Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D241C1B4006C01DFE5BB2B70037B6C1EFBCEA3D9.cer
File:                     D241C1B4006C01DFE5BB2B70037B6C1EFBCEA3D9.cer (raw, json)
Hash identifier:          lEVd7KpM5CdpNU8jFj0C837alYajMUVmJh+S56Jj69k=
Subject key identifier:   D2:41:C1:B4:00:6C:01:DF:E5:BB:2B:70:03:7B:6C:1E:FB:CE:A3:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27A2D4F49F180403E831508DBEE37887F4C4F2F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/D241C1B4006C01DFE5BB2B70037B6C1EFBCEA3D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Apr 2022 14:09:52 +0000
Certificate not after:    Tue 25 Apr 2023 14:14:52 +0000
Subordinate resources:    AS: 271010
                          IP: 190.106.88.0/22
                          IP: 2804:74e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a2:d4:f4:9f:18:04:03:e8:31:50:8d:be:e3:78:87:f4:c4:f2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 26 14:09:52 2022 GMT
            Not After : Apr 25 14:14:52 2023 GMT
        Subject: CN=D241C1B4006C01DFE5BB2B70037B6C1EFBCEA3D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:38:2b:02:2b:17:eb:25:30:73:11:09:d7:
                    a5:7a:63:62:f4:fb:af:77:90:5c:25:21:4e:4c:ae:
                    65:3d:04:a6:40:fc:fc:ad:e8:3d:a1:83:73:a5:8d:
                    4e:ed:e9:56:eb:a1:3d:d7:83:6b:9f:a4:85:30:c8:
                    c9:6c:f9:8b:bb:e2:4b:1a:e0:fd:56:46:82:2e:e1:
                    5b:19:e9:44:38:7f:fb:d2:e7:fd:34:3a:f2:2b:54:
                    d6:70:28:d6:b6:3c:ff:5f:54:c2:99:96:08:ef:47:
                    2c:94:41:51:30:30:4f:07:6c:1f:22:c2:1e:bf:f7:
                    e1:3e:28:2c:3b:57:be:82:35:a8:46:a4:03:71:a9:
                    e7:84:16:f2:27:d1:90:2e:48:98:9c:ae:af:c9:d4:
                    3c:13:05:e6:b6:3c:ab:83:ba:c7:ef:30:67:16:f8:
                    d1:34:78:af:1b:14:9d:81:b6:d8:d4:da:2f:12:dd:
                    f3:1b:8c:b8:b4:ff:ac:f9:60:6f:5d:83:34:fb:a1:
                    86:21:fa:41:5a:c7:04:9c:6c:4c:20:31:29:4e:24:
                    a8:33:28:31:3d:e4:01:7f:10:57:b2:97:d7:ee:e1:
                    2a:7d:f1:0d:60:4b:7f:0f:9a:b0:cf:1f:da:02:ab:
                    00:6f:df:a4:95:66:86:b7:8f:fa:d7:69:2c:70:ad:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D2:41:C1:B4:00:6C:01:DF:E5:BB:2B:70:03:7B:6C:1E:FB:CE:A3:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/75nARc4tHhXesc7kf42syf18f63GSEBpCqo1uo3KVHPA/0/D241C1B4006C01DFE5BB2B70037B6C1EFBCEA3D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.88.0/22
                IPv6:
                  2804:74e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271010

    Signature Algorithm: sha256WithRSAEncryption
         04:87:8a:ab:d4:9b:7e:44:06:aa:88:14:0c:46:f6:d5:82:0a:
         44:d0:aa:bc:76:c4:1b:17:24:7c:51:30:9a:6a:6e:ab:b3:d4:
         12:fa:27:b6:31:70:fd:5b:2a:a4:15:3e:ee:3c:b1:11:8a:bd:
         1e:db:87:29:c5:34:2d:28:fb:3d:11:cc:0b:c8:5a:fe:f6:69:
         4f:01:70:2c:a0:ef:27:eb:30:45:6f:68:65:23:30:06:12:0c:
         24:79:19:ee:b7:86:54:14:b3:5f:61:c9:2d:44:b5:b6:37:57:
         0a:a7:80:60:39:c0:08:88:a7:de:0d:02:6b:fa:0f:f4:68:f1:
         6b:a6:a3:64:da:e3:56:46:ed:65:46:05:93:0d:fb:91:60:26:
         3a:91:18:7b:ce:67:38:e7:a3:3f:06:fd:4c:66:b4:11:0c:61:
         51:7e:30:74:20:1c:b5:9a:ee:19:9b:7f:cc:6f:35:be:e2:5d:
         95:2f:1a:02:cd:0a:1a:03:9a:b5:1f:56:9f:fe:7f:cb:57:cc:
         95:ea:e0:7c:f6:59:c9:34:82:e9:86:bd:54:54:91:75:73:35:
         b1:6c:ff:89:05:7e:44:a2:0d:eb:fb:95:9b:39:be:50:ca:c7:
         3e:62:3f:46:d4:b0:a5:c6:1f:d8:8d:53:01:8e:84:e7:25:8e:
         cb:73:bf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org