Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DF8749D5A148D582D0CE22B2624BD078FB17022A.cer
File:                     DF8749D5A148D582D0CE22B2624BD078FB17022A.cer (raw, json)
Hash identifier:          3aIpsx+i+4jJqeVMh7rvHu+gbH1WcGurikgcblXR3ls=
Subject key identifier:   DF:87:49:D5:A1:48:D5:82:D0:CE:22:B2:62:4B:D0:78:FB:17:02:2A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5FECFCBB2AF625802D2B77569817421E829AA771
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/DF8749D5A148D582D0CE22B2624BD078FB17022A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 03 Aug 2021 21:05:46 +0000
Certificate not after:    Tue 02 Aug 2022 21:10:46 +0000
Subordinate resources:    AS: 266437
                          IP: 170.82.16.0/22
                          IP: 2804:37d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ec:fc:bb:2a:f6:25:80:2d:2b:77:56:98:17:42:1e:82:9a:a7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  3 21:05:46 2021 GMT
            Not After : Aug  2 21:10:46 2022 GMT
        Subject: CN=DF8749D5A148D582D0CE22B2624BD078FB17022A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:0a:47:21:53:0f:77:e3:8d:2b:be:4f:77:
                    3c:aa:31:22:28:12:3d:39:05:16:c8:78:f2:78:67:
                    b1:69:94:95:b2:43:6f:df:b3:ca:03:ee:e5:95:4a:
                    5e:98:71:b0:49:09:55:09:1d:29:c2:98:80:f6:cb:
                    a6:01:1f:29:10:b2:e3:f9:1c:89:68:cb:ff:56:5f:
                    ec:69:f7:a6:24:18:25:2b:87:6e:f7:5d:e4:32:b4:
                    b2:a2:df:11:91:ce:fb:83:b2:70:59:8a:f0:7d:0a:
                    6c:a3:49:36:30:a4:39:49:33:d2:3e:d2:7e:60:bc:
                    8f:e9:db:0a:36:57:07:5b:f1:09:89:16:4f:36:40:
                    54:82:4a:53:96:84:a8:3f:7b:7e:a4:da:97:c9:14:
                    e2:9d:8c:35:15:5e:bd:8e:54:5f:9d:ae:11:82:19:
                    9f:d1:ed:bc:77:2d:cb:24:0c:61:72:64:0c:a6:1f:
                    6b:88:fd:c7:b7:f4:35:fe:a4:82:e4:8b:88:76:5a:
                    1d:c4:18:57:d8:8b:fb:a0:c7:36:f5:60:26:44:16:
                    24:4d:bb:e1:ee:02:ee:ce:0b:b8:54:c8:75:4e:e6:
                    f5:83:0f:1d:cb:df:c1:cd:4f:64:f7:3d:51:a5:05:
                    45:45:2e:20:c7:bc:48:43:01:9d:b4:f5:ec:e2:89:
                    d9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DF:87:49:D5:A1:48:D5:82:D0:CE:22:B2:62:4B:D0:78:FB:17:02:2A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/DF8749D5A148D582D0CE22B2624BD078FB17022A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.16.0/22
                IPv6:
                  2804:37d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266437

    Signature Algorithm: sha256WithRSAEncryption
         b0:ef:d5:03:aa:f9:47:d3:99:93:62:e3:fe:21:42:50:ed:db:
         cb:69:fa:62:b1:8b:ae:40:b7:16:c4:fc:38:58:02:6c:e6:5e:
         00:ff:6e:81:e5:04:ae:e9:2e:37:9c:c9:72:19:2a:a9:07:f3:
         b3:b8:2a:3f:ee:37:fa:15:03:e2:14:ca:1a:4f:16:31:96:c6:
         a6:11:4c:07:b8:8a:16:ba:3a:bf:03:1d:27:82:a0:37:c6:4a:
         d2:5d:5b:eb:47:f4:ca:d8:ab:56:3a:e9:68:f6:0c:13:68:81:
         a4:2f:88:df:67:af:17:8d:e0:1c:63:59:4f:1d:03:f1:49:9b:
         1a:3f:f9:63:8e:e1:60:87:4e:90:3d:0a:2e:2d:35:59:8c:ce:
         6e:a6:dc:50:71:dd:49:41:fe:ec:18:ec:05:b0:9a:19:7a:eb:
         3e:c3:a5:ef:88:66:13:56:78:d9:79:eb:a6:72:8d:1e:77:2e:
         3d:37:96:78:dd:aa:0f:26:6d:ab:12:db:b6:93:32:36:c2:bc:
         af:de:7a:7b:36:64:13:dc:cb:5d:ba:93:35:7c:93:23:b8:92:
         41:bc:b9:4d:3b:b2:06:59:4f:f1:c8:7c:35:2b:d7:d0:ca:44:
         8b:5d:5f:76:9e:c5:81:c6:59:e5:4f:77:c1:5b:ad:11:90:4e:
         09:71:2d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org