Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.cer
File:                     EF7132FF02D9CBAC357BB2797F0CC7658B128897.cer (raw, json)
Hash identifier:          LGu1150nuVXQeymkRqr4NVHYs29Wl2LGJAm5p+f2czw=
Subject key identifier:   EF:71:32:FF:02:D9:CB:AC:35:7B:B2:79:7F:0C:C7:65:8B:12:88:97
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DD764C5B6B72A15E56BEFB7B58F0E2E8B040141
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Nov 2022 22:20:16 +0000
Certificate not after:    Thu 23 Nov 2023 22:25:16 +0000
Subordinate resources:    AS: 269221
                          IP: 45.181.116.0/22
                          IP: 2804:6138::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d7:64:c5:b6:b7:2a:15:e5:6b:ef:b7:b5:8f:0e:2e:8b:04:01:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 22:20:16 2022 GMT
            Not After : Nov 23 22:25:16 2023 GMT
        Subject: CN=EF7132FF02D9CBAC357BB2797F0CC7658B128897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:52:f2:e5:0a:89:1e:ea:5f:2f:57:40:31:
                    f6:2f:b9:9e:11:54:eb:ff:68:b9:3f:06:01:87:b3:
                    91:f7:d5:5b:ae:a1:4f:0d:32:2b:65:d7:1a:aa:b2:
                    74:af:c4:df:c4:87:3f:10:c6:6f:b1:fb:f3:dd:d2:
                    47:60:5c:eb:62:c5:50:0e:bc:c6:ca:c1:d2:3e:e6:
                    78:b1:b8:cb:61:fc:45:d1:2e:fe:74:5e:21:bd:2e:
                    bb:3e:44:ca:67:9a:6f:a7:54:7f:15:12:c6:60:9e:
                    a6:e9:45:2a:17:95:4c:85:79:d6:b7:27:f7:a4:57:
                    8d:50:67:84:43:7d:9d:44:c7:4a:df:09:55:fd:35:
                    5d:25:47:54:83:0c:60:d0:7d:03:7f:1f:65:e5:63:
                    26:f0:65:04:b5:d0:4c:00:46:b8:56:c2:13:15:0d:
                    44:1a:fc:dd:98:25:94:d1:1a:d8:d8:02:7c:60:b3:
                    63:03:84:1a:0c:46:44:71:2f:66:6e:5c:15:1a:c7:
                    27:53:73:5c:76:7a:78:9b:cf:f9:c3:78:aa:ec:a1:
                    63:18:a3:9d:52:0e:6a:c7:0b:72:43:65:04:73:09:
                    fe:f9:4f:98:48:5c:2f:ba:53:23:bc:af:47:21:ad:
                    a4:c9:d5:96:e8:64:8a:7f:2a:02:57:8e:9f:8b:47:
                    b2:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:71:32:FF:02:D9:CB:AC:35:7B:B2:79:7F:0C:C7:65:8B:12:88:97
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FJQ7iVw9ULpfmfBV9JwEVDjYyTnFstRT3iBrF3e3Yf2z/0/EF7132FF02D9CBAC357BB2797F0CC7658B128897.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.116.0/22
                IPv6:
                  2804:6138::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269221

    Signature Algorithm: sha256WithRSAEncryption
         79:e3:87:bf:b4:48:46:f6:a9:15:21:47:eb:09:7f:02:51:b1:
         16:6d:39:75:94:3e:22:76:3c:46:08:01:98:1f:58:ed:ea:4b:
         64:a7:b8:58:6c:3b:ee:6b:b1:69:99:84:68:b1:83:42:47:b6:
         20:a1:76:16:58:bf:e7:64:26:ed:eb:4c:48:97:52:2d:99:6b:
         07:77:0b:8b:12:ef:2b:9f:2b:3e:04:e0:9d:93:63:3a:7e:43:
         3c:05:43:ef:88:85:d3:26:c0:19:c7:ed:ae:63:3d:9e:2e:06:
         17:68:2f:d9:2f:dc:ec:06:8e:cc:64:21:52:f6:dc:56:a8:ee:
         6b:fd:0a:dd:1e:17:e9:7e:7c:1c:31:2a:ca:69:b7:a7:54:5d:
         f7:5d:fa:64:dd:1f:14:27:8f:11:de:93:08:e9:b6:11:32:1d:
         e7:d4:b6:a2:82:5b:36:a8:44:f2:8d:32:4c:b1:53:f9:71:d1:
         04:82:e6:d6:e3:89:30:c1:ee:fa:b3:17:93:86:5e:50:3c:e5:
         74:d2:53:93:62:1c:ca:78:f0:23:89:cf:75:f7:fc:81:1a:ec:
         fa:98:ea:76:55:3c:d2:01:b2:eb:36:0f:7f:7b:c9:2e:f1:7a:
         d2:78:08:31:2b:a4:99:79:27:7f:cb:69:35:48:d9:6b:c5:1e:
         00:db:2a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org