Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
File:                     D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer (raw, json)
Hash identifier:          i7OoZOoyzjFK+CKzwPmbFKR8P0PHat90Ub8irdX19LY=
Subject key identifier:   D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5FD9AF2CAC204C598728E29043FF80B79D600F8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Nov 2022 18:37:55 +0000
Certificate not after:    Thu 02 Nov 2023 18:42:55 +0000
Subordinate resources:    AS: 269463
                          IP: 45.187.108.0/22
                          IP: 2804:6504::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:d9:af:2c:ac:20:4c:59:87:28:e2:90:43:ff:80:b7:9d:60:0f:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 18:37:55 2022 GMT
            Not After : Nov  2 18:42:55 2023 GMT
        Subject: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:22:e8:cb:0c:5a:d4:2d:46:07:80:ba:62:6f:
                    20:36:69:1d:38:ea:55:28:a7:48:9b:da:6e:23:df:
                    10:07:3b:3d:31:de:d4:d4:32:d0:ea:39:c3:29:d7:
                    48:70:ec:32:f4:85:e8:7c:0f:d2:7c:5d:25:75:68:
                    b5:1d:7a:e3:37:43:a0:b7:8e:72:54:e5:0d:12:99:
                    72:ed:60:9e:32:eb:5b:34:4d:15:1a:c2:39:e1:ad:
                    29:5e:84:b7:03:78:be:b9:f6:45:b5:87:b8:ef:0e:
                    1c:6d:a3:85:69:ca:ca:c0:62:8c:65:0a:ba:78:8d:
                    c7:44:1f:84:8f:5c:5a:6b:05:ff:87:17:f6:65:52:
                    5b:3c:fa:ea:61:72:34:6e:cf:4d:dd:95:7c:77:6e:
                    c2:83:48:bf:62:da:25:eb:8b:6d:13:bb:7f:9b:95:
                    de:6d:8c:36:b5:2f:46:0a:61:88:08:41:02:95:74:
                    32:11:c7:6d:f8:b5:6a:b0:3c:02:b2:43:46:43:d2:
                    25:18:e6:72:91:2d:11:75:14:88:c4:45:f4:6a:73:
                    0c:2a:e2:62:eb:08:6d:25:1a:7c:34:51:a9:e9:fb:
                    fe:b2:07:35:f9:f0:04:25:dd:56:74:c5:67:52:14:
                    51:34:9b:0b:ae:ff:f1:f2:63:20:56:e8:8c:7a:d6:
                    11:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.108.0/22
                IPv6:
                  2804:6504::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269463

    Signature Algorithm: sha256WithRSAEncryption
         06:e1:07:71:f0:00:68:fb:98:23:57:db:bb:53:3d:56:0b:5a:
         4d:b8:43:83:4a:da:0f:39:24:28:cf:98:19:95:42:21:c1:b7:
         5d:fe:8b:fb:ce:e3:c0:03:1c:12:bf:ee:f5:73:e3:86:b2:e0:
         11:de:7b:cf:3d:18:14:18:27:89:6a:15:39:e1:40:15:2a:83:
         71:4d:ac:63:43:c4:b8:55:9f:d4:85:8a:cc:c5:c9:c1:ac:39:
         d0:ee:3b:24:dd:6c:f1:34:59:cb:71:c8:2e:22:c7:c6:1f:32:
         3a:fa:9b:04:79:ce:95:8f:d5:3a:72:ec:1e:45:0a:2d:8a:93:
         88:69:42:80:da:65:9e:59:10:9f:d1:1d:8f:71:7d:2c:ec:bb:
         f0:0d:61:d1:8c:dd:95:18:4c:a8:30:9e:63:9d:8d:24:a8:f0:
         c0:03:06:93:dc:87:db:ab:ca:62:37:ba:f4:86:14:60:e5:ef:
         54:89:6a:4c:83:71:1e:0c:7c:cf:2d:61:04:85:6f:6c:e9:af:
         62:db:66:a1:6d:36:60:8e:3a:d2:0d:4d:a7:81:40:78:55:a1:
         91:5e:9c:71:4f:89:a1:be:53:ea:ca:f6:87:f5:b0:64:73:26:
         59:ff:61:37:d3:6e:1b:b2:d7:36:e1:24:ee:b2:1b:44:d1:d1:
         fb:f3:57:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:16 2024 by rpki-client on console-ams.rpki-client.org