Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A2EAAB5D0E2B061E4D6CD2A2DCB5FED490C562E3.cer
File:                     A2EAAB5D0E2B061E4D6CD2A2DCB5FED490C562E3.cer (raw, json)
Hash identifier:          XIsOcx8PAhuNoSTmSAm4z+iVgnFIsI9Z7KeCJweCI1E=
Subject key identifier:   A2:EA:AB:5D:0E:2B:06:1E:4D:6C:D2:A2:DC:B5:FE:D4:90:C5:62:E3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10B966CE7B4642C0EF860CB368708F39B3F0EC01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/A2EAAB5D0E2B061E4D6CD2A2DCB5FED490C562E3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Oct 2021 14:48:55 +0000
Certificate not after:    Fri 21 Oct 2022 14:53:55 +0000
Subordinate resources:    AS: 270695
                          IP: 181.192.112.0/22
                          IP: 2804:6fec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:b9:66:ce:7b:46:42:c0:ef:86:0c:b3:68:70:8f:39:b3:f0:ec:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 22 14:48:55 2021 GMT
            Not After : Oct 21 14:53:55 2022 GMT
        Subject: CN=A2EAAB5D0E2B061E4D6CD2A2DCB5FED490C562E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:07:5a:cb:e5:88:1d:bf:2c:ff:f2:4a:07:49:
                    28:66:d2:20:2f:ea:60:3f:93:40:e0:af:8d:75:0d:
                    ca:cb:c8:c2:33:0f:62:bb:9e:2c:8e:a8:4d:3e:d6:
                    73:ca:32:f7:1b:f9:6e:20:00:5f:08:89:b9:73:63:
                    1e:f8:7b:6a:4b:e6:f3:3c:68:2d:a2:ba:dd:1e:30:
                    eb:1a:49:b9:39:52:b2:32:2d:49:d7:54:52:9e:9f:
                    b0:01:20:70:d1:c5:1a:33:1e:84:20:71:99:96:91:
                    a4:b6:a8:de:5a:d9:87:54:58:66:76:96:49:d2:1b:
                    ea:31:d4:2e:bb:53:f7:aa:bc:e7:f1:f1:14:e8:33:
                    f2:67:f6:ac:8b:0e:58:4d:3a:f1:88:bc:0e:c8:c1:
                    92:4b:9c:18:1f:1d:b4:74:a5:42:78:e8:04:39:9d:
                    63:bf:fd:22:03:e9:ee:74:1a:29:59:2d:7a:06:cf:
                    01:ab:3b:18:8d:d5:a2:ea:51:6b:ff:64:dd:df:16:
                    2b:6e:a1:17:f1:d0:df:95:a9:1f:81:0e:57:8a:d3:
                    43:d9:7a:3d:95:ee:47:6f:0a:de:18:1d:26:6a:02:
                    fc:dd:f9:54:46:d7:a5:04:b0:c8:bb:6c:cb:8b:c1:
                    d1:12:15:b0:1d:d7:3c:d2:fb:38:08:ec:ca:45:6d:
                    a5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:EA:AB:5D:0E:2B:06:1E:4D:6C:D2:A2:DC:B5:FE:D4:90:C5:62:E3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ECDoEKKEw2kaNJmPzHsL4hFHPKVMwu9w2G62CKP93a2V/0/A2EAAB5D0E2B061E4D6CD2A2DCB5FED490C562E3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.112.0/22
                IPv6:
                  2804:6fec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270695

    Signature Algorithm: sha256WithRSAEncryption
         92:c0:25:d1:05:2b:98:1b:0b:4e:f9:87:72:e5:25:aa:fa:49:
         fd:37:42:17:12:5f:04:d3:4a:b1:9c:33:bb:b3:98:6e:82:ff:
         03:ec:f4:6b:46:f9:a3:6d:d0:b1:eb:13:10:2b:b3:75:5b:48:
         75:f4:7f:4a:a2:73:c7:1b:7e:c7:80:11:82:93:ea:d9:91:83:
         21:03:f7:d5:b9:76:a3:79:e9:4a:07:95:f0:d8:b0:6e:16:c7:
         58:6a:82:07:31:b5:07:7d:80:f5:90:cd:a7:4f:3a:de:01:0e:
         29:e2:5d:57:da:3e:aa:3e:8f:69:d8:8a:5b:9e:58:5c:6c:91:
         4e:77:83:ee:fa:a4:1e:9c:3e:ee:c2:73:d8:a7:73:81:2e:9e:
         8b:24:2e:fc:d3:80:10:99:f1:9d:58:d8:20:83:17:e8:e8:d2:
         92:5d:fd:b8:6a:c0:9b:a2:d3:2c:eb:07:71:ec:be:ab:08:ec:
         d9:d7:c6:61:32:5c:fd:67:1b:36:5b:51:8a:47:38:cd:1b:2f:
         a7:6a:b7:07:30:71:3d:9c:2a:79:4b:3a:80:f5:25:81:90:10:
         69:57:9c:8d:7c:d8:96:d1:c9:18:9f:9d:e8:af:a4:e7:05:e8:
         a6:9b:5e:3b:20:94:49:26:41:af:c1:58:fd:1e:a2:7b:10:99:
         b6:d1:be:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org