Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.cer
File:                     0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.cer (raw, json)
Hash identifier:          bl1B4AOl84lClrfAZikm73DATK221PcmS8ZosrPFcww=
Subject key identifier:   0E:F3:36:B7:D8:DD:0F:B8:47:86:8A:54:C9:C2:42:AF:4D:8D:60:39
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       27A44AC416F8FCF3B2ED1C0F69042A32DEA5B01E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.mft
caRepository:             rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 18:02:50 +0000
Certificate not after:    Thu 13 Feb 2025 18:07:50 +0000
Subordinate resources:    AS: 263980
                          IP: 45.232.200.0/22
                          IP: 138.255.244.0/22
                          IP: 168.227.16.0/22
                          IP: 170.245.120.0/22
                          IP: 191.37.7.0/24
                          IP: 2804:28c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a4:4a:c4:16:f8:fc:f3:b2:ed:1c:0f:69:04:2a:32:de:a5:b0:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 18:02:50 2024 GMT
            Not After : Feb 13 18:07:50 2025 GMT
        Subject: CN=0EF336B7D8DD0FB847868A54C9C242AF4D8D6039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:aa:14:0e:80:b4:70:0e:e2:31:99:18:7f:
                    d5:6d:4a:03:b0:e3:74:d3:b5:55:15:0e:06:ca:11:
                    ce:6d:bd:aa:0d:22:4e:09:43:67:d7:fe:65:88:79:
                    db:34:bb:2b:5a:a1:57:f6:99:f7:c9:1a:7e:f9:f8:
                    b2:4b:35:62:62:4e:16:bd:48:8b:55:1a:1b:2e:35:
                    72:fb:0d:6e:78:0f:00:18:f1:31:dd:cd:55:3a:cd:
                    2e:6e:6a:53:d2:d1:e3:fb:4f:66:01:9f:bb:74:88:
                    a9:5a:96:a1:32:4f:35:73:15:37:09:2c:48:f2:29:
                    aa:0b:a7:e2:ce:f1:6a:56:da:84:6c:e2:17:9c:9e:
                    2c:9f:66:42:5a:c1:8b:de:46:bc:24:fd:c8:52:cd:
                    02:ab:72:f4:e1:c5:a0:87:54:cb:10:b6:d0:61:52:
                    45:e8:f6:17:00:15:63:c4:98:67:83:93:56:03:29:
                    b1:94:d0:56:4d:93:98:9a:84:78:1b:89:bd:3d:c1:
                    6c:f6:88:22:7e:c0:c0:d3:fe:c8:08:70:26:e1:36:
                    d6:40:fd:59:52:30:78:1c:6a:6b:f6:83:74:0b:4d:
                    79:c2:f7:05:24:f9:7f:a5:5a:f3:e2:a8:23:58:cf:
                    11:dd:f1:27:fe:27:19:b6:6a:38:7f:f8:44:12:01:
                    7d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                0E:F3:36:B7:D8:DD:0F:B8:47:86:8A:54:C9:C2:42:AF:4D:8D:60:39
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/25WGeMUgekHJd873ZgHdcJ99sWDnYQzVmJyUrNPPtD9S/0/0EF336B7D8DD0FB847868A54C9C242AF4D8D6039.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.200.0/22
                  138.255.244.0/22
                  168.227.16.0/22
                  170.245.120.0/22
                  191.37.7.0/24
                IPv6:
                  2804:28c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263980

    Signature Algorithm: sha256WithRSAEncryption
         9c:c3:10:7e:3a:2a:d5:07:70:41:92:24:0a:5b:86:64:ba:be:
         50:42:67:25:72:02:f3:cf:f5:9f:8b:65:7f:7e:ed:92:f4:42:
         71:b6:a3:52:5c:1b:9b:1d:c0:e9:1d:9e:ab:2c:00:a8:d4:a3:
         64:8c:4d:54:e3:db:30:80:66:f2:d6:cc:43:ec:59:38:7d:13:
         45:fa:37:98:6b:75:44:c9:19:9e:ad:b4:af:ce:79:5f:e7:67:
         eb:10:2e:9c:63:bf:43:43:c7:50:08:a3:31:db:c7:e7:24:fd:
         61:35:75:95:bf:35:b4:c7:55:64:8d:5f:56:53:cf:32:3e:43:
         e0:64:80:0f:76:b1:fd:95:65:03:9c:04:c2:01:65:a0:97:8f:
         45:96:64:f0:29:25:e5:f6:e9:3a:31:d8:c6:58:5b:9e:03:4a:
         71:53:f2:2c:ed:37:d2:25:32:9c:96:2f:bf:7c:d7:b8:51:94:
         e5:a9:18:c2:a7:ab:13:07:13:17:01:0c:dc:4e:04:52:7e:64:
         b6:44:f0:92:02:91:2a:89:38:bb:b4:c7:37:3e:fc:05:0f:46:
         87:d6:81:2e:fa:48:cd:ba:8b:92:2e:d2:dd:d5:9c:58:03:6c:
         4e:7f:eb:f6:d5:e7:3d:29:88:d2:12:d2:33:8b:6a:02:c9:b7:
         a4:a8:1f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org