed:bf:8f:fe:e5:
                    4a:18:39:78:f1:1f:ea:b6:b5:52:d1:8a:42:39:07:
                    96:d9:2e:b5:42:67:0c:30:27:f2:06:cd:da:00:e1:
                    fc:62:a2:8d:ba:f6:a7:7e:bf:12:4f:ad:fd:96:f3:
                    dd:5a:cb:63:44:9a:ba:3b:ae:c0:07:66:86:5f:75:
                    29:03:15:e8:20:e9:09:19:9d:1e:65:eb:ac:ed:93:
                    34:36:dc:fe:1e:d5:bd:27:d0:62:90:4a:dd:7c:f3:
                    27:00:7d:b7:8d:ed:d0:bd:09:1e:a4:58:f9:c6:0b:
                    7f:6b:f0:9e:c2:61:49:8b:54:a9:e4:8a:24:66:c5:
                    c3:7c:c1:05:59:4d:ed:ac:fa:01:47:db:b4:16:bf:
                    52:a6:5a:de:44:42:c9:20:ca:55:93:b6:e1:80:e4:
                    eb:16:dc:2c:02:c4:bf:1c:98:9f:dd:0c:83:e3:eb:
                    bc:d8:78:71:bc:f1:f5:6f:84:f2:60:2a:28:39:6a:
                    60:23:36:89:89:ab:18:9c:ef:f2:d4:ed:c8:97:62:
                    90:57:3c:88:46:60:1a:46:b6:6a:bf:d3:6b:8a:a0:
                    a7:80:aa:24:cb:f9:fd:5f:0a:0e:cd:22:e5:c0:e3:
                    5d:15:d4:96:08:4e:15:d6:c6:5c:4a:95:7c:a9:60:
                    44:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:C4:CF:A6:C8:BE:08:45:77:6E:68:1F:37:93:B6:CE:BB:A6:6A:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AaTTwdy3SUmoTSxkP592bEoRz685runBDgkmLpoz2Kcw/0/95C4CFA6C8BE0845776E681F3793B6CEBBA66A78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.48.0/22
                IPv6:
                  2804:3188::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265022

    Signature Algorithm: sha256WithRSAEncryption
         03:17:68:be:aa:04:d5:d8:94:c8:a7:a1:34:49:55:68:be:74:
         fa:15:de:05:46:a8:0d:40:c1:21:e3:d3:dd:32:d8:d5:70:ef:
         b5:84:6e:3c:21:2d:ef:24:20:17:54:09:d6:32:11:0d:78:fc:
         8c:e1:19:16:c9:4d:02:a5:15:3c:df:02:a7:6a:36:a7:85:9a:
         66:9a:6d:25:20:dc:83:8d:f9:46:49:81:72:a9:05:c5:fe:30:
         d1:a9:81:9d:63:04:7d:ae:b9:9d:91:18:95:89:94:0d:18:ea:
         a0:3c:37:0c:1a:e5:c9:e2:81:73:62:22:67:f5:ab:45:59:a4:
         3f:89:0f:94:5c:9b:1d:70:60:c9:1a:d4:2c:78:2c:77:82:d2:
         48:fd:86:de:f3:1c:b4:3f:e8:e5:ea:85:2e:ae:51:de:31:36:
         a3:5c:63:8a:0c:d1:5c:16:de:8c:10:89:26:6f:c4:9e:40:cc:
         90:b2:fb:3c:11:a2:ad:29:1f:09:60:89:d8:84:81:69:9a:eb:
         e9:aa:f2:85:ed:b8:87:01:88:82:dd:7a:af:f5:3b:6e:04:f2:
         09:91:6b:97:9e:0c:b7:4b:15:fe:60:6d:a6:3b:6f:f2:d5:8e:
         41:75:a2:23:45:e2:0c:b9:18:20:26:b8:6f:96:87:c1:6a:8e:
         61:33:63:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org