Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C1BE11982504988CDC3420027470CF8DE3A2973E.cer
File:                     C1BE11982504988CDC3420027470CF8DE3A2973E.cer (raw, json)
Hash identifier:          frMyF1/mz3RMV2+3xueM9MTn+NG1MYsP/1/T2quWrxg=
Subject key identifier:   C1:BE:11:98:25:04:98:8C:DC:34:20:02:74:70:CF:8D:E3:A2:97:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       627EB8D357A7C68C292F40178226A727766D9E3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/C1BE11982504988CDC3420027470CF8DE3A2973E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Jun 2022 17:21:00 +0000
Certificate not after:    Tue 13 Jun 2023 17:26:00 +0000
Subordinate resources:    AS: 271068
                          IP: 179.48.72.0/22
                          IP: 2804:75c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7e:b8:d3:57:a7:c6:8c:29:2f:40:17:82:26:a7:27:76:6d:9e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 14 17:21:00 2022 GMT
            Not After : Jun 13 17:26:00 2023 GMT
        Subject: CN=C1BE11982504988CDC3420027470CF8DE3A2973E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:d6:58:61:cd:df:78:e7:24:fe:a7:e5:54:a2:
                    46:49:3c:bb:5a:14:12:b7:b2:51:a9:e2:6b:fb:8e:
                    52:25:fe:c2:9b:2e:5d:dd:31:be:55:27:a1:c5:e5:
                    c6:72:03:ef:ec:fb:12:6a:7f:c0:75:61:8f:9b:d2:
                    9a:65:d9:82:27:89:4a:aa:c5:83:3d:4b:c7:84:3f:
                    45:50:f2:1f:61:6f:7b:9e:29:8e:b9:2e:b0:d1:5e:
                    27:71:4f:ff:61:c7:c0:c5:ea:f4:0b:a9:4f:c1:b5:
                    1b:3f:b7:51:15:e0:9f:af:5e:c4:51:f7:76:41:2b:
                    6a:ee:25:70:79:43:4a:1c:b1:b7:05:b9:89:12:4e:
                    12:c5:a2:0d:47:2f:39:36:d1:ae:52:03:98:bb:32:
                    fb:d4:d4:ed:00:9b:bf:cb:84:f7:13:47:f3:26:db:
                    07:ae:9a:df:7e:5f:d8:1f:fb:39:b4:8f:f5:32:10:
                    d6:2d:75:7a:38:ff:e9:66:30:bb:c5:82:00:8e:fa:
                    a4:fe:06:d9:37:cf:31:39:0e:f7:60:6b:55:a0:69:
                    99:49:ba:a3:7f:83:d6:7d:cd:6f:13:93:aa:89:06:
                    f9:1a:e1:cf:40:a8:6a:3a:c8:05:57:f2:98:fb:b2:
                    c7:d1:88:17:ec:ff:56:30:ea:89:be:05:c3:65:89:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:BE:11:98:25:04:98:8C:DC:34:20:02:74:70:CF:8D:E3:A2:97:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HNV2JWsQ6Do1GtrxhcqpoUZvJsLyaCNTPiAfjDfV7w1Z/0/C1BE11982504988CDC3420027470CF8DE3A2973E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.72.0/22
                IPv6:
                  2804:75c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271068

    Signature Algorithm: sha256WithRSAEncryption
         64:9e:4d:b6:4b:4e:02:77:6b:63:fc:a9:c6:9c:1c:fa:3b:e5:
         2c:cc:64:0f:ca:24:18:68:8f:37:b3:a9:2b:60:f4:b3:89:85:
         64:1c:08:53:0e:f8:86:d5:d0:10:1e:28:44:ca:56:03:30:14:
         2b:0f:a1:5a:e0:57:3b:c5:c0:64:9a:ca:71:f0:93:1d:0b:2f:
         b0:08:c3:17:e0:ed:21:b9:3a:09:bc:16:53:d1:cc:dd:0d:8f:
         cc:cc:8b:ba:0e:01:bc:2a:c1:14:5b:1c:8c:08:69:b7:91:0e:
         c4:05:b6:e1:f2:53:f5:72:e4:b2:ef:05:81:f2:2b:00:0f:60:
         f1:53:20:6e:a7:87:fc:3c:64:bf:1f:34:69:bc:61:c9:0c:0f:
         2d:ff:05:6f:46:ab:80:a3:12:16:51:b8:16:7f:26:48:19:bc:
         0c:02:7e:f6:34:6b:17:d0:9b:62:55:9f:6d:8e:a0:6f:ee:d2:
         9f:32:0e:a9:9b:d0:ba:c9:1c:ea:59:8f:80:95:49:04:07:50:
         11:e3:6a:8b:65:1a:97:d7:a6:fa:13:8f:2e:f2:e4:86:75:bc:
         f6:32:38:52:e6:aa:c7:54:a3:48:5e:d5:fe:28:c3:e4:00:11:
         87:d2:0b:6b:90:3c:61:b3:3e:4c:d4:b7:3d:22:6c:72:61:2c:
         60:9f:a8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org