Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A08E63494DA6E972F50E12A9AB0F682B8F875B9C.cer
File:                     A08E63494DA6E972F50E12A9AB0F682B8F875B9C.cer (raw, json)
Hash identifier:          di7J9zPzejfId4XtGJGPVvsS5yERnZfFaxw0oONcxxs=
Subject key identifier:   A0:8E:63:49:4D:A6:E9:72:F5:0E:12:A9:AB:0F:68:2B:8F:87:5B:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0443D2160B7B023B72E147F86CB91F0E3A8A60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/A08E63494DA6E972F50E12A9AB0F682B8F875B9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 04 Aug 2022 20:40:49 +0000
Certificate not after:    Thu 03 Aug 2023 20:45:49 +0000
Subordinate resources:    AS: 264422
                          IP: 131.221.172.0/22
                          IP: 2804:1e58::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:43:d2:16:0b:7b:02:3b:72:e1:47:f8:6c:b9:1f:0e:3a:8a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  4 20:40:49 2022 GMT
            Not After : Aug  3 20:45:49 2023 GMT
        Subject: CN=A08E63494DA6E972F50E12A9AB0F682B8F875B9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:73:da:43:67:6e:2f:00:70:60:45:27:c5:6f:
                    80:a8:89:c7:be:57:93:9a:6c:2b:f6:2a:83:42:bb:
                    e8:09:0b:69:d6:86:3f:ef:94:15:ca:1b:ad:73:a5:
                    29:ca:87:24:38:da:eb:22:54:56:c9:af:dc:c2:40:
                    75:b0:16:e4:ea:29:f9:fa:2c:6d:01:83:94:b4:df:
                    83:ea:7a:75:d2:15:e7:b0:10:b4:8c:8d:67:f5:49:
                    fa:37:30:fa:10:c3:8b:35:2a:38:63:21:28:07:2d:
                    d8:13:c8:d1:6a:81:e6:3f:42:cd:f0:f8:9f:ce:84:
                    2f:d4:70:24:ff:f8:2c:3d:27:57:27:fc:65:8d:2e:
                    0d:70:ac:01:94:a2:c6:a8:bc:36:c2:af:a2:7a:d5:
                    91:f3:0f:2b:32:4c:d7:3c:56:7a:c5:5e:34:66:1c:
                    09:46:75:8c:c7:0f:42:ec:a4:3b:df:41:15:59:f3:
                    c6:8a:fd:8f:ab:f8:fe:e7:2a:70:27:f3:88:67:6a:
                    ab:14:c3:a2:ec:bb:cc:27:c0:79:18:d1:21:69:de:
                    cf:ce:06:74:97:89:32:a6:dd:bf:8c:9a:a2:db:5d:
                    c1:78:9c:41:ec:79:54:f7:04:4a:8a:5f:e5:44:65:
                    b9:b6:ad:96:92:7f:90:47:72:ee:e0:17:9b:0a:20:
                    7b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A0:8E:63:49:4D:A6:E9:72:F5:0E:12:A9:AB:0F:68:2B:8F:87:5B:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/0/A08E63494DA6E972F50E12A9AB0F682B8F875B9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.172.0/22
                IPv6:
                  2804:1e58::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264422

    Signature Algorithm: sha256WithRSAEncryption
         84:07:c0:fb:2b:de:84:51:71:c8:1f:8a:c7:e4:cb:64:56:bd:
         9b:ad:67:c4:8e:ac:94:59:c2:48:cb:33:f5:55:d5:b7:21:40:
         ea:ea:60:a8:5a:23:da:f4:17:6a:88:6b:06:a9:cd:28:d2:a6:
         db:92:f9:37:33:3f:c3:2f:06:c0:57:c2:c8:a5:89:a1:bd:e6:
         ef:9a:7e:11:09:6e:1f:55:5a:ea:eb:c5:57:9c:94:c8:4c:98:
         4e:c6:80:95:31:d8:96:51:54:49:0e:e0:dd:18:01:69:5f:48:
         cf:ea:8d:14:4a:b8:10:1e:6d:69:ef:5a:00:7d:74:a2:32:0b:
         ad:9f:d5:a1:9f:2d:d9:83:82:38:7a:ec:f2:de:13:df:94:51:
         61:9c:79:7c:e6:a2:76:c8:27:73:b6:e1:e5:36:33:fd:59:d2:
         f4:f6:e0:2f:53:1e:7b:54:db:db:86:22:31:17:ba:7f:5c:88:
         61:fa:9b:5f:f9:77:4d:7e:89:5d:94:b7:b4:70:cb:b0:73:da:
         bc:71:a9:48:00:32:95:12:2c:ab:06:29:77:e6:30:ea:cd:05:
         48:57:28:c1:25:a4:ee:56:4d:37:6e:28:8c:ef:2d:57:91:3d:
         5e:90:a3:c8:d1:2f:c6:12:a0:a7:9f:6e:0e:d9:e2:99:24:cd:
         ac:5d:14:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org