Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D8F0956083686D01D2EC7C7B31C5A9CA5D4B8449.cer
File:                     D8F0956083686D01D2EC7C7B31C5A9CA5D4B8449.cer (raw, json)
Hash identifier:          suUmdzO5NCTAUs6izLhwNXZBCC8xSPmiZdG91cX6lFE=
Subject key identifier:   D8:F0:95:60:83:68:6D:01:D2:EC:7C:7B:31:C5:A9:CA:5D:4B:84:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E83F55EEA618044D983A36603A09681D1C8F20B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/D8F0956083686D01D2EC7C7B31C5A9CA5D4B8449.mft
caRepository:             rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 06 Nov 2021 18:48:25 +0000
Certificate not after:    Sat 05 Nov 2022 18:53:25 +0000
Subordinate resources:    AS: 269546
                          IP: 45.187.56.0/22
                          IP: 2804:6648::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:83:f5:5e:ea:61:80:44:d9:83:a3:66:03:a0:96:81:d1:c8:f2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  6 18:48:25 2021 GMT
            Not After : Nov  5 18:53:25 2022 GMT
        Subject: CN=D8F0956083686D01D2EC7C7B31C5A9CA5D4B8449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:3a:2f:20:a8:f0:c3:1e:9f:19:69:c5:4a:
                    e0:45:90:21:2c:e6:eb:f5:1f:62:7d:85:c8:39:06:
                    a9:05:ed:4e:b3:4b:8b:7f:5f:50:c4:17:d5:6b:2a:
                    f1:27:a6:27:fe:ed:8e:38:8e:4f:43:22:a5:07:b4:
                    a7:ba:53:b2:cb:d7:76:bf:be:bb:b6:ea:bf:ae:4e:
                    29:6e:74:73:3d:f8:ab:5b:a7:55:51:6d:a9:2c:4e:
                    92:c3:62:15:5c:64:ae:2e:7f:53:62:a8:97:3b:a6:
                    c6:63:05:94:de:02:4c:54:97:bb:f5:9c:c1:98:b9:
                    fa:d2:77:d1:2e:a2:eb:56:5a:45:3f:51:a4:ae:93:
                    bd:cd:2b:52:30:8b:41:2d:4d:2c:61:0c:d7:b5:c9:
                    53:32:49:ce:11:eb:9f:c4:6d:d5:0a:6f:e0:d8:4b:
                    ee:e0:ef:e3:30:1a:a1:ed:f6:68:90:8a:a2:46:bd:
                    91:c2:03:db:89:9c:f5:02:f4:05:e8:11:ca:12:68:
                    fa:98:f3:aa:6a:b6:26:c9:f2:75:d5:88:97:42:78:
                    87:2e:2c:9a:54:0d:ec:b4:87:b5:c5:09:db:51:b7:
                    6d:25:cc:59:6a:ff:a4:83:70:e9:7c:73:3c:dd:55:
                    d0:e5:3a:d8:82:5d:f6:e1:b2:56:dc:10:5e:be:75:
                    29:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D8:F0:95:60:83:68:6D:01:D2:EC:7C:7B:31:C5:A9:CA:5D:4B:84:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/38PDvZgpn5wPzVeUe7mJx6VW4GnQEkxUk9tQrRtAFT8q/0/D8F0956083686D01D2EC7C7B31C5A9CA5D4B8449.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.56.0/22
                IPv6:
                  2804:6648::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269546

    Signature Algorithm: sha256WithRSAEncryption
         89:b1:3a:70:05:06:5c:27:1f:00:84:ad:27:1f:90:f0:f8:d7:
         e7:fc:b8:25:59:5f:6c:5c:49:e0:51:02:ff:20:94:36:72:41:
         4d:19:5f:47:dc:cf:55:a3:d3:ba:3b:2a:e6:41:55:6e:74:f0:
         3a:a8:e1:16:40:ae:7f:a7:9a:f0:fa:ec:0e:af:07:e5:30:7a:
         bb:04:33:7f:c5:18:33:51:36:44:ff:48:f5:cb:d0:ca:e6:dd:
         61:36:7f:b9:1e:de:e3:1b:b5:d9:80:9e:8a:76:f7:d2:7d:dd:
         1f:60:19:6d:15:f9:7d:7d:81:4f:bd:2f:52:f0:53:64:e6:a2:
         22:5f:24:15:53:d7:b3:6c:8b:be:10:05:83:a0:9d:5a:12:1b:
         44:81:87:f4:29:17:dc:b1:76:22:37:fa:02:44:e6:76:f3:19:
         60:0b:07:ad:5e:6c:f6:b5:6a:ae:9e:c1:53:6d:73:f8:33:3f:
         50:c0:5d:78:57:5a:45:2b:25:50:71:e5:89:46:41:8b:93:c7:
         af:63:d7:1b:62:91:8a:70:39:e6:b6:6d:93:26:58:3e:92:7f:
         30:b6:37:46:94:0f:b9:fc:21:4e:14:3d:fd:eb:f1:3f:df:b2:
         da:1c:c9:fb:1f:ca:31:2f:88:1e:5d:93:0c:31:6d:db:7f:41:
         4a:fd:f5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org