Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C689F41100C3822F7F95F08EA7B22369E5DBE74E.cer
File:                     C689F41100C3822F7F95F08EA7B22369E5DBE74E.cer (raw, json)
Hash identifier:          fqwHQL11pOtHyGHiSMrx48k7clZtwdGaZYFqaG4w2bk=
Subject key identifier:   C6:89:F4:11:00:C3:82:2F:7F:95:F0:8E:A7:B2:23:69:E5:DB:E7:4E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       197DB99DEA7006B3A1BCA6AAD4E2D02A8462C130
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0/C689F41100C3822F7F95F08EA7B22369E5DBE74E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Nov 2021 19:23:41 +0000
Certificate not after:    Thu 17 Nov 2022 19:28:41 +0000
Subordinate resources:    AS: 267401
                          IP: 45.234.96.0/22
                          IP: 2804:4cec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:7d:b9:9d:ea:70:06:b3:a1:bc:a6:aa:d4:e2:d0:2a:84:62:c1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 19:23:41 2021 GMT
            Not After : Nov 17 19:28:41 2022 GMT
        Subject: CN=C689F41100C3822F7F95F08EA7B22369E5DBE74E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b6:de:79:97:b0:3f:f9:47:31:e5:1f:69:7e:
                    7e:45:7c:4e:5b:98:28:ab:e2:7e:23:88:f2:0e:2c:
                    86:bb:1a:4c:ca:28:a5:97:b9:ca:06:4c:a0:ef:1a:
                    96:05:cd:0b:50:62:1d:f9:9e:35:e3:3c:9d:0b:06:
                    84:34:e4:81:e5:26:89:a0:3d:dc:d1:7f:cc:43:7d:
                    96:a5:21:b0:d0:2e:d6:33:6c:e1:0a:b5:f9:e9:39:
                    47:18:54:62:25:78:32:eb:a5:42:5d:68:a1:fc:f3:
                    d1:9f:ed:dd:82:11:1c:77:54:e2:3f:b2:ea:60:6c:
                    23:c6:ba:5a:98:e5:5a:95:b8:9b:7c:f6:89:16:0f:
                    3d:88:a1:3e:a9:f0:c8:57:b6:30:54:07:55:8b:ae:
                    6e:23:02:e2:8e:16:40:70:c9:9b:b5:c2:ae:d1:37:
                    39:a7:07:9f:6b:b6:16:d8:5b:8a:c7:1b:42:d4:51:
                    d5:b1:ae:88:f4:d9:fc:e2:f2:63:8c:ed:30:58:6e:
                    86:8c:ad:0b:ed:84:da:9d:ef:77:ae:08:fc:1f:46:
                    16:8a:00:2e:a9:b2:76:c0:02:85:08:79:2c:90:ca:
                    12:ae:58:b7:f8:f3:38:08:bd:4d:92:59:0b:ef:47:
                    ec:07:a1:71:16:1f:a9:34:bf:b4:c0:48:7f:98:58:
                    e3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C6:89:F4:11:00:C3:82:2F:7F:95:F0:8E:A7:B2:23:69:E5:DB:E7:4E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/736R7tiZmcBcx8SBm9noMQ5GPWXkdnRt1XdJWxt3Qv2J/0/C689F41100C3822F7F95F08EA7B22369E5DBE74E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.96.0/22
                IPv6:
                  2804:4cec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267401

    Signature Algorithm: sha256WithRSAEncryption
         20:19:b5:b6:c7:b6:fb:06:ea:cb:f1:eb:0f:6f:88:f9:a6:50:
         6f:dc:36:32:b9:57:27:35:d6:e5:9a:a9:67:5e:ee:3f:eb:28:
         8c:a7:f7:3c:e1:3f:12:98:93:15:01:2c:32:ff:6e:ce:76:c6:
         72:e9:17:3b:06:87:6b:de:e7:74:02:c4:03:86:d1:dc:ae:30:
         dc:81:06:68:fc:3d:ee:6f:6a:70:87:d9:6e:8f:8a:76:64:cf:
         98:42:64:68:b4:09:ab:7a:bd:6f:e0:ac:ad:d0:0c:f7:16:fa:
         53:3e:ac:4e:34:5c:37:ed:83:8d:bf:eb:65:5c:c0:e3:5b:4e:
         c3:65:ac:58:76:bd:a6:2e:67:fd:cf:22:87:48:57:44:f8:a8:
         d9:49:2b:b9:66:69:37:6a:57:2f:23:aa:d5:44:dd:16:d9:eb:
         f7:2e:ad:a1:31:b6:3f:0f:77:5e:97:e5:e1:7d:7a:be:62:d3:
         47:d7:bc:97:59:92:a0:82:65:c1:2d:fe:17:b7:ae:25:92:e8:
         f7:03:8e:08:8d:4e:7f:f1:cb:01:9d:80:ac:41:18:2b:dd:4a:
         31:81:84:dc:39:53:da:8b:67:3f:05:f1:5b:a2:8b:3a:cf:b2:
         17:81:3e:d4:c3:89:2b:50:33:10:56:71:81:73:b4:ee:09:58:
         e1:8d:d8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org