Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0962570DD5E9F8E19F5C75D497CBF2B0AC5461FF.cer
File:                     0962570DD5E9F8E19F5C75D497CBF2B0AC5461FF.cer (raw, json)
Hash identifier:          NeMryuGcYlj4L80ymYZvBPC0N0//wtLTNS236An5L1I=
Subject key identifier:   09:62:57:0D:D5:E9:F8:E1:9F:5C:75:D4:97:CB:F2:B0:AC:54:61:FF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53C453AA14D8D29706027FE809D0FC8FF230C767
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/0962570DD5E9F8E19F5C75D497CBF2B0AC5461FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 08 Feb 2024 23:40:08 +0000
Certificate not after:    Thu 06 Feb 2025 23:45:08 +0000
Subordinate resources:    AS: 273713
                          IP: 2804:8b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c4:53:aa:14:d8:d2:97:06:02:7f:e8:09:d0:fc:8f:f2:30:c7:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  8 23:40:08 2024 GMT
            Not After : Feb  6 23:45:08 2025 GMT
        Subject: CN=0962570DD5E9F8E19F5C75D497CBF2B0AC5461FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b3:95:aa:9e:88:ff:68:ed:2d:a2:49:a0:1d:
                    1a:bf:2c:88:fc:8c:d7:1a:a4:14:88:93:9d:a0:40:
                    75:bb:aa:53:2c:c8:5e:5f:03:3d:18:6e:89:53:df:
                    20:38:36:e7:fc:71:72:13:bb:ae:cd:88:c0:b0:f8:
                    fe:65:a7:5d:97:bc:94:79:6f:f7:12:a8:c3:7e:ef:
                    06:40:c7:94:1a:a7:5e:30:8a:01:98:63:50:ef:b4:
                    5a:1e:b2:dd:94:22:b7:47:e0:89:6c:0a:63:e3:d1:
                    36:47:17:3d:0e:f2:da:9a:a9:72:13:90:42:44:49:
                    ba:48:a5:b1:ae:d6:75:b2:46:b3:49:53:f3:7c:31:
                    62:7e:21:7f:8d:c1:9e:74:26:7f:d5:52:a6:ab:36:
                    bd:7f:e1:42:19:9a:67:53:74:45:86:73:f1:89:2f:
                    6b:0f:9e:e3:9b:63:e1:82:61:a2:8e:3d:d4:d8:6e:
                    e6:87:06:0e:37:84:98:8c:4b:65:b5:1c:29:15:4e:
                    48:42:8b:94:8b:99:29:96:40:e9:6e:b2:4c:93:d1:
                    87:0d:59:d5:bc:15:0b:02:95:b9:63:aa:16:37:02:
                    4f:da:3e:62:9b:46:7f:64:62:53:a7:a7:89:06:3a:
                    a1:01:cb:1a:31:e3:72:c6:19:5c:56:53:39:65:19:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                09:62:57:0D:D5:E9:F8:E1:9F:5C:75:D4:97:CB:F2:B0:AC:54:61:FF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4cmTS1HcuYRBcdviJbx7YaDrDqDA8UAPFjwPK5FuUu6Z/0/0962570DD5E9F8E19F5C75D497CBF2B0AC5461FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273713

    Signature Algorithm: sha256WithRSAEncryption
         94:17:ac:d9:d2:de:e0:3b:00:22:3d:d4:90:dc:13:b3:11:c9:
         3c:10:f0:81:db:31:f4:e0:5e:2f:ec:29:2e:bf:47:8f:36:7e:
         06:3e:ad:80:39:e2:a5:18:03:1f:96:8e:15:e7:ab:fc:0f:64:
         9e:58:a7:cd:ec:3c:22:81:a9:fa:79:bb:1e:8e:11:be:a8:26:
         6c:ed:74:9e:ba:30:95:c4:83:8b:04:ba:28:12:4a:4b:0a:24:
         68:15:51:7a:9e:0b:02:c2:b7:18:3d:ba:92:4c:df:fa:1a:b4:
         85:6d:73:55:66:9d:1f:69:48:d7:b0:80:f1:2f:28:dc:85:b2:
         b5:d0:97:22:3a:81:7b:e4:46:9d:1f:ab:2b:3e:41:8e:39:16:
         12:70:d0:42:22:d5:58:c5:5e:b5:38:19:e8:10:29:6c:02:19:
         95:8d:14:ad:a4:9b:f4:ad:f1:b8:01:69:8d:a6:c0:ef:72:45:
         5d:63:3e:78:e9:97:02:d1:80:a7:be:2d:14:58:ea:67:b0:bf:
         09:09:5d:5a:83:85:7e:37:9c:4a:f3:2c:64:45:c5:2b:27:fc:
         51:d9:c9:dd:88:14:db:dc:7a:f7:16:8b:93:8d:55:48:9c:b8:
         51:cb:01:7a:00:91:57:60:4e:22:5f:94:62:b5:26:7f:1d:d5:
         1c:19:a4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org