Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.cer
File:                     94E4D0AA03B0607D73B2212CED372F813315BAAC.cer (raw, json)
Hash identifier:          AFleuB0HFTqiH6L4wHIV3K6JajCwuQl7Mi0nS9sW7zg=
Subject key identifier:   94:E4:D0:AA:03:B0:60:7D:73:B2:21:2C:ED:37:2F:81:33:15:BA:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       132A46A3DDFA95322103C1C4843332D02FE69B1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:21 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:21 +0000
Subordinate resources:    AS: 268482
                          IP: 45.239.244.0/22
                          IP: 2804:51e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:2a:46:a3:dd:fa:95:32:21:03:c1:c4:84:33:32:d0:2f:e6:9b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:21 2024 GMT
            Not After : Mar 31 11:03:21 2025 GMT
        Subject: CN=94E4D0AA03B0607D73B2212CED372F813315BAAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e0:af:b6:0d:05:02:35:75:37:2b:a8:d0:c9:
                    9f:d2:56:d8:10:0d:a9:65:6e:3f:c6:e4:c4:51:1d:
                    1f:a9:8c:5f:69:62:57:30:be:0e:ca:82:32:de:0f:
                    85:7f:4f:d2:3e:b0:54:c9:15:64:9e:aa:5f:58:d9:
                    d9:09:d7:19:39:80:6d:16:0d:3d:ce:da:a8:39:38:
                    fc:fa:e9:5f:47:37:26:51:13:d5:78:31:80:8c:71:
                    75:8e:26:c3:03:a3:29:3f:62:20:6a:eb:4a:6c:a0:
                    e4:01:79:10:8d:9e:a7:b9:81:60:b3:21:f4:db:dd:
                    8e:96:26:dd:c4:f3:47:1a:8f:4e:53:a4:c4:4c:91:
                    92:a3:81:e6:18:23:47:dd:29:78:58:11:ee:0d:c9:
                    23:d1:5a:56:73:6f:88:2b:5c:d2:3e:e5:35:74:7c:
                    e3:bb:6a:a5:3d:ab:6a:a2:39:c3:88:8f:b9:e2:a8:
                    71:2e:2f:5f:a5:cd:fd:30:fd:d4:1e:12:c0:56:2e:
                    78:7a:3a:11:14:24:b7:d8:74:5d:7e:d5:64:2b:50:
                    f8:73:6b:ed:aa:e2:80:ad:ef:ea:00:26:87:e6:d4:
                    f7:d9:ae:d0:96:ae:31:b3:b7:0d:fd:b9:c5:49:a9:
                    90:c7:d4:e9:43:38:c8:7b:57:28:32:79:e4:8c:6c:
                    ff:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:E4:D0:AA:03:B0:60:7D:73:B2:21:2C:ED:37:2F:81:33:15:BA:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ALMiZ2rD3quMNzpUJmyeyChNreVc2WXCGdyXc8py912Y/0/94E4D0AA03B0607D73B2212CED372F813315BAAC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.244.0/22
                IPv6:
                  2804:51e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268482

    Signature Algorithm: sha256WithRSAEncryption
         af:43:52:90:1e:e3:a6:d1:3e:19:80:c6:af:b1:b2:7b:63:0d:
         d2:b6:63:c5:b3:6a:a9:7b:15:ca:58:5f:0a:5b:33:c1:0e:8b:
         53:b7:02:eb:d9:e3:d8:2d:7e:10:bb:b1:4c:15:c4:45:a7:d1:
         ed:0f:d3:80:58:d8:0b:65:fe:25:75:8a:61:fc:27:65:55:97:
         57:c4:ad:6a:bb:c3:58:8d:5e:f1:93:29:15:ce:3d:67:ce:4d:
         0a:34:bb:5e:65:30:fb:5e:51:73:ea:a0:e4:04:6d:51:92:cc:
         63:f4:8a:9f:b0:42:bb:ec:78:9f:21:05:06:14:d1:16:0c:d4:
         04:e2:57:07:49:e8:72:83:2b:5d:66:e3:49:32:5c:f0:e9:9c:
         f2:99:98:c1:b7:57:31:b4:92:15:c7:c8:2a:de:9f:dd:97:ac:
         b5:b7:dd:53:6a:90:68:1e:ed:ca:a0:0c:24:3c:e3:79:33:17:
         04:90:52:f7:ea:f5:05:be:76:17:ba:3b:78:fe:cc:04:fe:f4:
         45:76:23:49:51:eb:d9:44:38:82:57:e2:2c:5c:80:b0:fe:56:
         d2:43:4f:59:32:8b:7f:34:f8:0d:ea:67:67:a1:10:51:ff:fa:
         09:6a:b1:a1:d6:0c:b7:f5:f9:8e:4e:1b:6b:54:2d:ed:11:69:
         55:f1:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org