Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/215CF52ECA64A4B6841F331E2595A9D54883FD98.cer
File:                     215CF52ECA64A4B6841F331E2595A9D54883FD98.cer (raw, json)
Hash identifier:          SJnFvm+LhVod1wU0Qr1LLsrtzUIpR+gA9cYLloCayDE=
Subject key identifier:   21:5C:F5:2E:CA:64:A4:B6:84:1F:33:1E:25:95:A9:D5:48:83:FD:98
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       29F7B8F70848A919A9A7057F5997321CC6E72418
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/215CF52ECA64A4B6841F331E2595A9D54883FD98.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Mar 2023 16:45:12 +0000
Certificate not after:    Thu 14 Mar 2024 16:50:12 +0000
Subordinate resources:    AS: 269197
                          IP: 45.181.196.0/22
                          IP: 2804:60e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f7:b8:f7:08:48:a9:19:a9:a7:05:7f:59:97:32:1c:c6:e7:24:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 16 16:45:12 2023 GMT
            Not After : Mar 14 16:50:12 2024 GMT
        Subject: CN=215CF52ECA64A4B6841F331E2595A9D54883FD98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:e7:f5:19:a4:05:44:9c:cf:28:d3:28:37:
                    45:5a:4f:b5:66:bc:0f:dd:48:c1:75:2e:5d:bc:ba:
                    bf:47:63:2f:98:f9:59:28:63:f2:12:d5:71:36:72:
                    c1:b6:f1:3a:57:13:97:53:6c:a1:06:c7:5a:75:c1:
                    28:22:4a:95:29:7a:e4:1b:db:2c:5f:13:48:05:21:
                    a3:e0:e6:ac:98:27:00:77:06:1c:fe:0a:bd:01:65:
                    fa:04:d9:1d:ff:d9:58:ff:5d:f8:0d:67:6e:82:38:
                    96:a8:d6:d4:74:b5:c0:ba:82:1d:5a:0d:a8:45:a0:
                    51:71:fa:da:17:1d:72:21:97:51:69:9d:5c:d3:8f:
                    2d:cf:db:17:60:2c:8a:87:73:d5:82:c6:29:64:4f:
                    af:d5:6a:f3:cc:49:e4:5f:1f:e3:19:94:49:f5:b2:
                    6f:d4:8d:e2:1a:a7:09:c5:d0:b0:08:ed:c6:ce:48:
                    45:76:a5:48:46:72:2f:b2:89:1c:18:41:47:99:20:
                    c5:ed:b1:bf:25:61:74:f9:3a:4c:36:af:03:3c:88:
                    4b:13:76:1a:26:30:b1:58:c4:c8:ac:02:21:0c:ff:
                    29:77:75:b6:fe:dd:0f:3e:85:d3:35:be:6e:ae:45:
                    3b:2b:32:99:1a:b9:02:7f:80:8c:bf:1a:f8:25:3a:
                    a8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                21:5C:F5:2E:CA:64:A4:B6:84:1F:33:1E:25:95:A9:D5:48:83:FD:98
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BVKkTZfKiLForUMhYRJyGbnYpExF4kD5AQZhi8u7SZuD/0/215CF52ECA64A4B6841F331E2595A9D54883FD98.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.196.0/22
                IPv6:
                  2804:60e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269197

    Signature Algorithm: sha256WithRSAEncryption
         17:b3:35:5b:14:0f:7e:f2:e1:35:87:5e:15:58:25:2a:29:ee:
         fa:ca:f8:80:06:b1:ee:df:8a:f2:92:3d:f2:5a:ea:6e:df:c0:
         74:ca:27:a6:02:a9:ff:7f:94:66:34:65:79:8c:66:63:53:df:
         45:dd:da:0c:2a:d0:a3:1c:c5:4c:8d:af:f2:8d:a1:06:63:d1:
         ad:85:8e:55:db:b7:66:6f:b9:dd:57:6a:33:30:bf:0f:ae:f6:
         28:6e:18:68:9b:98:df:e3:e0:55:a8:0c:26:0d:a5:ba:2d:34:
         be:29:a5:08:ee:ba:df:a9:77:db:80:be:05:fc:65:38:08:8f:
         e8:98:95:dd:24:22:e7:1b:0a:f7:06:6a:8d:01:b7:fc:df:19:
         1e:41:03:dd:5b:11:f6:80:41:ab:74:39:d2:4e:30:ed:a5:57:
         51:ac:0a:2a:a4:64:3b:e8:90:c4:dd:8f:81:c3:35:ce:dc:66:
         bd:9a:7a:42:07:92:13:cc:c9:0b:1a:78:dd:22:d3:6e:14:61:
         a9:9b:fd:7e:16:15:a9:1b:db:2c:82:92:d5:3c:73:d7:70:7b:
         bc:3c:7b:cb:aa:b6:48:12:3f:bb:32:35:c3:55:22:db:97:8a:
         c3:69:ca:70:f1:b7:52:9c:51:c1:78:6a:c2:44:e0:1e:a5:15:
         fc:10:ec:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org