Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A1D697D5F26C934F936EB51F21EE45C978C9807B.cer
File:                     A1D697D5F26C934F936EB51F21EE45C978C9807B.cer (raw, json)
Hash identifier:          kF95dhPIVv+O2iUCCfcc64mC2LLrBR+afJbqER4xsBc=
Subject key identifier:   A1:D6:97:D5:F2:6C:93:4F:93:6E:B5:1F:21:EE:45:C9:78:C9:80:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C1CCCCA02BDDD04D2899EA19B070A9EC27F1163
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/A1D697D5F26C934F936EB51F21EE45C978C9807B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 07 Nov 2022 14:15:14 +0000
Certificate not after:    Mon 06 Nov 2023 14:20:14 +0000
Subordinate resources:    AS: 264200
                          IP: 138.97.192.0/22
                          IP: 2804:2414::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1c:cc:ca:02:bd:dd:04:d2:89:9e:a1:9b:07:0a:9e:c2:7f:11:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 14:15:14 2022 GMT
            Not After : Nov  6 14:20:14 2023 GMT
        Subject: CN=A1D697D5F26C934F936EB51F21EE45C978C9807B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5e:7e:ba:82:37:d3:8a:9a:0a:1a:75:67:10:
                    bc:9a:76:55:83:ac:8e:6b:f6:82:63:7f:a9:09:3e:
                    43:92:12:a7:14:b1:b6:86:c6:44:05:09:52:ed:38:
                    cb:7d:44:b8:e2:fa:80:5c:cb:ad:f5:6b:ef:99:70:
                    0b:df:c9:71:ad:d5:dd:a0:ea:33:74:45:72:70:8e:
                    fd:64:15:c2:17:df:e1:45:1b:aa:38:12:49:84:14:
                    14:3f:9e:4d:ff:5a:97:c1:95:05:df:2f:51:52:a6:
                    a2:8b:98:55:67:0b:e8:99:2a:f6:11:99:dd:84:03:
                    84:f6:90:13:3a:d9:eb:39:be:50:4c:43:b9:ae:17:
                    1a:20:9c:6f:d0:36:8c:e9:fd:0d:c1:2a:9d:65:a5:
                    42:9b:f1:31:9e:b6:8a:06:30:a4:43:76:d7:93:1e:
                    74:55:fd:cf:90:35:d4:8e:35:5a:04:c9:0f:42:95:
                    1c:07:51:5a:5c:22:9d:36:d2:c2:5f:dc:5e:4d:3b:
                    ff:57:b4:ea:39:6d:13:70:2c:a4:83:cc:68:21:78:
                    cf:df:71:a7:51:11:2b:44:5e:f9:ed:be:5b:8d:aa:
                    cb:0d:9b:c7:f1:74:3f:be:b2:97:94:50:5d:ba:07:
                    2f:bc:a7:16:58:d1:9b:67:08:cd:c4:ca:04:52:a2:
                    0b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:D6:97:D5:F2:6C:93:4F:93:6E:B5:1F:21:EE:45:C9:78:C9:80:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/A1D697D5F26C934F936EB51F21EE45C978C9807B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.192.0/22
                IPv6:
                  2804:2414::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264200

    Signature Algorithm: sha256WithRSAEncryption
         7f:87:e0:3e:74:0b:e4:d6:d7:62:39:23:dd:63:52:06:ff:88:
         88:d6:e2:8d:ba:15:45:83:73:18:40:fe:49:2d:ef:a8:e4:0f:
         41:8d:b5:fa:37:2f:80:85:61:05:59:88:2a:a6:9f:c1:3d:7b:
         38:e4:bd:01:8b:94:d4:0a:ec:32:c9:2b:a2:00:f0:44:7b:93:
         24:3a:3a:79:0f:9e:23:db:58:f8:82:8f:f1:1d:9c:20:d2:c8:
         a9:bf:bc:15:74:59:87:ce:44:86:c1:17:b2:38:ad:df:ba:5e:
         82:90:fc:53:9e:58:2d:af:e7:42:1b:7b:61:57:3b:6d:72:1b:
         0f:29:d0:5a:a0:12:92:db:f5:9d:10:67:0a:c0:00:2e:07:ed:
         43:15:c3:64:9e:63:7b:ca:1d:12:28:ec:3e:fa:e2:b3:2e:9c:
         26:7a:4c:c3:17:a4:70:c0:db:58:cf:bf:d8:5e:e2:56:19:35:
         d2:ae:9f:0f:4e:4d:af:5e:27:2c:38:f1:8f:85:d3:79:ed:13:
         dc:8d:1e:68:e5:b8:b5:d1:89:84:e5:91:a8:dc:1f:58:7c:e1:
         6a:9a:0e:eb:72:b4:7d:ae:c5:4f:a7:3d:7c:8b:03:a9:ac:6e:
         7e:d4:36:c3:15:7e:54:b5:1e:76:ec:91:45:ca:76:a0:af:b9:
         03:01:6a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org