Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0B604473C6184909FDA6E5897DA9352C78B452AE.cer
File:                     0B604473C6184909FDA6E5897DA9352C78B452AE.cer (raw, json)
Hash identifier:          j6nEhLPqQSW0pN9rKcrJJE+wlid6PjfAuOpDPE4mbss=
Subject key identifier:   0B:60:44:73:C6:18:49:09:FD:A6:E5:89:7D:A9:35:2C:78:B4:52:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2BA532FAA98F5103F0DA7534C658EB50A4B315D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/0B604473C6184909FDA6E5897DA9352C78B452AE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 20 Mar 2024 15:25:38 +0000
Certificate not after:    Wed 19 Mar 2025 15:30:38 +0000
Subordinate resources:    AS: 28667
                          IP: 132.255.64.0/22
                          IP: 143.202.68.0/22
                          IP: 168.196.108.0/22
                          IP: 170.82.56.0/22
                          IP: 177.8.208.0/21
                          IP: 177.21.192.0/20
                          IP: 177.71.0.0/20
                          IP: 177.107.0.0/20
                          IP: 177.184.240.0/21
                          IP: 186.193.192.0/20
                          IP: 186.236.96.0/19
                          IP: 186.250.208.0/21
                          IP: 187.19.80.0/20
                          IP: 187.110.240.0/20
                          IP: 187.121.192.0/19
                          IP: 189.1.176.0/20
                          IP: 189.76.128.0/20
                          IP: 191.242.128.0/19
                          IP: 2804:4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a5:32:fa:a9:8f:51:03:f0:da:75:34:c6:58:eb:50:a4:b3:15:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 20 15:25:38 2024 GMT
            Not After : Mar 19 15:30:38 2025 GMT
        Subject: CN=0B604473C6184909FDA6E5897DA9352C78B452AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3a:76:a0:71:98:da:3a:ec:ff:5e:82:be:5f:
                    aa:f8:a9:e9:76:5b:0a:4f:4e:97:d6:72:83:94:3c:
                    f5:67:0b:c8:99:9d:ac:e2:fb:f3:d6:3a:fb:7d:30:
                    f1:06:30:40:f0:bb:80:08:19:f0:89:b9:db:10:12:
                    59:de:e0:a2:59:e5:a8:88:cf:b0:31:63:cc:15:50:
                    f5:16:76:4d:d0:90:41:e0:58:a8:6f:49:9c:8b:ce:
                    29:d3:1e:8b:c5:42:49:9b:8a:d5:07:54:f7:56:f5:
                    47:c8:d8:7d:da:a1:c0:36:5b:e3:0b:eb:56:1c:80:
                    5c:24:bc:c7:1e:33:20:7e:c9:43:1d:7f:ee:bd:74:
                    34:5a:ac:34:80:b6:66:a3:ea:6b:05:7f:85:b8:30:
                    96:15:aa:9c:6c:a5:b9:7d:2e:9a:90:e4:0c:3d:42:
                    0b:0d:2f:ba:d9:9b:f3:c5:4f:ba:39:3f:d0:4f:e9:
                    0c:82:3e:36:22:ba:a0:4c:8e:76:02:0e:14:c2:cf:
                    c4:48:e0:b2:ef:e2:a8:7d:c3:c5:5f:e7:67:78:4a:
                    88:ed:31:d4:f1:bc:a0:b1:fa:f3:5e:24:8f:a8:08:
                    c4:a1:e0:a9:a6:4b:e0:e7:6d:ee:89:6a:2f:f7:2f:
                    23:dd:04:d4:f1:39:0a:1c:8f:36:a9:ce:55:4f:f3:
                    23:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0B:60:44:73:C6:18:49:09:FD:A6:E5:89:7D:A9:35:2C:78:B4:52:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/0B604473C6184909FDA6E5897DA9352C78B452AE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.64.0/22
                  143.202.68.0/22
                  168.196.108.0/22
                  170.82.56.0/22
                  177.8.208.0/21
                  177.21.192.0/20
                  177.71.0.0/20
                  177.107.0.0/20
                  177.184.240.0/21
                  186.193.192.0/20
                  186.236.96.0/19
                  186.250.208.0/21
                  187.19.80.0/20
                  187.110.240.0/20
                  187.121.192.0/19
                  189.1.176.0/20
                  189.76.128.0/20
                  191.242.128.0/19
                IPv6:
                  2804:4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28667

    Signature Algorithm: sha256WithRSAEncryption
         21:68:ce:4b:dd:cb:4a:c7:f7:d9:43:fd:73:71:b0:f5:6b:7e:
         e0:09:53:cc:7a:c2:bd:c0:0d:40:b0:96:19:4a:52:05:90:37:
         64:ae:21:b4:13:5f:c7:b7:f4:0f:4a:ab:07:3a:e4:ed:20:5d:
         87:4b:8a:80:47:0b:cf:33:58:21:27:39:05:1f:91:ec:bf:3e:
         37:ea:45:23:9a:e8:75:aa:cf:2b:ec:d7:a6:c9:28:51:81:95:
         52:08:6e:5b:9a:63:c9:4c:84:ce:95:40:dc:f5:6c:10:de:5e:
         00:73:d2:0e:bc:1e:92:da:2d:42:af:73:1f:73:c3:be:af:2c:
         0f:58:60:47:f6:63:29:c1:b9:36:63:d8:fb:0c:35:1c:10:ca:
         61:53:e1:11:1d:a8:25:6f:e6:3c:ea:f9:42:14:07:9a:9b:6b:
         12:b8:e3:46:74:de:98:01:ce:2e:9f:38:cb:64:a7:02:39:67:
         8b:97:91:0a:6f:ee:65:46:9d:00:56:9e:71:dc:35:7c:fd:b9:
         af:8b:67:a1:62:8b:b4:53:f6:7b:59:ca:4f:7a:dc:6f:b8:88:
         14:5b:b1:ad:81:cd:c1:f4:f7:9a:be:c1:ad:ca:b5:87:d6:6c:
         f4:82:b8:1f:06:ca:7d:7f:3a:0e:b8:07:ee:17:9a:5e:cb:81:
         37:fd:cb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org