Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D11F87B0ECBE5120866231A548F43D27CB57D7FF.cer
File:                     D11F87B0ECBE5120866231A548F43D27CB57D7FF.cer (raw, json)
Hash identifier:          HzCGeldsR6c87q8o2bj1QtINzDkLK6hsKvXWyfyp2Fg=
Subject key identifier:   D1:1F:87:B0:EC:BE:51:20:86:62:31:A5:48:F4:3D:27:CB:57:D7:FF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3316486ECEFC6D669C15F8CAEE826253802552EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/D11F87B0ECBE5120866231A548F43D27CB57D7FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Jun 2022 11:23:04 +0000
Certificate not after:    Tue 06 Jun 2023 11:28:04 +0000
Subordinate resources:    AS: 266968
                          IP: 45.226.148.0/22
                          IP: 2804:4618::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:16:48:6e:ce:fc:6d:66:9c:15:f8:ca:ee:82:62:53:80:25:52:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  7 11:23:04 2022 GMT
            Not After : Jun  6 11:28:04 2023 GMT
        Subject: CN=D11F87B0ECBE5120866231A548F43D27CB57D7FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2c:bc:47:30:74:92:db:f8:e1:52:89:2d:f6:
                    d8:e6:1f:a0:e8:46:ec:ad:7a:f7:c8:b8:04:08:67:
                    59:54:b2:c7:0f:5a:5e:b3:72:2d:93:8c:8d:43:6f:
                    9e:a5:dc:ed:f7:37:9e:e3:b5:8d:36:77:93:d0:32:
                    a6:2e:23:f1:2f:68:37:ee:65:65:91:a5:f8:7d:a9:
                    42:83:00:15:cd:48:9c:76:13:b4:a0:16:86:ab:f3:
                    7b:f8:ee:51:0e:5a:df:ba:83:49:92:8b:a7:29:3d:
                    bf:25:a3:d7:e6:6b:f8:7d:96:1a:6d:f7:c9:e7:7b:
                    47:34:91:ce:40:a8:aa:99:9a:e2:63:ef:26:e1:5e:
                    95:51:05:c3:a0:d8:5d:dd:1c:e5:eb:73:c7:65:28:
                    16:6e:a2:f8:a2:de:77:82:9e:59:ab:7b:3c:5f:9c:
                    fa:d6:77:e9:10:84:7a:1f:95:b9:ec:89:4c:d6:3e:
                    ac:bd:61:ad:4b:2f:0b:42:a1:10:95:4f:ba:13:e2:
                    24:cf:52:2d:89:b5:92:00:b1:32:af:16:6f:f9:9c:
                    1e:e1:5a:69:c4:d6:21:24:44:89:2d:bf:8c:5a:64:
                    d6:6e:78:8d:60:92:c0:12:ba:b1:82:d9:e1:78:a8:
                    22:74:c5:f6:d7:12:b5:60:d6:df:89:81:d7:d5:b6:
                    7a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D1:1F:87:B0:EC:BE:51:20:86:62:31:A5:48:F4:3D:27:CB:57:D7:FF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/64WS8z56SodyNVrBR5XqVCGH4WWhGhwvYGgTB9EfDi5r/0/D11F87B0ECBE5120866231A548F43D27CB57D7FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.148.0/22
                IPv6:
                  2804:4618::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266968

    Signature Algorithm: sha256WithRSAEncryption
         4e:88:8a:93:55:21:23:df:19:63:94:9e:c6:3d:8f:9b:e7:33:
         d2:b6:86:bd:d4:25:58:cd:52:46:91:e1:e6:0a:b9:3f:e3:29:
         3c:0c:45:69:2c:f0:82:36:34:5c:ce:d1:9b:5c:d0:09:4f:38:
         ea:e2:e2:ad:63:d7:ba:0a:e2:37:37:1a:e0:42:c3:d9:83:05:
         73:1e:19:00:15:64:17:ed:8c:1e:37:e1:7c:37:df:7e:05:7f:
         eb:72:31:1c:16:af:64:6c:be:01:bb:3a:c9:a5:c5:03:48:bb:
         74:30:58:c9:be:78:67:4e:5d:bd:fe:68:41:29:50:b5:bb:0e:
         f0:30:42:7a:e7:14:c7:f2:96:13:b5:c8:74:80:38:14:f5:cc:
         79:f3:46:39:6a:7a:6e:91:44:48:f2:f4:41:35:05:4b:2e:1f:
         04:1d:5e:32:4e:71:a9:08:ac:85:26:3f:83:6c:2b:99:a5:7a:
         4c:0a:62:e4:f9:8f:4d:e5:33:bb:da:aa:0a:4e:5a:58:56:9c:
         f9:d3:43:bd:30:2e:c7:62:10:bd:2a:e0:ce:71:fa:4a:d5:2c:
         b6:42:18:b0:1a:7a:04:e5:68:52:69:db:d3:49:3a:d5:d2:94:
         80:d8:17:61:a7:8a:11:00:1e:87:1e:74:31:b3:62:87:78:91:
         5c:9a:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org