Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/B2AE5959E08E010B84520986941454654A2116F2.cer
File:                     B2AE5959E08E010B84520986941454654A2116F2.cer (raw, json)
Hash identifier:          cN7tbemLl3aEGywikz4oxnVlYDwiFkLTYhjx+pT8f+Q=
Subject key identifier:   B2:AE:59:59:E0:8E:01:0B:84:52:09:86:94:14:54:65:4A:21:16:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6FAF2B4A301467F4D618D94C9A1BB25CF589CC79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/B2AE5959E08E010B84520986941454654A2116F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Feb 2022 05:35:38 +0000
Certificate not after:    Tue 21 Feb 2023 05:40:38 +0000
Subordinate resources:    AS: 52872
                          IP: 168.0.236.0/22
                          IP: 168.197.136.0/22
                          IP: 177.128.192.0/21
                          IP: 2804:88c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:af:2b:4a:30:14:67:f4:d6:18:d9:4c:9a:1b:b2:5c:f5:89:cc:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 05:35:38 2022 GMT
            Not After : Feb 21 05:40:38 2023 GMT
        Subject: CN=B2AE5959E08E010B84520986941454654A2116F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5f:d6:ca:3a:63:7d:a4:11:51:86:35:df:5a:
                    66:c5:18:3e:bf:19:03:db:5d:f4:9f:83:d2:9a:83:
                    c4:fb:34:6e:54:9a:59:a8:49:38:21:db:25:4a:3a:
                    e6:91:83:90:c7:92:67:38:19:89:4b:6c:16:f3:e6:
                    9c:45:75:24:f8:c1:67:9c:6f:36:f1:ca:87:3a:05:
                    f7:d4:ec:e6:b2:4f:64:bc:a4:58:d5:95:95:ce:8c:
                    f5:05:fe:ef:27:47:b5:42:91:b0:78:59:14:8e:88:
                    59:83:88:16:50:eb:14:97:b5:c8:b1:a9:9f:5f:14:
                    73:be:51:ec:45:5e:a5:e7:1c:0a:ef:53:c8:83:81:
                    b3:b8:9b:33:f0:5f:3a:92:a6:b6:c9:7e:67:74:41:
                    6c:0c:4e:8c:d4:d3:88:6c:40:28:11:82:38:53:4b:
                    5f:3d:03:fe:1e:75:ae:30:60:f4:e0:a2:0b:4f:f3:
                    e2:37:25:52:e0:09:b0:1a:fc:04:29:5f:e3:4b:04:
                    ff:4d:42:b1:2d:c3:e2:1e:93:03:b4:e2:81:56:fd:
                    a1:91:c5:b1:39:20:8d:b4:15:21:51:ff:a1:05:75:
                    9e:39:75:cc:47:22:81:35:54:1e:38:71:ab:62:fb:
                    d1:31:29:c1:23:d6:51:da:24:df:18:d2:5d:a6:9a:
                    cb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B2:AE:59:59:E0:8E:01:0B:84:52:09:86:94:14:54:65:4A:21:16:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/0/B2AE5959E08E010B84520986941454654A2116F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.236.0/22
                  168.197.136.0/22
                  177.128.192.0/21
                IPv6:
                  2804:88c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52872

    Signature Algorithm: sha256WithRSAEncryption
         8e:ae:6f:f0:c9:89:4d:c0:9d:a0:7e:0f:9f:52:6a:65:28:ac:
         45:e1:16:b0:34:61:05:9e:1d:cc:19:b4:39:a6:40:cf:8e:75:
         11:4e:3f:07:99:f1:5b:a7:df:65:02:c5:b7:12:ce:87:fa:2b:
         fc:e1:77:25:15:18:3d:de:ef:b4:0e:27:43:9a:c1:e2:c2:57:
         c0:f9:31:6b:bc:a8:76:f9:de:b2:1d:67:c3:70:f5:b5:31:63:
         1d:fe:49:49:85:7e:1a:b6:08:17:84:28:84:18:42:59:c1:e8:
         88:c1:90:a8:83:be:ad:7b:5b:36:9c:0e:c8:6b:6c:ea:7c:77:
         38:74:74:fe:00:41:00:df:ef:66:1e:ff:12:c7:43:eb:9d:78:
         31:39:cf:ef:fd:ab:d7:8e:63:81:bd:ec:5c:69:4e:22:bb:1c:
         4f:33:e2:7a:0b:aa:66:ae:23:57:ef:58:6f:1c:0f:e1:e9:80:
         18:8c:a5:7e:e4:aa:1f:3e:cb:9a:9d:df:4a:32:fd:b7:a0:f1:
         55:00:ec:9e:22:18:81:03:3d:30:02:50:fb:64:d3:7e:ff:de:
         eb:11:9b:93:87:aa:29:fc:46:76:74:41:47:88:9e:c7:21:87:
         77:f2:8e:4f:4a:ab:d6:a5:a0:a9:e1:a1:96:62:ae:91:2c:2d:
         4c:b8:a8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:12 2024 by rpki-client on console-ams.rpki-client.org