Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C257296829A695B5587E310EF395FB79C23A42DA.cer
File:                     C257296829A695B5587E310EF395FB79C23A42DA.cer (raw, json)
Hash identifier:          ohv5T0VltU5kJauBb1JNTLvC1fVE3pSS5FGq5Omh77Q=
Subject key identifier:   C2:57:29:68:29:A6:95:B5:58:7E:31:0E:F3:95:FB:79:C2:3A:42:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B55A62F09983E279DF3F1389F24A1BB186A31E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/C257296829A695B5587E310EF395FB79C23A42DA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Nov 2022 21:45:35 +0000
Certificate not after:    Thu 23 Nov 2023 21:50:35 +0000
Subordinate resources:    AS: 271477
                          IP: 177.152.124.0/22
                          IP: 2804:7c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:55:a6:2f:09:98:3e:27:9d:f3:f1:38:9f:24:a1:bb:18:6a:31:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 21:45:35 2022 GMT
            Not After : Nov 23 21:50:35 2023 GMT
        Subject: CN=C257296829A695B5587E310EF395FB79C23A42DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:2d:05:7e:15:d7:29:67:92:87:df:75:cd:
                    af:62:86:a8:0b:d9:b2:aa:1f:c3:92:c2:2f:55:f4:
                    7f:b1:68:15:26:1f:29:fc:c1:26:d9:ca:20:6f:2d:
                    77:de:0d:59:47:c5:ec:64:7c:d5:66:09:f9:30:d9:
                    48:e6:3a:a6:b5:84:ea:7a:73:ce:5f:f8:9b:2a:d8:
                    5e:fc:12:60:83:d3:cf:c5:7e:10:2b:2d:dd:f1:de:
                    61:03:0c:e1:42:1a:fa:f5:69:e4:51:52:45:41:38:
                    06:38:67:c2:14:17:71:9f:a5:cf:9b:55:a2:c4:1c:
                    34:f6:eb:a6:65:d4:14:55:60:9d:1a:23:ae:6f:f9:
                    0b:3b:6d:9a:c9:64:ee:89:59:8b:66:75:33:48:b7:
                    41:2b:d3:bd:31:e0:7a:a0:71:f9:11:7b:b8:ee:35:
                    08:be:ce:53:1d:a8:ce:f7:e0:0d:6f:97:22:0b:7e:
                    6a:c5:55:d8:68:e8:39:c9:af:46:70:51:fc:61:6f:
                    7e:6f:1f:7a:6d:40:c4:2c:54:80:8e:8b:f5:5a:1d:
                    b6:4c:22:5c:a3:cb:14:52:ff:68:37:82:65:e6:a3:
                    4d:a2:4b:99:be:d7:5b:66:4e:76:09:47:ad:73:08:
                    d5:61:d6:56:55:29:35:0c:76:8c:01:04:ee:16:20:
                    0a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C2:57:29:68:29:A6:95:B5:58:7E:31:0E:F3:95:FB:79:C2:3A:42:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/87WJfWgGwC663be5PAWZdEJ8tn7Ky27pmLX44SH1KQQV/0/C257296829A695B5587E310EF395FB79C23A42DA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.124.0/22
                IPv6:
                  2804:7c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271477

    Signature Algorithm: sha256WithRSAEncryption
         5d:ab:0a:0b:24:4f:70:21:6f:fb:7e:ab:3e:ae:a6:90:55:0f:
         4d:48:c6:81:57:0c:77:57:60:0c:b7:67:c0:11:f6:53:ce:cf:
         94:3e:9a:99:21:e2:98:4b:fe:b1:e4:69:35:4b:5e:15:ee:18:
         3f:bf:27:8a:c5:f4:83:2b:f2:e9:63:f6:a3:ad:e1:65:6e:2c:
         75:e4:8a:10:8f:cb:12:87:ab:ac:b2:eb:b9:f3:21:1a:cc:c7:
         80:8b:87:b9:6f:24:90:c5:9a:a1:bc:14:71:71:c0:13:6d:bb:
         93:c7:71:e2:0f:27:83:7f:94:0f:1c:a0:52:02:8c:5a:58:b1:
         8d:f7:9c:81:39:93:e3:56:b9:30:8b:58:55:1d:b4:26:8e:a2:
         b2:13:62:e9:bb:11:d5:a1:47:ab:4f:3f:8d:91:4d:50:1a:11:
         91:c7:8f:cd:93:a3:8f:17:ac:48:9e:f9:e1:bb:08:50:5b:f5:
         9d:c4:b2:9f:82:ee:ae:d1:58:6d:dd:f8:b2:7e:41:b8:58:6b:
         53:0d:12:22:df:91:6e:fb:3f:1b:3e:27:48:62:19:53:de:db:
         9c:39:a4:c5:6f:7a:d1:20:82:91:d4:d7:01:22:c0:21:8c:19:
         54:84:72:4d:d1:ab:f0:da:23:0c:d0:66:1f:53:6c:2d:03:71:
         01:84:d2:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org