Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C109D692D39010DB2B427376BB5EC9AA6B053F66.cer
File:                     C109D692D39010DB2B427376BB5EC9AA6B053F66.cer (raw, json)
Hash identifier:          MS/Ue77mLZnLuny94hC6RO6mKdDGRShRtIKzE8HXe1Q=
Subject key identifier:   C1:09:D6:92:D3:90:10:DB:2B:42:73:76:BB:5E:C9:AA:6B:05:3F:66
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5021891EFA6619A20E10A940178558967D911B59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/C109D692D39010DB2B427376BB5EC9AA6B053F66.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 25 Jul 2021 16:55:45 +0000
Certificate not after:    Sun 24 Jul 2022 17:00:45 +0000
Subordinate resources:    AS: 266553
                          IP: 160.238.148.0/22
                          IP: 2804:3dc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:21:89:1e:fa:66:19:a2:0e:10:a9:40:17:85:58:96:7d:91:1b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 16:55:45 2021 GMT
            Not After : Jul 24 17:00:45 2022 GMT
        Subject: CN=C109D692D39010DB2B427376BB5EC9AA6B053F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:d2:18:9e:7f:43:fc:15:16:1e:73:75:60:
                    97:6d:b1:68:35:a4:67:4d:d5:b1:2b:9c:c2:35:3a:
                    6a:d9:f1:0c:08:c3:5a:a8:b9:2c:dc:45:cd:59:28:
                    22:09:8a:20:bc:bb:19:87:f3:b9:2c:fa:45:eb:a8:
                    36:19:49:4d:dd:16:51:d0:0d:70:c2:1b:16:77:12:
                    2a:f7:5d:92:c5:48:55:b1:9e:17:bc:69:a3:9a:8e:
                    37:be:4d:90:9a:89:b4:2b:fe:c7:af:88:00:e3:d8:
                    de:35:c4:03:68:ae:07:a2:54:40:d3:17:e1:93:7a:
                    fe:ce:fe:63:1a:20:2a:69:9b:32:e3:c8:cc:de:a2:
                    03:30:71:a4:e6:e5:18:10:65:65:4c:5d:8f:ea:16:
                    de:bb:dc:2c:9b:09:ae:ec:5a:8f:d6:11:8e:67:65:
                    1e:4a:14:33:4e:f2:ec:b6:30:06:c7:e7:64:d7:0e:
                    59:85:2b:23:a5:3d:9a:19:32:40:73:de:2b:07:1c:
                    74:0e:c0:d3:69:d7:cb:59:b1:72:4a:69:89:8f:e6:
                    f1:77:20:3f:a5:d5:0c:87:53:89:9f:f8:b0:ae:4e:
                    d0:ec:ad:70:14:d6:08:de:44:bf:5c:a4:50:8f:12:
                    27:7d:9e:93:4f:18:c9:12:c1:5c:ae:b3:c5:0c:0b:
                    b6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:09:D6:92:D3:90:10:DB:2B:42:73:76:BB:5E:C9:AA:6B:05:3F:66
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A1xTCiSxXKXfncx5xRo8bMsfWRGWTv5F7aCS4SGiUQQM/0/C109D692D39010DB2B427376BB5EC9AA6B053F66.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.148.0/22
                IPv6:
                  2804:3dc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266553

    Signature Algorithm: sha256WithRSAEncryption
         27:bc:e9:30:49:b9:87:e4:d4:04:bc:7d:65:89:5f:6a:3f:d5:
         52:91:cc:d2:2c:30:13:f7:dc:2f:80:cc:8d:bb:70:01:ba:11:
         f4:fa:f3:02:bc:d9:59:b7:d3:0f:b4:27:52:d2:19:03:db:8e:
         bf:fc:66:f9:d1:21:ff:6c:60:5e:6d:2c:07:99:fa:48:9e:43:
         16:a1:af:43:93:11:4b:26:e8:16:63:1a:97:60:08:04:e9:ee:
         61:c1:59:79:4e:e5:ba:53:b1:fc:b6:77:31:3f:42:12:6e:be:
         77:a8:37:1f:33:ae:4b:6c:db:f6:47:98:ec:c0:99:8e:47:58:
         6c:f3:5c:1d:93:9f:90:4f:c3:5f:f6:e5:e3:ac:f8:9d:bd:a3:
         bc:4e:ab:c6:62:1f:55:f5:3f:d4:35:a0:70:c7:d9:d8:d1:e3:
         73:55:b5:e4:b0:61:51:ac:9d:fc:34:e4:52:0d:49:af:0d:77:
         3c:c6:bf:a5:43:a2:e7:8b:76:f7:fa:b2:6b:cb:1b:99:55:df:
         4a:57:85:47:e0:1a:f8:9d:b6:54:0b:a1:fe:db:81:da:30:9d:
         fa:e8:9b:88:9c:6b:f3:03:86:88:dc:71:00:20:80:8b:0a:61:
         66:5f:a9:40:f2:c4:cb:91:72:e8:66:18:d2:a9:f7:20:3f:88:
         b4:0e:58:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org