Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/BC922220430ADFDF774FDBCF861291C69D4619F2.cer
File:                     BC922220430ADFDF774FDBCF861291C69D4619F2.cer (raw, json)
Hash identifier:          0K3QL2osHpTNpfFtnzNIoymLJCUX9VmP8EOvMnieriQ=
Subject key identifier:   BC:92:22:20:43:0A:DF:DF:77:4F:DB:CF:86:12:91:C6:9D:46:19:F2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2539D870ECA1E531C8BBA2F7A61510A9B180BEA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3VjJ337kaDJs2KLXBBHHaYXRgGmCmcwjpPXRxGHtmnwj/0/BC922220430ADFDF774FDBCF861291C69D4619F2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3VjJ337kaDJs2KLXBBHHaYXRgGmCmcwjpPXRxGHtmnwj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Apr 2022 00:56:13 +0000
Certificate not after:    Tue 11 Apr 2023 01:01:13 +0000
Subordinate resources:    AS: 271275
                          IP: 45.163.0.0/22
                          IP: 2804:78f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:39:d8:70:ec:a1:e5:31:c8:bb:a2:f7:a6:15:10:a9:b1:80:be:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 00:56:13 2022 GMT
            Not After : Apr 11 01:01:13 2023 GMT
        Subject: CN=BC922220430ADFDF774FDBCF861291C69D4619F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ec:33:4a:1c:a3:e4:9a:a3:df:db:a8:4b:96:
                    20:3f:1d:62:a3:2b:71:c6:a0:27:3f:05:10:50:10:
                    4d:a7:2d:41:89:0e:20:e9:2f:34:88:70:ac:bf:0d:
                    94:82:03:ae:09:84:63:87:84:30:86:87:f2:3f:42:
                    65:cb:bb:41:0f:34:72:9b:b8:00:13:ad:3a:1a:39:
                    f1:77:76:d8:64:02:33:2a:5a:41:47:1e:c1:e1:a4:
                    7a:cd:e5:96:02:9a:29:5a:f6:c2:80:a7:d8:90:c1:
                    7d:63:e6:30:17:ce:0a:6c:e1:28:a3:83:74:cd:15:
                    17:83:b8:fb:21:ae:61:f5:76:3e:e8:68:90:f8:c9:
                    39:40:26:bb:80:28:42:2e:69:be:da:92:e8:f3:cb:
                    4b:8f:71:cf:c2:03:df:ae:78:02:6a:7c:10:68:ec:
                    7b:5c:d5:8e:f9:73:7c:58:aa:a5:71:e4:c6:3b:b4:
                    1f:fa:e7:34:cf:1c:98:e9:47:09:13:5b:ec:c3:97:
                    99:04:34:d4:bc:5b:cc:c4:71:19:34:75:f6:47:88:
                    fc:bc:63:7b:5b:93:a5:fe:39:db:22:40:8b:ad:04:
                    aa:f4:b6:62:b5:7a:bd:f9:b8:c0:e8:3a:db:a7:fa:
                    3d:2a:d2:b7:e4:ce:b8:62:38:8b:61:d8:62:a7:79:
                    8a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                BC:92:22:20:43:0A:DF:DF:77:4F:DB:CF:86:12:91:C6:9D:46:19:F2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3VjJ337kaDJs2KLXBBHHaYXRgGmCmcwjpPXRxGHtmnwj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3VjJ337kaDJs2KLXBBHHaYXRgGmCmcwjpPXRxGHtmnwj/0/BC922220430ADFDF774FDBCF861291C69D4619F2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.0.0/22
                IPv6:
                  2804:78f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271275

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:72:74:54:85:0f:e2:38:04:1b:c5:7b:0d:5f:3e:df:00:
         b4:bf:38:d2:7f:30:24:c8:3a:d3:f1:d2:a2:03:72:98:c6:47:
         11:b4:11:05:b5:8b:51:99:45:7a:30:14:5e:20:a6:0e:86:75:
         4f:1b:ea:79:04:3f:a8:01:f0:4e:c1:f0:69:1b:82:72:fb:ae:
         4d:16:73:8e:1e:3d:28:e0:9c:13:88:95:6e:cb:5a:d6:f6:ed:
         b9:f9:9f:ed:c0:71:75:94:0d:0f:0f:64:c1:3b:51:39:21:c7:
         2f:60:02:0c:b6:d0:2e:1c:ca:10:9a:30:83:ea:03:2c:27:4d:
         e4:32:44:de:c3:f9:79:68:b8:8e:d3:20:09:b0:41:3c:80:32:
         5c:76:20:28:0b:4e:58:3c:58:83:5c:5b:9b:74:46:0d:7b:8a:
         36:98:9c:9b:2c:23:fe:55:f7:43:d7:cc:57:12:85:75:53:a5:
         61:c9:c3:ba:83:6b:92:7d:b0:be:a7:b2:2d:4e:d0:4e:d2:86:
         97:39:a8:2c:da:14:8d:06:c5:3a:22:e1:d8:e5:55:1b:e2:40:
         87:52:89:23:e0:c1:3c:53:29:7d:25:29:a8:33:6e:79:44:64:
         7b:95:63:7e:1d:23:ed:98:64:7c:9a:50:3b:be:e1:c2:ce:ea:
         52:84:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org