Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer
File:                     0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.cer (raw, json)
Hash identifier:          IkqKmQ9HMOXuAa8f2VJocw+CatZpqedV0DkB0EcqFQU=
Subject key identifier:   0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       377F98BCB81E49A8CED5374323BD4703C73027CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 17:04:17 +0000
Certificate not after:    Fri 07 Feb 2025 17:09:17 +0000
Subordinate resources:    AS: 263614
                          IP: 168.232.220.0/22
                          IP: 177.23.108.0/22
                          IP: 2804:1004::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7f:98:bc:b8:1e:49:a8:ce:d5:37:43:23:bd:47:03:c7:30:27:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 17:04:17 2024 GMT
            Not After : Feb  7 17:09:17 2025 GMT
        Subject: CN=0C4C2F81C99B5D1FE7D42B7598E302474D31C83B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b1:21:29:42:d3:97:71:f7:6b:42:3f:75:26:
                    ce:94:81:25:0a:cc:17:77:c0:5e:fe:6c:09:df:64:
                    8d:e5:b5:05:77:6e:2c:8d:da:52:87:2a:2f:51:df:
                    01:ec:12:f6:64:60:1f:ee:0f:1f:c5:43:c9:6c:66:
                    8f:28:9d:35:95:17:dc:19:6f:95:87:46:a5:80:0f:
                    da:bb:ba:ab:6d:71:d4:c3:ab:77:c6:57:0d:f0:b7:
                    4e:6c:6b:12:bc:bd:13:f7:ff:ff:99:7a:18:4e:cc:
                    f8:dc:d7:84:e2:27:b3:a1:15:4c:d3:65:36:b3:79:
                    92:30:71:63:79:d8:da:d8:19:4e:7a:6a:ca:cb:33:
                    49:89:74:14:45:4a:6b:5c:28:58:10:c1:f8:4b:52:
                    89:a9:7c:a1:cd:64:f0:c9:a4:68:24:92:98:3e:94:
                    c1:12:eb:c0:1a:91:cc:41:96:da:8d:39:6a:21:2d:
                    a2:c4:b7:27:06:32:02:10:66:a3:4d:f3:04:d7:67:
                    ce:95:a5:f7:45:de:b7:f8:fd:6a:b8:c4:5a:7e:5d:
                    9c:44:39:42:62:4a:e9:2f:3c:5e:a6:db:59:d2:25:
                    f6:ee:0b:a4:02:cb:1c:bd:36:f0:f9:a3:b6:d9:9e:
                    72:a3:8d:e9:67:a4:1a:f0:9e:6a:b5:3f:93:00:4e:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0C:4C:2F:81:C9:9B:5D:1F:E7:D4:2B:75:98:E3:02:47:4D:31:C8:3B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Z4PjjPug2dbrNamb5fm1LgN5LiPQ9BYaP5Uu3nYJj8u/0/0C4C2F81C99B5D1FE7D42B7598E302474D31C83B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.220.0/22
                  177.23.108.0/22
                IPv6:
                  2804:1004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263614

    Signature Algorithm: sha256WithRSAEncryption
         4e:16:9a:26:8f:b5:74:28:6c:ad:a5:95:1e:c8:d7:9e:1e:4c:
         1f:58:fe:2e:c6:d4:ed:22:2d:77:4e:ac:c6:c5:e0:20:fe:32:
         79:03:29:43:8a:f7:89:4a:36:a6:3c:84:1a:25:9e:22:5c:9c:
         89:47:cb:8d:d8:8b:b8:58:14:31:47:a7:06:de:69:34:2d:1b:
         42:06:ec:ff:2a:40:78:50:8d:c9:64:cb:43:eb:47:74:19:67:
         f5:64:01:09:36:43:b3:08:70:68:80:79:c2:e1:85:75:d2:f3:
         7f:60:d6:83:c9:28:4f:71:99:d1:02:d7:42:53:92:b2:66:9e:
         fd:df:ea:4c:77:11:ad:aa:09:d4:25:dd:dd:4e:5b:47:6f:2c:
         85:83:5a:fe:58:0d:31:a1:f9:db:0a:91:cf:79:0e:f6:c2:ba:
         63:11:2e:74:96:38:6c:04:fe:75:56:6f:8d:25:d3:29:ae:b9:
         5c:21:d7:b2:d9:0a:15:10:a0:ef:e2:6d:ce:11:fa:e5:ef:9f:
         e7:96:20:7b:ab:52:7b:d3:42:be:45:d2:d8:26:8c:8f:2c:80:
         31:c2:eb:cd:da:f0:c7:50:82:7f:48:2e:6a:b5:f3:b6:b6:92:
         65:8f:0e:93:d0:20:9d:27:a9:ca:dc:40:3a:99:6f:55:c1:2f:
         ca:d8:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org