Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C89FB798B987A5F0993D2D3DA37341AC88185E4E.cer
File:                     C89FB798B987A5F0993D2D3DA37341AC88185E4E.cer (raw, json)
Hash identifier:          HiqWVTNVxIG6eBlSyCHf1rdO1WB7zeMtf3/G8DiR/80=
Subject key identifier:   C8:9F:B7:98:B9:87:A5:F0:99:3D:2D:3D:A3:73:41:AC:88:18:5E:4E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B93B872BEBFE8465E21CC7E2903E4D605B1F9C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/C89FB798B987A5F0993D2D3DA37341AC88185E4E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 22 Oct 2021 15:11:18 +0000
Certificate not after:    Fri 21 Oct 2022 15:16:18 +0000
Subordinate resources:    AS: 265298
                          IP: 168.90.248.0/22
                          IP: 2804:2db4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:93:b8:72:be:bf:e8:46:5e:21:cc:7e:29:03:e4:d6:05:b1:f9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 22 15:11:18 2021 GMT
            Not After : Oct 21 15:16:18 2022 GMT
        Subject: CN=C89FB798B987A5F0993D2D3DA37341AC88185E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ae:aa:f9:0b:f7:3a:9e:cf:d2:9f:8a:ad:3c:
                    45:68:9c:db:bc:1a:72:5d:9d:55:fe:e3:f6:bf:21:
                    a6:9c:5a:e0:7c:92:4d:0b:c2:03:13:0a:f0:9f:67:
                    00:b6:85:35:54:66:2b:4b:1d:c2:30:72:6a:c4:a5:
                    79:ec:0b:7c:ba:0a:76:87:ab:40:7c:3d:f2:5e:f2:
                    34:b5:9a:94:86:16:71:aa:34:7e:56:57:5a:a0:19:
                    65:85:22:a7:fb:15:c6:84:45:d6:21:0b:1f:7d:10:
                    1d:57:d1:4b:7e:b4:bb:fc:f8:f5:53:7b:87:bc:9b:
                    90:b5:c5:f4:f8:0d:cd:81:46:67:36:04:8b:07:99:
                    27:55:99:de:5d:1f:78:c5:08:99:c0:03:3e:32:43:
                    45:2c:b5:47:08:b5:1b:17:99:e4:41:10:65:1f:11:
                    f1:a1:31:3c:b9:95:07:9c:65:fc:b7:1f:9c:8f:bb:
                    b8:36:01:c9:da:99:9a:ab:f2:d3:8a:d8:9f:2a:b3:
                    ed:7e:34:3d:b5:9f:dd:92:ab:c2:17:c8:ac:8b:a9:
                    b6:a8:dc:8b:a0:30:51:ba:e3:17:63:c2:eb:c4:56:
                    b1:e1:8a:fa:80:a0:dc:2a:8d:72:23:9d:57:1d:8c:
                    c0:a5:1d:3a:0c:9d:a5:c7:f9:6d:2b:ba:e2:63:c2:
                    37:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:9F:B7:98:B9:87:A5:F0:99:3D:2D:3D:A3:73:41:AC:88:18:5E:4E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/C89FB798B987A5F0993D2D3DA37341AC88185E4E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.248.0/22
                IPv6:
                  2804:2db4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265298

    Signature Algorithm: sha256WithRSAEncryption
         a2:b3:29:e7:e5:21:c7:e0:8e:c4:cf:68:c2:21:d4:51:43:7a:
         1d:b7:71:8c:e4:16:a8:e5:22:a7:ad:3c:e5:a0:f4:d6:a3:ea:
         14:8e:63:33:d9:4a:88:13:5a:44:cb:54:d9:22:18:55:04:8f:
         95:b6:61:f5:52:e6:fd:71:e3:df:18:d4:8c:15:1e:6b:ba:68:
         1f:28:1f:03:78:e2:1d:ee:f3:22:e7:66:85:0c:44:18:8c:a4:
         31:f2:26:69:6b:b7:ac:db:d2:9b:bd:5e:67:a9:8b:b3:53:fe:
         d4:ca:de:d5:16:87:b7:bd:a1:cb:24:3e:e0:ef:57:25:9f:19:
         86:2b:49:54:43:ea:5a:b1:f5:69:70:b5:83:e3:41:9b:14:53:
         f9:16:88:1b:7e:22:06:54:34:0f:ab:47:a8:7d:2d:10:2e:60:
         d2:35:6b:a1:14:9a:55:c7:3b:ec:90:2d:4c:08:59:2b:f7:d7:
         54:e8:53:8e:72:c6:52:bb:ae:b8:21:20:9f:cc:e6:fe:0e:71:
         c1:23:06:4e:97:1f:4e:38:30:87:2e:92:16:f7:94:20:4c:bc:
         34:4e:8f:db:c9:74:e9:52:f1:ac:36:de:a0:f6:a9:0a:4c:84:
         0b:50:55:6b:32:8c:9f:56:e6:bc:81:8e:55:46:3c:e7:b9:a4:
         c9:8b:23:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org