Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/EFD0002BA7117A69B4C55A65E725D8FF95369038.cer
File:                     EFD0002BA7117A69B4C55A65E725D8FF95369038.cer (raw, json)
Hash identifier:          1ymcyQMIvXri8RwG3tS90X2xLKOXXtwYmCNXv25b5nM=
Subject key identifier:   EF:D0:00:2B:A7:11:7A:69:B4:C5:5A:65:E7:25:D8:FF:95:36:90:38
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70FD2F10EB1CB5C4D52EF4406D130DC0A0FC13B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/EFD0002BA7117A69B4C55A65E725D8FF95369038.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Jul 2022 15:35:14 +0000
Certificate not after:    Thu 06 Jul 2023 15:40:14 +0000
Subordinate resources:    AS: 270783
                          IP: 177.131.136.0/22
                          IP: 2804:7158::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fd:2f:10:eb:1c:b5:c4:d5:2e:f4:40:6d:13:0d:c0:a0:fc:13:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  7 15:35:14 2022 GMT
            Not After : Jul  6 15:40:14 2023 GMT
        Subject: CN=EFD0002BA7117A69B4C55A65E725D8FF95369038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:36:97:43:d3:40:94:59:bb:16:b6:8e:dc:
                    f3:21:f6:88:36:40:4d:fa:73:17:0f:4a:5e:55:72:
                    87:23:4b:6a:3d:e2:82:d2:da:61:a4:42:20:b4:2d:
                    27:86:af:88:31:b5:2f:ed:c1:72:08:a4:a3:1b:db:
                    7a:ce:c4:79:86:59:4e:77:41:84:da:70:ec:0c:f1:
                    87:83:50:33:ea:70:dc:0b:b1:cf:65:59:92:60:90:
                    35:12:8a:f5:10:f8:73:fc:be:93:bc:6c:f7:ee:45:
                    89:3f:b3:5d:bf:cc:98:f5:aa:e2:bb:5d:c2:c9:cf:
                    ba:2c:06:b5:aa:ee:70:25:b9:76:7f:bf:d7:c6:bd:
                    d0:1b:10:00:32:76:d5:1e:68:9f:02:d0:f0:a5:fc:
                    1f:8f:b1:8a:33:f8:bf:d4:e0:5a:73:31:3f:bb:1f:
                    37:c9:89:60:c2:88:67:88:6d:e9:2b:92:b6:1a:af:
                    71:1d:fd:25:3f:d0:22:aa:84:d4:0d:96:de:ae:03:
                    29:b8:b1:43:c4:2b:81:4b:3a:76:d1:2c:bd:41:f2:
                    09:ce:20:b9:0f:24:38:33:56:f9:b4:a6:0b:f7:e6:
                    66:78:f3:22:df:ad:15:b1:fe:30:95:8c:b1:21:fa:
                    68:c2:c9:7d:6d:b7:68:1b:d0:a3:80:25:54:b4:da:
                    26:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EF:D0:00:2B:A7:11:7A:69:B4:C5:5A:65:E7:25:D8:FF:95:36:90:38
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7EX3Ai47QtzL21yoLGgc3HmacghStn4EQ95MA3BdPEPW/0/EFD0002BA7117A69B4C55A65E725D8FF95369038.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.131.136.0/22
                IPv6:
                  2804:7158::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270783

    Signature Algorithm: sha256WithRSAEncryption
         88:49:81:fc:98:2f:30:fe:a3:ff:b8:64:62:48:11:2b:20:26:
         d6:82:18:39:b7:5c:76:5c:ef:c5:ba:fe:f4:44:30:6f:38:4c:
         ba:da:89:26:3d:f1:96:7d:5e:f0:cc:73:68:bf:27:07:11:3c:
         61:93:4e:d5:3a:a3:dd:09:a2:22:78:81:2f:73:8d:0a:91:b2:
         4b:d5:7e:bc:b8:6a:ab:35:d0:e9:38:f9:b1:bc:9f:cb:84:4d:
         95:68:57:41:35:40:91:3e:69:6b:1c:ef:d7:65:9a:ee:33:e1:
         a3:af:0e:f8:a6:5d:bd:a8:bc:6f:ca:07:e8:f8:69:5e:29:92:
         9b:79:c1:d8:73:df:2f:e3:4e:6a:d2:fa:28:85:c5:5a:b4:71:
         e0:cf:c0:28:9b:9b:57:b5:2e:bc:00:9c:08:84:8d:2b:bf:21:
         34:b5:3a:57:d7:3a:66:ff:7c:0d:43:40:22:5c:eb:bc:e5:0f:
         ad:81:94:ed:40:f2:0e:c0:25:68:7d:2b:9d:82:90:d9:71:84:
         8c:27:ca:47:62:ee:2a:05:b8:5f:08:85:6d:13:45:7a:a9:4a:
         89:b0:ce:d4:ea:0f:9d:f2:d7:35:56:e9:58:f7:a8:5b:ad:42:
         37:8a:43:04:72:21:31:1d:cf:b2:d3:05:6b:e5:f2:3e:65:41:
         68:ad:cf:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:36 2024 by rpki-client on console-fra.rpki-client.org