Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C946EF9530731EF27AD5917990208249F5EAB973.cer
File:                     C946EF9530731EF27AD5917990208249F5EAB973.cer (raw, json)
Hash identifier:          OAsnOvjlpq4IyhDZzwsQPJBpCV7ojlfMOZbgDARLcvI=
Subject key identifier:   C9:46:EF:95:30:73:1E:F2:7A:D5:91:79:90:20:82:49:F5:EA:B9:73
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41EF233E7FE15FFE4A03102872FF8AC91790CA81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/C946EF9530731EF27AD5917990208249F5EAB973.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Aug 2022 12:59:18 +0000
Certificate not after:    Tue 29 Aug 2023 13:04:18 +0000
Subordinate resources:    AS: 28260
                          IP: 177.130.0.0/20
                          IP: 186.193.240.0/20
                          IP: 187.16.240.0/20
                          IP: 187.95.32.0/20
                          IP: 2804:28e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:ef:23:3e:7f:e1:5f:fe:4a:03:10:28:72:ff:8a:c9:17:90:ca:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 30 12:59:18 2022 GMT
            Not After : Aug 29 13:04:18 2023 GMT
        Subject: CN=C946EF9530731EF27AD5917990208249F5EAB973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:18:83:78:2f:cb:99:2f:c1:a5:a9:5f:e3:27:
                    2b:57:ad:b6:ef:78:89:8b:73:81:02:bb:45:9c:86:
                    c2:cd:31:89:ad:11:38:71:32:22:7d:b2:5a:4f:a6:
                    be:79:49:41:94:75:2e:fe:b9:04:68:24:a9:ec:2f:
                    e5:db:19:60:4d:9e:1d:b3:17:75:a8:15:1f:9f:f0:
                    f5:20:99:59:f5:45:84:99:09:0d:79:01:aa:d7:3c:
                    15:68:e9:47:7f:28:ab:e3:5e:c3:03:aa:a3:8c:5a:
                    c8:98:45:eb:90:24:56:77:00:59:fe:8a:4c:da:f6:
                    7a:db:8d:78:f0:e8:e8:22:a2:65:29:06:0f:38:5f:
                    ba:19:ae:0b:f8:42:bb:ee:51:5f:ef:8e:f3:8d:0c:
                    57:73:af:90:f5:a0:25:6f:fd:42:02:37:2f:98:39:
                    c8:a9:b0:e3:e3:cc:04:4d:1c:15:e1:e3:97:ee:0f:
                    70:bf:44:02:49:9a:c2:cb:d3:c1:a6:5f:68:33:9e:
                    4e:ba:cb:56:16:a6:ba:08:dd:5b:f7:2f:0e:50:d1:
                    59:8d:05:23:57:cf:4f:69:fd:fd:72:6e:5f:66:aa:
                    0b:59:1e:9f:d7:97:ba:0a:ea:8b:cb:14:4f:d9:3d:
                    78:cd:19:36:27:a9:0d:b4:e8:20:dc:d7:ac:93:45:
                    39:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C9:46:EF:95:30:73:1E:F2:7A:D5:91:79:90:20:82:49:F5:EA:B9:73
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/C946EF9530731EF27AD5917990208249F5EAB973.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.130.0.0/20
                  186.193.240.0/20
                  187.16.240.0/20
                  187.95.32.0/20
                IPv6:
                  2804:28e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28260

    Signature Algorithm: sha256WithRSAEncryption
         28:c1:9d:4f:4c:97:79:52:39:55:f7:fc:43:5d:b0:15:96:d9:
         f3:53:43:3b:c0:34:1e:43:31:f2:56:20:8b:e3:53:3d:5d:a9:
         1b:a4:2c:b1:4a:1f:b0:76:d2:45:e7:f7:cf:fb:f4:81:5d:8b:
         66:cf:fb:7b:a3:cc:0e:b4:d6:47:28:79:b3:1e:6f:ad:b2:f5:
         f6:5b:4a:14:2c:70:30:44:4f:b2:8e:e0:a8:74:d8:e8:70:2c:
         21:2c:8e:1b:9b:d7:34:60:ff:a2:3e:39:2c:fd:7f:e0:9a:ef:
         5f:47:42:4f:cc:63:98:05:f3:67:4d:d1:c1:51:b5:82:ea:81:
         14:f2:8e:7a:43:ba:d5:b1:c4:cc:53:2d:e0:8f:04:76:86:fc:
         3b:77:39:c4:4b:a6:a2:b4:97:0c:42:a4:f5:1d:13:fe:de:ad:
         c6:b2:c8:77:b9:29:eb:17:7b:14:8f:93:05:2d:ec:10:4a:65:
         48:0f:27:02:f3:b7:31:96:d3:0f:31:02:c9:f5:b3:fb:21:ef:
         f8:bc:ca:ef:04:2d:35:aa:94:4e:f5:48:8e:94:98:7d:f7:76:
         57:07:83:ee:e2:56:6b:c1:f9:83:24:ad:96:07:a8:9c:5d:3f:
         f5:11:77:f6:77:43:09:32:b2:8a:02:ce:27:3e:85:10:db:d7:
         fa:ff:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org