Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer
File:                     CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer (raw, json)
Hash identifier:          dSst/N0qt1+RSxCoApPo8q5AoK7Rnm0g/Yge2CPQ6pc=
Subject key identifier:   CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       577275ACA5FE64FD407F89744F2C8B02592D79DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 14 Jun 2022 19:59:14 +0000
Certificate not after:    Tue 13 Jun 2023 20:04:14 +0000
Subordinate resources:    AS: 52838
                          IP: 138.0.188.0/22
                          IP: 143.202.92.0/22
                          IP: 177.66.100.0/22
                          IP: 2804:bd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:72:75:ac:a5:fe:64:fd:40:7f:89:74:4f:2c:8b:02:59:2d:79:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 14 19:59:14 2022 GMT
            Not After : Jun 13 20:04:14 2023 GMT
        Subject: CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:05:2d:aa:bd:fe:0c:c6:7c:16:8a:41:ba:60:
                    d1:a4:c4:1a:8b:ec:d1:4c:b5:c0:34:d0:7c:9f:e4:
                    49:71:4f:09:53:b0:c3:92:c1:27:e7:48:49:12:48:
                    7a:fb:95:47:6e:fb:b3:ff:c5:d1:f0:73:0e:48:d3:
                    bf:25:c6:26:c5:87:06:5a:93:f3:a3:77:c2:96:e2:
                    c0:0e:80:d0:49:13:ee:01:6b:cd:be:6e:d0:64:05:
                    18:64:ef:d8:7d:bd:a4:26:4f:19:8a:af:10:70:fb:
                    43:fb:35:3c:9c:da:70:b6:a8:8c:94:e5:6f:2d:3c:
                    5a:47:71:03:0c:b1:d4:99:75:8a:55:31:99:1a:2a:
                    fc:42:5d:91:c5:8c:4e:03:1c:fb:f5:16:7e:66:d2:
                    dd:ad:1d:53:74:0b:e4:96:a0:bc:a6:a4:0c:9e:e0:
                    54:f2:3f:4a:12:ae:48:10:4a:85:19:32:64:ff:68:
                    5f:a7:d3:1c:17:96:92:dc:74:db:f1:dd:53:4c:68:
                    74:2c:d9:00:3b:ae:f6:f9:b4:48:af:2d:a8:ab:21:
                    ec:d6:c7:72:fc:3c:c9:3f:d4:3d:c7:29:35:a5:e2:
                    68:f3:00:85:3c:0e:ab:33:df:a1:14:06:df:dc:4e:
                    0b:1d:7a:5f:43:b3:92:33:7f:7f:7d:9f:ea:f3:62:
                    3a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.188.0/22
                  143.202.92.0/22
                  177.66.100.0/22
                IPv6:
                  2804:bd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52838

    Signature Algorithm: sha256WithRSAEncryption
         1d:39:8d:1b:28:bc:b1:50:84:ff:c6:84:0c:3e:f0:2f:30:c2:
         8a:7e:87:c5:9f:fb:2d:95:35:0f:a7:88:c5:bc:30:10:26:cf:
         da:87:1a:3d:29:be:fe:89:2a:30:df:11:96:99:55:3c:34:0b:
         91:90:27:a0:a3:a9:47:10:fd:51:d5:15:9f:1f:76:cb:8a:3e:
         43:02:0f:2d:aa:43:30:5a:51:54:43:bf:3e:dd:37:8d:20:56:
         95:30:e8:1e:57:6d:ec:14:97:82:be:ec:8b:4f:b3:46:26:54:
         bf:bc:9e:e8:71:62:26:93:d1:0c:5f:4d:f2:38:79:5b:45:5e:
         04:31:34:25:ff:1a:71:3d:1f:87:3d:d1:8e:65:ec:43:75:88:
         3d:7b:48:be:23:72:e4:28:83:f8:7a:3a:88:4d:9a:15:2d:15:
         3e:b7:1e:bf:d6:0f:8c:c1:f3:39:33:6d:95:a9:fb:c2:24:50:
         f6:eb:53:74:ce:be:8b:37:ee:3a:4e:dc:51:aa:36:bd:73:38:
         18:be:c8:ac:93:94:34:67:3f:39:0d:b1:1e:eb:2d:bc:c7:af:
         4a:63:83:bd:39:a7:1c:90:88:3f:b0:49:b8:00:00:e3:d0:1b:
         b9:6a:3d:25:87:57:d8:35:36:59:0b:2e:e9:8a:8b:d9:a6:e9:
         98:3b:78:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org