Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer
File:                     61F4874E6474A8E5CE242BD1FB7854FA15297D85.cer (raw, json)
Hash identifier:          2MKGlzVd/fMI4YyNpdUDq8j4Yoi10tQTktESfNMorBQ=
Subject key identifier:   61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7AF91497BD89A0B36496F47B12D304944F53E185
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 13 Feb 2024 12:40:17 +0000
Certificate not after:    Tue 11 Feb 2025 12:45:17 +0000
Subordinate resources:    AS: 270358
                          IP: 190.89.72.0/22
                          IP: 2804:6ac8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f9:14:97:bd:89:a0:b3:64:96:f4:7b:12:d3:04:94:4f:53:e1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 13 12:40:17 2024 GMT
            Not After : Feb 11 12:45:17 2025 GMT
        Subject: CN=61F4874E6474A8E5CE242BD1FB7854FA15297D85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:61:ab:6d:f2:08:98:a3:11:d0:d8:24:47:ee:
                    bd:fd:fa:f2:9a:e5:4a:e5:90:50:cb:e7:7a:90:b0:
                    27:89:c4:46:eb:cd:71:b7:65:a0:1b:11:6c:30:69:
                    96:6b:20:d3:0d:79:0f:7c:76:be:84:34:2b:c2:35:
                    0b:ec:21:63:0f:bf:61:a0:1d:d4:9d:ce:db:d6:08:
                    9a:35:0e:93:79:a1:d1:7c:c9:18:ad:27:16:8d:4e:
                    56:19:57:d1:a1:45:ec:a5:dc:8d:70:b8:d3:27:42:
                    1c:54:83:38:98:95:b7:03:85:97:64:3c:ba:52:3b:
                    6e:0c:b5:e4:1f:67:d7:1d:cd:11:63:e9:1b:f4:bf:
                    d2:e4:40:38:cb:c4:3f:d1:35:d3:33:10:4d:4d:fd:
                    d5:b2:22:29:ae:4f:b9:cc:7a:37:52:6e:2c:76:c0:
                    8c:36:2a:55:07:82:2c:03:97:bd:30:40:fb:04:d8:
                    8d:85:27:55:a4:51:a4:ee:22:c1:1b:69:d9:db:8f:
                    21:24:d3:82:ec:de:b9:8a:63:23:10:55:c1:df:14:
                    b4:3f:47:c9:da:a3:8d:fe:63:00:f3:b9:f5:f2:68:
                    1d:e3:c9:aa:2b:79:e1:09:d4:52:2c:7c:49:2c:3c:
                    fe:f0:fd:b2:c7:53:07:6c:9b:91:37:6c:1d:70:cf:
                    a9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:F4:87:4E:64:74:A8:E5:CE:24:2B:D1:FB:78:54:FA:15:29:7D:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4CcV8YJG941aM6VsWrpTTUD1owqmAwiXC2fLW9ab2gAH/0/61F4874E6474A8E5CE242BD1FB7854FA15297D85.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.72.0/22
                IPv6:
                  2804:6ac8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270358

    Signature Algorithm: sha256WithRSAEncryption
         a3:0e:4a:3a:af:83:0f:21:d5:82:45:5c:07:74:b9:f7:c6:86:
         b6:35:f0:f9:5c:45:b6:47:0e:42:18:47:8b:05:f7:1b:b2:ea:
         dc:5b:f3:14:95:5c:fe:51:e5:0f:c1:c3:fd:26:26:a8:be:eb:
         16:77:1c:4f:c6:53:fe:1e:a6:40:73:0d:35:3c:15:4d:bd:3e:
         ca:be:0a:11:15:18:a3:61:dc:ff:de:33:a3:e0:df:dd:8f:9c:
         5c:dd:ab:6a:32:77:f8:66:cb:30:20:b6:0d:ee:bd:b5:f7:f7:
         b3:27:7f:d3:c6:d3:05:0a:53:b5:eb:6e:a4:c1:cd:d0:b0:5e:
         4f:66:36:7f:c9:7e:e7:2f:2e:76:e3:59:60:ac:3b:2e:df:10:
         50:84:b6:f2:04:6e:d8:aa:44:07:8f:82:0a:0a:75:06:db:0e:
         81:fa:84:9c:67:88:c3:00:41:4e:11:38:4d:53:b6:f3:29:5e:
         fd:eb:b2:71:26:48:67:2f:22:88:94:be:62:38:ed:de:2f:4f:
         80:71:76:c6:cb:9e:cb:4b:aa:d8:9d:c0:01:27:df:2c:22:77:
         b3:1c:0b:a7:98:57:e1:4f:02:28:31:d1:76:37:5a:f4:5c:3c:
         e5:91:9b:ab:0f:49:14:33:b9:aa:2d:08:3e:8b:8a:cb:34:9e:
         41:8c:45:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org