Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C23A1D7A68932336228EB1C52C24A8494DFAC0E4.cer
File:                     C23A1D7A68932336228EB1C52C24A8494DFAC0E4.cer (raw, json)
Hash identifier:          /cZEdb8sk+7OhFoFlMXihem2WO87L+xZFWLNUgj5A9g=
Subject key identifier:   C2:3A:1D:7A:68:93:23:36:22:8E:B1:C5:2C:24:A8:49:4D:FA:C0:E4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25B683A03EF1622579B4251FDEA246D5A9A4A42B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/C23A1D7A68932336228EB1C52C24A8494DFAC0E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 29 Jul 2022 13:03:03 +0000
Certificate not after:    Fri 28 Jul 2023 13:08:03 +0000
Subordinate resources:    AS: 53045
                          IP: 138.121.232.0/22
                          IP: 170.79.4.0/22
                          IP: 177.85.144.0/21
                          IP: 2804:6d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:b6:83:a0:3e:f1:62:25:79:b4:25:1f:de:a2:46:d5:a9:a4:a4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 29 13:03:03 2022 GMT
            Not After : Jul 28 13:08:03 2023 GMT
        Subject: CN=C23A1D7A68932336228EB1C52C24A8494DFAC0E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:94:cd:d0:77:cd:b5:18:77:2c:e1:99:46:
                    62:16:f4:22:90:4e:de:74:17:f3:b5:51:37:03:2e:
                    3e:1c:b3:2b:65:ac:db:1a:d0:2f:01:11:fd:02:08:
                    1d:aa:61:ef:e7:f4:2b:d2:3a:24:ca:16:88:f7:fa:
                    a4:0e:d6:3f:5a:0b:69:25:84:ed:3f:4c:52:f8:0d:
                    49:f0:cb:b3:89:78:bf:a2:d4:06:1e:4c:34:d3:45:
                    70:fc:a8:b7:66:3e:8f:b5:a6:78:ba:cd:9e:24:ba:
                    32:38:28:b0:89:e5:f7:dd:c8:f2:e5:c8:0c:a1:85:
                    75:55:8c:1a:2b:72:bf:03:5e:7f:72:62:f8:cf:0a:
                    47:c2:ae:f0:38:3b:58:43:4f:37:bc:8e:26:0d:f3:
                    71:01:b5:cb:46:ff:27:72:41:7d:9d:52:72:02:14:
                    70:62:2b:40:42:7e:7d:d0:72:7d:df:8a:9b:76:b2:
                    6b:78:a0:3b:e8:77:24:7e:22:f4:f1:fc:b6:a5:b0:
                    58:4b:05:80:5c:af:15:c3:1f:6f:f9:9f:5e:c0:99:
                    5d:f4:4f:e6:f5:8f:a5:7c:f3:1e:0f:41:3d:cc:89:
                    5b:a5:40:57:ef:09:d8:77:4d:ca:dc:04:9a:f1:54:
                    16:7f:ee:13:8b:04:bf:25:bd:2b:e1:75:f1:a0:6a:
                    10:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:3A:1D:7A:68:93:23:36:22:8E:B1:C5:2C:24:A8:49:4D:FA:C0:E4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2G6dkGa1HpcPXBd1DK99HbPMSRpk1L3AKxM9k7M5ZifG/0/C23A1D7A68932336228EB1C52C24A8494DFAC0E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.232.0/22
                  170.79.4.0/22
                  177.85.144.0/21
                IPv6:
                  2804:6d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53045

    Signature Algorithm: sha256WithRSAEncryption
         79:ea:be:eb:af:86:d2:6c:ad:fb:de:f2:1c:98:50:19:4f:ed:
         05:37:a6:d7:3d:96:69:5d:56:e4:d1:c2:08:11:f2:d6:b9:61:
         d6:8c:d3:d6:b5:2c:0f:3a:3d:6e:42:e3:2d:ee:5e:a5:e3:da:
         ed:50:06:21:cd:da:09:1a:d5:20:11:cc:bb:9c:31:0b:66:db:
         97:a8:1b:17:9a:62:8e:5b:3a:46:a6:d0:0d:07:99:59:d4:52:
         55:9f:7c:36:2b:d4:bc:f4:91:1e:95:57:3c:b9:b8:b7:f9:45:
         9d:4e:f4:9b:02:7a:e9:3d:42:f3:27:1b:58:98:fb:88:2a:f0:
         e8:41:c9:fe:d3:1d:37:76:60:de:f0:a4:be:62:48:eb:ae:e4:
         12:9f:11:22:d0:1d:90:0d:36:14:30:55:f2:15:43:21:9f:18:
         a6:2c:41:de:00:c4:71:5f:f2:8b:80:64:bc:76:bc:23:5f:05:
         d9:cf:52:b0:e1:cc:dc:f1:34:25:fd:d7:7c:e7:46:37:44:5f:
         82:82:a4:6d:86:fc:cd:af:0b:9f:c9:89:36:e3:ac:08:79:92:
         02:27:ac:ee:92:6c:04:23:45:b2:0f:82:41:9a:11:1a:80:07:
         ff:c2:1c:8b:98:d8:5c:c8:22:9b:67:88:c7:75:cb:4a:fa:17:
         a3:1a:dc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org