Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37.cer
File:                     CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37.cer (raw, json)
Hash identifier:          z2YSsgOcEiokMhcbCjOd69pn4YKdN3GxVt9wYt7e3gA=
Subject key identifier:   CA:C3:91:54:F7:C0:9F:9C:6E:FF:D4:CC:4E:7E:96:F6:0C:99:CD:37
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F957D5B5BF25136AB8DF9AB92B9F5A7D5E8BC5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37.mft
caRepository:             rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 10 Dec 2021 18:00:51 +0000
Certificate not after:    Fri 09 Dec 2022 18:05:51 +0000
Subordinate resources:    AS: 271108
                          IP: 45.228.200.0/23
                          IP: 2804:7660::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:95:7d:5b:5b:f2:51:36:ab:8d:f9:ab:92:b9:f5:a7:d5:e8:bc:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 10 18:00:51 2021 GMT
            Not After : Dec  9 18:05:51 2022 GMT
        Subject: CN=CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:05:6c:b0:6b:53:1e:5c:66:72:ff:54:49:
                    06:23:35:88:68:84:a6:e3:9c:99:fd:4c:d0:23:15:
                    28:18:ad:47:7c:b8:4f:5c:c7:8f:05:9b:9e:9e:b1:
                    00:54:32:f8:58:25:0e:34:6f:ec:cd:36:08:b5:d6:
                    a4:c9:f0:94:0d:4a:1e:4e:6f:e6:5c:09:05:83:92:
                    bf:7f:85:c5:13:af:fb:ef:75:ad:6b:68:6c:70:06:
                    32:f2:ce:07:19:5d:83:9f:82:45:d0:6d:24:4a:b3:
                    55:1e:c7:d4:e6:af:22:b4:9f:9e:6d:84:86:d0:c1:
                    ad:5a:0a:a1:0d:5a:45:3f:eb:20:13:ce:95:7d:eb:
                    e4:a6:88:f1:4b:a0:c1:5f:c7:cf:d2:b2:ba:1f:00:
                    fb:45:18:8b:72:f1:ec:53:94:0a:4d:c1:e9:dd:11:
                    20:89:0e:12:e3:2c:1c:74:92:4b:7b:81:8d:72:37:
                    ce:ef:57:22:39:43:8d:cd:5a:c0:01:ba:36:c7:50:
                    23:af:92:53:fd:00:31:a3:a1:34:12:50:cd:df:7f:
                    6b:dd:ef:c1:86:75:f2:90:16:d4:bd:17:26:d5:39:
                    78:6d:f4:ea:e1:8d:68:48:3a:ba:4e:24:a9:ce:ce:
                    79:6f:03:c0:b2:58:3a:0d:24:e7:86:55:ff:c9:1e:
                    2e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CA:C3:91:54:F7:C0:9F:9C:6E:FF:D4:CC:4E:7E:96:F6:0C:99:CD:37
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/UvYVPYynv6ADa7rZuKJkUM8spVjDMsTJinp38VTtBfv/0/CAC39154F7C09F9C6EFFD4CC4E7E96F60C99CD37.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.200.0/23
                IPv6:
                  2804:7660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271108

    Signature Algorithm: sha256WithRSAEncryption
         56:7f:2f:f7:e4:9c:3c:26:98:ad:eb:7f:8c:db:88:d4:a5:85:
         7f:1d:13:88:5e:70:f6:be:b2:c0:6f:03:fd:01:c0:40:7c:f1:
         9f:58:82:29:e3:e7:b1:bf:e7:45:99:2a:97:0d:4d:06:98:0a:
         92:04:74:1f:75:03:f1:00:91:4b:99:0a:29:6a:2e:33:c3:a1:
         b5:a6:cd:8c:f9:6b:6e:da:d1:ee:ba:34:1b:80:9a:8f:17:6a:
         d7:be:fb:8d:33:cd:76:c3:95:3c:42:9f:78:2f:57:90:16:0e:
         1c:a6:88:6d:16:5d:42:7b:a6:71:3e:f4:d0:ac:54:b4:39:50:
         8f:4b:9f:e3:72:d8:8f:89:1f:ec:80:49:90:29:f6:c6:8e:8c:
         5d:41:2e:89:8e:f6:ab:04:7a:4a:49:ad:d7:f4:ad:bd:13:f4:
         e9:9a:1f:22:ab:f6:f8:31:64:38:55:f0:de:01:a9:15:e1:4c:
         92:02:83:5b:1e:85:ca:50:32:cb:62:a6:62:0f:71:f9:9c:0d:
         93:7c:35:ab:e6:b6:4f:da:26:ed:cb:bb:ec:5c:da:45:14:27:
         ce:bc:06:35:ef:d6:a5:bb:b2:aa:77:1f:05:cf:a4:03:d8:35:
         d1:4c:c3:cd:3d:42:5a:a4:23:b8:c7:50:ad:d7:c4:10:99:69:
         52:53:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:14 2024 by rpki-client on console-ams.rpki-client.org