Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer
File:                     04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.cer (raw, json)
Hash identifier:          xepeG/ifS8gTP9EqwDkcRDfGn2yQ1+KiEmMcar5AawY=
Subject key identifier:   04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3EF0212AE7B81A2B99A8F84E16F3B5DAF735AB5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 22 Nov 2023 13:02:47 +0000
Certificate not after:    Wed 20 Nov 2024 13:07:47 +0000
Subordinate resources:    AS: 262369
                          IP: 138.0.44.0/22
                          IP: 143.137.68.0/22
                          IP: 170.247.244.0/22
                          IP: 170.254.184.0/22
                          IP: 177.130.80.0/20
                          IP: 2804:86c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f0:21:2a:e7:b8:1a:2b:99:a8:f8:4e:16:f3:b5:da:f7:35:ab:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 22 13:02:47 2023 GMT
            Not After : Nov 20 13:07:47 2024 GMT
        Subject: CN=04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:34:14:d1:f2:54:06:72:94:11:a2:b7:6e:23:
                    f0:5c:99:09:83:b0:a0:f2:6c:68:50:4b:6a:c7:f2:
                    07:23:74:db:54:53:eb:b8:31:96:41:54:2d:ce:03:
                    97:ec:b0:ae:ff:5e:65:36:9a:71:80:f5:89:0a:da:
                    ca:a3:e4:ad:48:a4:0b:3d:3c:bd:ad:29:6a:fe:5a:
                    3b:44:b5:94:a0:cf:57:4e:ae:39:fd:4d:2a:9b:0d:
                    b2:c6:96:3e:26:3b:7d:79:85:fa:39:ed:0f:42:1c:
                    8a:54:4d:95:70:1e:30:49:1f:c7:c1:6f:23:a2:29:
                    b4:bd:c9:3b:9c:e9:63:c9:0c:e4:86:dc:d8:45:2a:
                    62:82:d2:1a:f2:3e:9c:23:18:7c:d2:a9:14:44:d8:
                    af:c9:13:e6:58:41:d3:58:d7:25:2e:92:c8:89:86:
                    23:aa:47:24:16:ae:76:8e:99:b3:e1:14:e3:f3:a5:
                    65:be:de:d7:dc:aa:0e:7d:6f:cd:bc:ad:05:52:3b:
                    88:44:58:5f:1d:2b:d4:21:b5:1f:3d:2f:84:0f:7f:
                    3f:57:cd:0a:d1:1d:2f:36:41:b9:d7:ee:92:58:b0:
                    48:99:c6:ae:c3:90:ff:4e:89:64:77:1a:5d:78:52:
                    dd:3a:8c:2d:0d:bf:b1:31:f7:a8:c1:7b:be:80:33:
                    83:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:DE:26:8B:81:8B:BF:0D:E9:CD:EF:A1:FD:97:66:12:FE:D7:BE:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EarafFgnRaY5LiaXNGaViuiFStVwGoKWj1K57r5w2wur/0/04DE268B818BBF0DE9CDEFA1FD976612FED7BE9C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.44.0/22
                  143.137.68.0/22
                  170.247.244.0/22
                  170.254.184.0/22
                  177.130.80.0/20
                IPv6:
                  2804:86c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262369

    Signature Algorithm: sha256WithRSAEncryption
         22:69:02:09:33:7a:51:3c:c2:44:49:ad:89:da:17:57:0d:e7:
         22:95:b8:f2:a2:8e:41:a8:e7:69:a8:cb:11:35:11:8d:3c:13:
         c9:47:97:14:88:1c:48:d5:57:d5:a4:45:c8:44:88:65:9f:63:
         78:78:07:11:43:b8:6a:5d:1e:ba:5c:7a:fd:9e:7c:91:b2:b2:
         18:3a:c8:4b:c6:23:ec:9f:3c:8e:27:38:dc:f9:20:a3:00:93:
         c0:47:49:56:3b:60:96:d4:d6:22:23:5f:e0:ec:ba:72:e2:c5:
         69:d8:0e:e8:bc:1a:fb:55:79:b7:55:fb:16:9f:ec:94:3f:25:
         b7:16:6e:63:3d:88:7b:bf:3e:8c:34:3d:34:9c:cd:0f:20:ab:
         b6:90:98:e0:e9:f3:7a:37:1d:6f:ed:92:df:fd:ac:a7:f6:9c:
         ce:61:ea:8a:02:20:ff:59:79:3f:be:d2:68:dc:e2:72:c0:0c:
         70:ae:e1:ec:87:18:96:45:9f:d6:36:18:c8:a6:0a:2a:0e:5f:
         84:67:72:49:1b:26:3c:39:c4:b7:76:dd:e9:56:6d:29:a7:d6:
         cb:ed:82:6e:4c:6d:53:be:4a:50:9e:7b:20:b9:28:da:25:ec:
         a1:2a:df:2f:7c:41:ee:7e:f5:b1:8d:16:f2:e3:8b:21:af:04:
         c2:d1:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org