Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/105ACBA02ADBC479CD550A7B0EF2F6FAEFD55EA3.cer
File:                     105ACBA02ADBC479CD550A7B0EF2F6FAEFD55EA3.cer (raw, json)
Hash identifier:          KJdBbVruO6MXW/+hcZR5vnzV+99ql4DaKzXoNBSwXXY=
Subject key identifier:   10:5A:CB:A0:2A:DB:C4:79:CD:55:0A:7B:0E:F2:F6:FA:EF:D5:5E:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       407372AEE1E4809FB99FCEEBEBFE9BB5D25475D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/105ACBA02ADBC479CD550A7B0EF2F6FAEFD55EA3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 14:32:34 +0000
Certificate not after:    Fri 04 Apr 2025 14:37:34 +0000
Subordinate resources:    AS: 53072
                          IP: 187.86.240.0/20
                          IP: 200.6.44.0/22
                          IP: 2804:584::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:73:72:ae:e1:e4:80:9f:b9:9f:ce:eb:eb:fe:9b:b5:d2:54:75:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  5 14:32:34 2024 GMT
            Not After : Apr  4 14:37:34 2025 GMT
        Subject: CN=105ACBA02ADBC479CD550A7B0EF2F6FAEFD55EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:6e:3a:20:9f:54:01:d3:89:90:ba:31:58:
                    00:21:27:9b:44:ac:b2:34:0b:13:f6:19:13:2e:19:
                    44:41:b0:b9:5b:2b:ad:1c:21:66:6c:a8:17:ea:27:
                    6e:3e:0f:42:af:be:bd:6a:4c:00:1c:e8:bd:d4:8c:
                    52:f5:bf:fa:59:ce:77:f0:75:1e:29:ce:e7:a8:b4:
                    ae:5e:6d:bb:e9:9c:ca:7c:67:3b:de:ed:05:38:24:
                    c2:89:97:01:45:b1:1f:81:98:f8:73:44:df:3d:09:
                    86:45:14:56:48:e5:cf:0b:11:68:35:80:2d:e5:c9:
                    f6:8f:6c:55:b5:35:36:17:74:ac:b9:c6:0d:68:5f:
                    3d:bd:df:86:ca:ce:1e:e3:3a:d8:9e:f9:5e:f9:45:
                    9f:7a:6d:b9:09:02:87:0a:a1:4f:33:b2:b8:76:8f:
                    fc:80:20:00:6d:84:57:65:9c:b1:af:9b:52:a8:93:
                    f9:54:c4:12:a1:8b:d1:bf:3f:8a:2f:6a:03:35:07:
                    57:b4:ce:6a:c5:da:80:cb:d9:7d:7a:b8:bf:1a:c3:
                    c8:09:2e:c3:ea:50:66:9c:8b:2f:38:fb:13:c8:af:
                    0b:db:57:81:3c:88:fd:bd:fc:bb:f4:54:fe:f4:34:
                    ae:01:9c:47:d4:ae:61:11:1a:56:b6:df:d6:6e:44:
                    2c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                10:5A:CB:A0:2A:DB:C4:79:CD:55:0A:7B:0E:F2:F6:FA:EF:D5:5E:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9n4jcA9ng9bnzADEygRJDt5vxjb7ymzpDH18ei1bu2KB/0/105ACBA02ADBC479CD550A7B0EF2F6FAEFD55EA3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.240.0/20
                  200.6.44.0/22
                IPv6:
                  2804:584::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53072

    Signature Algorithm: sha256WithRSAEncryption
         51:40:a5:ce:2f:1f:cc:4b:d5:9e:13:62:b3:94:29:4a:8f:c5:
         d6:84:fb:92:90:9a:9f:1d:93:d0:7d:c8:06:c3:80:79:7c:50:
         76:58:fa:77:17:36:af:27:25:78:fc:03:99:f8:ac:e5:9d:43:
         bb:bf:7a:b6:cd:7c:c9:7c:bd:ce:43:d4:64:2a:46:20:79:82:
         95:4b:7e:97:09:e4:8f:d9:da:7f:40:39:a5:a8:77:2f:b9:42:
         63:6a:01:85:a9:08:c2:41:73:a1:81:d6:46:9e:dc:63:f5:ff:
         a1:2c:b9:c8:bb:ea:c5:4f:5b:cf:51:57:48:7f:f2:85:ab:79:
         1d:65:64:d3:c5:3b:af:b6:97:64:38:21:37:10:ac:c8:f2:4d:
         4e:43:c2:64:69:a9:c6:15:46:eb:36:67:9b:cd:d2:40:3e:87:
         23:b9:6d:fe:88:6d:a1:21:ef:a9:ec:82:36:8e:00:61:a5:8e:
         c9:8e:98:d8:41:ff:6c:a7:dd:e8:ea:3d:10:aa:bb:15:73:09:
         fd:3e:fb:20:a2:dc:12:da:d2:08:5d:e4:7d:b6:6b:6d:ce:f7:
         30:52:29:2e:d4:e8:1f:a4:13:c9:3a:f0:3d:e5:9a:ee:3a:d5:
         14:ef:14:86:f4:f1:b1:ed:53:39:ef:54:59:03:62:19:a5:3c:
         b9:ba:bd:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org