Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C42748FC04141E28BA6F90BFB14A645D517FEEFC.cer
File:                     C42748FC04141E28BA6F90BFB14A645D517FEEFC.cer (raw, json)
Hash identifier:          L/kzy3vzEARdZWjlaR5Vy1qqJXW2qQ0ZHbe3reLOtwI=
Subject key identifier:   C4:27:48:FC:04:14:1E:28:BA:6F:90:BF:B1:4A:64:5D:51:7F:EE:FC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21ADD47395B80549C8BA051E6A80BB4C953CAE89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/C42748FC04141E28BA6F90BFB14A645D517FEEFC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Aug 2022 17:55:23 +0000
Certificate not after:    Tue 08 Aug 2023 18:00:23 +0000
Subordinate resources:    AS: 28186
                          IP: 138.117.176.0/22
                          IP: 177.8.224.0/20
                          IP: 177.21.0.0/19
                          IP: 177.23.80.0/21
                          IP: 177.136.112.0/20
                          IP: 187.44.128.0/17
                          IP: 189.89.128.0/18
                          IP: 201.55.192.0/22
                          IP: 2804:204::/32
                          IP: 2804:24dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ad:d4:73:95:b8:05:49:c8:ba:05:1e:6a:80:bb:4c:95:3c:ae:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  9 17:55:23 2022 GMT
            Not After : Aug  8 18:00:23 2023 GMT
        Subject: CN=C42748FC04141E28BA6F90BFB14A645D517FEEFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7a:75:7c:64:44:6d:4b:56:c4:25:54:78:09:
                    48:a4:a6:19:13:fe:9d:e0:c0:57:9f:5a:7d:b2:44:
                    1a:25:90:b1:f8:cc:2f:63:bc:b2:fc:62:45:60:2f:
                    5f:85:34:71:43:e0:27:7c:ac:17:fd:d9:c9:3c:4a:
                    86:50:04:ab:80:5c:8b:04:0b:36:f3:e8:3d:8d:f2:
                    10:78:80:7d:fa:55:c5:1b:4b:d0:d4:31:62:ca:e4:
                    b0:ab:f5:d9:6b:4e:39:4d:7c:ee:e1:88:05:a5:4c:
                    9f:05:0b:e2:92:23:6f:ae:06:2d:d2:3e:17:13:13:
                    c6:6e:37:6f:d9:23:85:5f:26:ce:8a:97:26:27:78:
                    63:af:0c:1f:f2:d7:d5:1d:1a:f8:21:81:57:8f:0d:
                    57:90:b5:70:fa:04:89:0c:54:52:14:36:67:62:47:
                    72:4e:33:eb:0c:f8:9a:84:48:54:23:bf:07:af:69:
                    f7:19:99:cb:a2:5c:2d:2f:d5:87:d1:49:e7:03:99:
                    ab:29:d0:45:02:2c:3f:f0:58:ad:3b:08:c2:b5:56:
                    3b:77:73:91:b3:83:63:ed:a4:65:dc:18:ee:35:5a:
                    b0:fe:cf:35:85:d7:ab:14:1d:2e:29:cb:f5:af:f0:
                    cc:b7:15:f8:c9:9f:dd:0c:f7:0e:76:90:6a:86:0c:
                    c3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:27:48:FC:04:14:1E:28:BA:6F:90:BF:B1:4A:64:5D:51:7F:EE:FC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8NTeArYnZ4pVciWb4Jnrhs6VL4iLYdxH4yFQGVhe9Evy/0/C42748FC04141E28BA6F90BFB14A645D517FEEFC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.176.0/22
                  177.8.224.0/20
                  177.21.0.0/19
                  177.23.80.0/21
                  177.136.112.0/20
                  187.44.128.0/17
                  189.89.128.0/18
                  201.55.192.0/22
                IPv6:
                  2804:204::/32
                  2804:24dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28186

    Signature Algorithm: sha256WithRSAEncryption
         3f:52:e6:16:ac:fb:86:d7:00:0b:f3:9e:8d:5c:b3:f6:63:f8:
         07:b8:5e:19:cd:12:94:35:ad:c9:5a:95:ba:7d:f2:92:d6:10:
         a2:c1:da:34:88:b3:0c:09:e8:29:74:a0:7b:44:b4:9a:79:6e:
         9e:04:29:88:5c:96:43:b9:56:8b:ca:d7:13:2f:d2:fc:11:49:
         7d:3c:e0:97:e8:e6:2d:06:0d:0a:7c:ef:ab:ac:11:2a:61:cb:
         79:63:0e:e6:30:1c:4e:1f:b6:57:74:be:52:9f:64:38:2a:d4:
         99:34:d2:c4:7c:c3:63:49:60:9e:e1:80:a2:57:a9:bd:de:2b:
         5d:1b:df:8b:85:6b:3c:d0:10:6e:4f:ae:a0:ed:5a:e1:eb:35:
         8d:5c:f1:1b:5f:29:52:ee:e0:e8:5c:b3:5f:a3:92:95:6e:03:
         ef:0f:71:37:8d:01:6d:26:df:ef:7f:c0:01:cf:ff:5b:7e:e7:
         16:cf:43:97:72:31:31:62:13:d2:2e:f7:59:ca:a3:4c:04:f3:
         f3:c4:a9:87:94:ca:98:ed:a7:53:47:50:2b:a2:39:aa:ae:e7:
         63:df:62:ce:4b:c8:42:42:ea:95:30:fe:8d:a0:63:09:78:8e:
         c6:07:39:78:a7:c4:1d:a5:fd:1c:0f:42:26:f9:ff:be:c1:8a:
         24:f6:f2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org