Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D425FCFFC1F547E7F4B70F894775E8A3E54F5533.cer
File:                     D425FCFFC1F547E7F4B70F894775E8A3E54F5533.cer (raw, json)
Hash identifier:          32uk1F3MSlNe5sU7Fp6VP+xyx85FUjtxh9JTu+2xjgU=
Subject key identifier:   D4:25:FC:FF:C1:F5:47:E7:F4:B7:0F:89:47:75:E8:A3:E5:4F:55:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       720497B005C0743D291537DF72F19544BB8451DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FsG1bYLQ7k9wspJV3bzipgsyExDkZDi7qhXMfYS2eGi3/0/D425FCFFC1F547E7F4B70F894775E8A3E54F5533.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FsG1bYLQ7k9wspJV3bzipgsyExDkZDi7qhXMfYS2eGi3/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Aug 2022 18:26:27 +0000
Certificate not after:    Thu 24 Aug 2023 18:31:27 +0000
Subordinate resources:    AS: 269357
                          IP: 45.185.44.0/22
                          IP: 2804:6360::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:04:97:b0:05:c0:74:3d:29:15:37:df:72:f1:95:44:bb:84:51:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 25 18:26:27 2022 GMT
            Not After : Aug 24 18:31:27 2023 GMT
        Subject: CN=D425FCFFC1F547E7F4B70F894775E8A3E54F5533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:88:8b:44:a0:de:28:60:01:62:a4:25:be:
                    39:df:20:bc:15:d6:a1:86:3a:1f:4d:01:1a:f6:19:
                    9f:38:18:bc:38:2d:d8:4c:30:76:2a:39:f9:b2:98:
                    55:a5:00:41:6a:ff:9e:15:d0:93:49:52:8f:eb:7a:
                    78:b2:1f:ff:e2:d4:13:f3:28:57:d8:7d:d2:26:f5:
                    6c:81:0f:d6:53:87:02:2b:f6:d6:eb:14:61:fe:76:
                    a5:97:49:06:0b:cf:52:37:73:be:bf:8d:a1:aa:5f:
                    11:85:71:84:65:8c:dc:94:0d:d8:39:06:f3:7f:f2:
                    9e:ae:d8:f7:8f:bc:69:b4:d8:a9:18:5e:98:c8:88:
                    b9:d7:bc:db:28:c3:c1:6a:a7:86:82:1a:6a:5b:e0:
                    65:a3:dd:f5:67:46:6d:40:19:2b:f5:b1:82:e6:7e:
                    2a:7d:a7:5f:97:94:1f:bb:eb:4b:f9:87:53:3c:74:
                    b9:d0:9f:39:d0:81:47:27:e0:4f:87:78:d7:f4:51:
                    20:48:aa:9c:2a:0e:56:e1:d7:dc:c4:4b:82:07:b8:
                    ba:d5:44:7c:45:be:00:8a:7a:e8:b8:a2:2b:44:88:
                    90:41:37:fe:c8:28:44:6d:51:28:b2:c7:ba:e6:0c:
                    65:5b:da:94:d5:ed:48:59:a5:e3:c0:a9:82:48:8f:
                    84:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:25:FC:FF:C1:F5:47:E7:F4:B7:0F:89:47:75:E8:A3:E5:4F:55:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FsG1bYLQ7k9wspJV3bzipgsyExDkZDi7qhXMfYS2eGi3/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FsG1bYLQ7k9wspJV3bzipgsyExDkZDi7qhXMfYS2eGi3/0/D425FCFFC1F547E7F4B70F894775E8A3E54F5533.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.44.0/22
                IPv6:
                  2804:6360::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269357

    Signature Algorithm: sha256WithRSAEncryption
         b5:53:03:fc:c7:c7:2a:33:8d:e6:ad:bf:67:6f:93:8b:d0:39:
         c4:54:9b:a6:ac:e3:46:44:7c:43:2e:31:ce:bd:e8:f6:70:89:
         82:c5:af:7f:dd:69:46:db:61:f9:7d:05:5f:6d:bf:a4:2d:8d:
         0d:d4:fe:e2:69:a0:24:ce:e8:f7:ca:6d:81:88:06:81:60:f1:
         14:e7:a1:f5:37:f3:a8:23:63:0c:5f:35:c0:2a:03:56:d2:37:
         29:cd:ed:31:43:1c:06:0e:fb:19:97:13:d9:41:be:40:94:11:
         2d:d8:ce:f8:1b:a7:e6:2b:db:64:dd:07:8c:7f:a3:d9:dc:81:
         ee:82:2d:80:51:6d:6e:75:82:b6:f1:8e:af:20:e4:61:c2:00:
         80:3f:6b:9a:b5:7d:cf:a5:b4:39:fe:8c:46:2e:bd:61:0d:7a:
         e6:96:3b:17:1d:33:2f:0b:2b:45:02:4b:3a:a2:b0:c9:d2:9c:
         b0:93:ff:0b:bb:62:b9:48:3b:86:a2:16:3e:de:fe:f2:94:d5:
         4e:3a:b4:cf:5d:41:cd:1a:35:f7:c7:30:e4:12:91:b6:29:95:
         3f:65:d3:84:8e:d0:2d:b2:3b:a2:e0:06:42:f8:8c:b5:d8:ea:
         4a:c1:d8:af:3f:3c:83:7a:fc:cb:5d:b8:d9:32:b8:b4:d9:a9:
         d9:ed:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org