Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D42810233D486ABFF6FCD5876F529684C818D631.cer
File:                     D42810233D486ABFF6FCD5876F529684C818D631.cer (raw, json)
Hash identifier:          ps72ssDrfaN0ebe6c2Q17bgvvy8M/2A4RIz87xmuDPk=
Subject key identifier:   D4:28:10:23:3D:48:6A:BF:F6:FC:D5:87:6F:52:96:84:C8:18:D6:31
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       19345C6E1554969CA3FADB2A2F430A8B2F082D32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/D42810233D486ABFF6FCD5876F529684C818D631.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Oct 2022 14:55:11 +0000
Certificate not after:    Wed 25 Oct 2023 15:00:11 +0000
Subordinate resources:    AS: 61669
                          AS: 262607
                          IP: 131.108.12.0/22
                          IP: 170.150.0.0/22
                          IP: 177.85.112.0/21
                          IP: 2804:6cc::/32
                          IP: 2804:1cb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:34:5c:6e:15:54:96:9c:a3:fa:db:2a:2f:43:0a:8b:2f:08:2d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 26 14:55:11 2022 GMT
            Not After : Oct 25 15:00:11 2023 GMT
        Subject: CN=D42810233D486ABFF6FCD5876F529684C818D631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6f:ff:6d:11:25:a4:55:70:a3:2d:30:d0:06:
                    cd:a1:e2:e8:4e:f4:18:ef:9f:c2:c9:1a:f5:53:e9:
                    db:9c:dc:f5:41:db:5c:09:24:56:da:b2:76:ea:3b:
                    e3:b1:07:fd:d1:22:6d:47:6b:ae:1d:23:2c:f0:48:
                    66:18:c0:8f:65:f1:b4:55:68:ea:1d:f6:cd:07:d4:
                    0e:fc:c0:7e:7f:39:bf:98:8c:a5:a5:8c:cf:5d:35:
                    38:9f:3b:89:68:23:11:ab:ea:54:f2:a6:aa:eb:fd:
                    93:c7:a8:a7:f8:3e:36:b1:6c:25:6a:db:7f:44:5d:
                    44:bb:4b:f4:dc:24:67:1d:a4:cf:8e:44:97:ee:38:
                    3a:f7:9a:d4:9e:e9:f4:5c:7a:63:d4:df:7e:52:c7:
                    f9:0b:bc:7e:84:38:48:26:da:cc:0c:0a:51:37:ae:
                    21:05:ea:70:78:cb:ec:24:f3:69:e7:f1:c1:b0:26:
                    4d:e4:9a:e4:c8:f4:53:77:0f:34:38:60:5c:ee:ed:
                    2d:b6:61:55:77:44:14:09:c3:7e:3a:5f:1c:8e:2a:
                    55:2a:b5:99:37:9f:98:3c:e6:4b:e1:ab:f1:ca:d9:
                    f4:5c:4e:d9:06:a4:6e:03:73:79:67:98:cc:0d:b9:
                    7e:1e:17:0e:5e:28:75:fa:99:71:e1:de:b4:ef:28:
                    30:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D4:28:10:23:3D:48:6A:BF:F6:FC:D5:87:6F:52:96:84:C8:18:D6:31
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7knsJmsfLogKFUgkMnkByXknqqfs7jABmWEdCn25vZ1v/0/D42810233D486ABFF6FCD5876F529684C818D631.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.12.0/22
                  170.150.0.0/22
                  177.85.112.0/21
                IPv6:
                  2804:6cc::/32
                  2804:1cb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61669
                  262607

    Signature Algorithm: sha256WithRSAEncryption
         65:ea:4e:e7:c3:a0:37:65:56:76:f9:4f:0d:89:e8:ac:e3:dc:
         01:a9:22:d7:85:a3:a3:96:fa:8a:7c:cc:c0:84:7f:c2:dd:6d:
         ad:94:f7:80:f8:25:94:02:db:4e:cf:a8:6f:5e:e9:ca:84:38:
         96:b7:5e:d8:0f:2c:c5:4a:26:54:c7:78:8a:42:e4:9a:34:2c:
         4e:79:3f:f1:73:21:14:27:bc:4c:5a:a4:43:b7:95:76:77:6c:
         47:77:f1:c3:41:ae:79:96:2e:77:3f:93:aa:ac:d1:16:d4:4e:
         c3:94:46:c1:e4:65:10:08:40:13:11:49:ac:a3:99:9b:0b:d2:
         3a:84:5f:f0:b8:40:bd:b4:6d:13:59:0f:d9:74:8a:c5:f5:39:
         82:cb:ef:db:65:8c:13:46:9d:9c:f9:2e:12:d8:89:05:3d:d2:
         b8:a8:79:66:78:23:a8:35:dd:7a:33:fb:ca:d8:a2:7c:2e:8d:
         49:73:48:2e:ff:84:f0:20:3a:04:77:94:13:a1:0c:02:a7:14:
         1f:af:d4:24:ce:11:85:a6:69:32:3f:5d:c0:8d:2e:97:3c:6a:
         9c:ac:49:e7:3a:df:c7:0a:6b:4b:15:9b:28:0f:ac:8e:3e:80:
         31:13:79:87:e6:d2:ae:0d:aa:38:d5:61:15:cb:a7:84:c8:50:
         2c:2a:62:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org