Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/037CFBEF4360D939B791BA110ABD4575EA3F3A7E.cer
File:                     037CFBEF4360D939B791BA110ABD4575EA3F3A7E.cer (raw, json)
Hash identifier:          w5RWaEfzhQa9B0GPhC4FO+ebims4nSeUj0vGu2Eqm1Q=
Subject key identifier:   03:7C:FB:EF:43:60:D9:39:B7:91:BA:11:0A:BD:45:75:EA:3F:3A:7E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3DF6A5FE67621072F7A549983B0CD37722482F05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/0/037CFBEF4360D939B791BA110ABD4575EA3F3A7E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2024 02:56:10 +0000
Certificate not after:    Tue 14 Jan 2025 03:01:10 +0000
Subordinate resources:    AS: 267326
                          IP: 45.233.184.0/22
                          IP: 2804:4bb8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:f6:a5:fe:67:62:10:72:f7:a5:49:98:3b:0c:d3:77:22:48:2f:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 16 02:56:10 2024 GMT
            Not After : Jan 14 03:01:10 2025 GMT
        Subject: CN=037CFBEF4360D939B791BA110ABD4575EA3F3A7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:4f:dd:75:c3:f1:bd:2d:22:5f:a0:b5:f6:
                    2b:67:ce:3c:49:aa:83:ba:53:6b:32:2f:b2:3a:96:
                    cb:e2:50:f5:e6:5d:3d:59:8b:bf:70:0b:6d:58:68:
                    0a:9c:6b:c7:ab:6e:99:5b:c1:45:ba:a4:27:a5:8c:
                    3d:f6:78:cc:ff:6d:ac:fc:07:27:2d:7a:33:2d:e3:
                    c1:20:be:11:3e:34:86:da:77:48:48:1d:92:ca:da:
                    29:20:bb:9a:a4:89:e4:63:00:e2:81:65:c7:1f:86:
                    11:52:48:73:5b:2c:cb:e8:ac:66:75:27:35:d0:a8:
                    ce:1e:f0:e5:c5:9a:18:22:8d:07:2b:d5:7f:61:81:
                    04:20:4f:50:a5:1e:26:0c:f0:c5:8a:52:f8:ca:1d:
                    0d:fb:28:a0:55:f3:39:6e:d7:c2:7c:3a:f3:17:e8:
                    70:89:7b:68:4e:f1:d5:ac:54:3e:17:f0:c4:4a:87:
                    2a:c0:2c:b9:f4:71:7e:62:b0:cf:d2:88:f0:da:b7:
                    fb:02:6b:f1:9b:c5:69:3c:94:93:99:1f:ac:90:ff:
                    64:6b:26:23:5e:ae:0f:3a:0a:cc:db:06:6e:0c:d6:
                    50:c4:66:5e:85:42:51:de:d7:a5:d2:c3:0d:d5:a1:
                    ab:2a:36:be:b8:6e:0e:72:78:87:fa:b3:d1:dc:c0:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                03:7C:FB:EF:43:60:D9:39:B7:91:BA:11:0A:BD:45:75:EA:3F:3A:7E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GBsfE8S44f71GMg7Qkj5JXAkXmdmvGhYcLZ8szoCbD8c/0/037CFBEF4360D939B791BA110ABD4575EA3F3A7E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.184.0/22
                IPv6:
                  2804:4bb8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267326

    Signature Algorithm: sha256WithRSAEncryption
         52:f4:8e:af:4f:fa:ec:e0:de:63:d8:6c:d9:5a:db:8d:ad:a5:
         05:b5:91:8b:b1:d4:68:7b:87:03:1f:89:97:fe:3d:a6:72:37:
         9e:45:3a:63:e0:58:b3:48:7a:4d:63:74:02:22:dc:e3:fe:48:
         93:1e:af:7f:2b:51:3f:85:9d:2d:9b:d7:14:30:e6:3d:54:c1:
         db:ea:f5:23:10:f6:a7:74:a8:b6:f5:5d:cc:6a:80:45:ff:8e:
         4e:d4:e9:dd:99:cb:62:f7:c3:d4:01:f4:8b:3d:b4:af:c1:22:
         64:7e:b0:23:88:32:e9:fc:cd:8d:51:61:f6:57:f2:39:06:b2:
         d9:21:cc:83:de:74:8e:dc:e1:62:8f:f7:56:56:a2:e2:11:ce:
         b9:15:1e:d6:46:80:a1:4b:1c:a3:46:e0:75:2d:7d:a5:30:48:
         63:cc:d6:1d:db:78:e0:e5:01:01:6c:ca:25:01:a4:b3:29:5a:
         60:3c:ee:49:0d:2a:03:6a:22:8d:c4:f8:a4:1d:20:28:7e:29:
         ba:49:0a:59:12:70:25:9a:dc:3e:31:4c:b3:23:a3:b0:3d:d8:
         93:29:6d:a3:77:f6:74:34:cc:6b:f1:46:f3:ae:77:f3:2c:45:
         40:fc:2d:08:d3:0b:03:93:44:6a:f2:34:84:44:6e:35:a1:21:
         24:20:a4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org