Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F42BE4746313AA77C16EE1FFD383DA5808F2C817.cer
File:                     F42BE4746313AA77C16EE1FFD383DA5808F2C817.cer (raw, json)
Hash identifier:          tI7AViwtSXBfmjYd3Hugkl6+/FuhVaQ93TcAmq+amo4=
Subject key identifier:   F4:2B:E4:74:63:13:AA:77:C1:6E:E1:FF:D3:83:DA:58:08:F2:C8:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       21F90790D97E546CF1D1354120C219C0776AFD8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/F42BE4746313AA77C16EE1FFD383DA5808F2C817.mft
caRepository:             rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 24 Feb 2022 14:35:57 +0000
Certificate not after:    Thu 23 Feb 2023 14:40:57 +0000
Subordinate resources:    AS: 28305
                          IP: 189.39.96.0/20
                          IP: 189.85.144.0/20
                          IP: 2804:2898::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f9:07:90:d9:7e:54:6c:f1:d1:35:41:20:c2:19:c0:77:6a:fd:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 24 14:35:57 2022 GMT
            Not After : Feb 23 14:40:57 2023 GMT
        Subject: CN=F42BE4746313AA77C16EE1FFD383DA5808F2C817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c5:6b:ef:95:c6:2f:42:fb:a1:7d:b5:12:9d:
                    ff:ce:24:80:14:8b:ed:1e:ae:56:19:ed:90:56:e8:
                    84:b3:08:3d:aa:46:74:ef:34:48:a4:db:9c:10:4f:
                    0d:e5:03:96:fe:5e:e6:7c:c1:be:51:3a:cb:1c:36:
                    d2:1a:ef:6b:54:ac:48:45:8a:af:29:a7:b5:30:dd:
                    da:fa:16:fa:a3:77:a6:b5:2b:fd:18:83:31:66:5b:
                    36:9f:3a:e8:8f:b2:35:c3:8b:15:30:72:41:f4:a9:
                    bb:30:2c:66:90:1c:6e:b8:45:63:66:86:41:7f:ac:
                    b0:14:66:58:80:f2:99:68:84:20:c5:c9:52:37:79:
                    b6:f2:6b:93:eb:76:c9:67:98:2d:9f:ca:9b:28:43:
                    a1:b1:c7:ff:2e:01:8f:7d:7a:b5:ef:7d:20:bb:8c:
                    0a:9a:4a:18:12:76:1a:10:2f:e1:08:79:df:f1:37:
                    68:b9:a4:9d:fd:e7:63:a1:d2:79:74:05:3f:a7:c2:
                    78:fe:0b:02:d9:c9:f7:67:39:1b:79:8b:d3:7b:1c:
                    ef:6c:c5:6c:d0:f0:40:93:cb:d6:75:57:ea:84:7f:
                    3f:5c:51:f2:bd:cf:f6:f1:b2:d3:55:31:d9:1c:18:
                    7c:e1:96:88:19:de:73:85:b9:60:d3:c9:18:e8:64:
                    94:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:2B:E4:74:63:13:AA:77:C1:6E:E1:FF:D3:83:DA:58:08:F2:C8:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/93gYpDzS69L7rE9KxiqCg7PiSbyYsxZq5nW2ocFYAHXR/0/F42BE4746313AA77C16EE1FFD383DA5808F2C817.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.96.0/20
                  189.85.144.0/20
                IPv6:
                  2804:2898::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28305

    Signature Algorithm: sha256WithRSAEncryption
         2a:d2:0b:1e:e4:2f:8f:ac:38:d7:b1:9d:e3:a4:a4:a3:f0:d1:
         98:3c:40:ac:46:d7:1a:93:35:dc:f0:19:fc:a5:c8:0a:02:20:
         38:8b:50:aa:00:c7:f3:f7:e1:18:08:20:dd:85:5a:e5:92:d5:
         63:f1:cf:af:83:12:36:32:83:ce:3d:67:c0:7a:4d:83:85:db:
         b0:bb:0c:46:4b:d2:eb:d1:40:e4:99:46:9d:b2:7c:57:2d:8f:
         53:cd:a8:1f:92:fd:e3:83:e0:c1:22:8b:95:51:f0:16:0e:e6:
         3b:4f:0e:07:66:36:9d:3f:fe:26:3e:75:04:62:f9:89:e3:77:
         89:98:1d:3a:27:61:20:cc:c0:25:4e:1b:b5:f6:a9:bb:fe:e9:
         24:00:69:e1:71:fc:f2:69:96:00:69:61:ab:6f:08:f0:ac:da:
         dd:db:52:e6:fd:ef:df:59:59:3e:c3:d8:f2:6c:2b:ec:99:7f:
         7e:64:92:30:6d:5a:cd:1d:ae:81:b5:ab:da:58:d5:4c:4d:9e:
         1e:1b:42:9e:82:72:ac:91:9b:96:cc:3a:e2:83:af:9f:af:d8:
         16:f9:86:8e:40:03:70:e4:a0:c6:a5:16:79:b9:81:6a:26:f9:
         77:bc:ff:be:f5:3d:16:16:12:8d:1a:37:99:31:4f:9c:00:32:
         09:bc:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org