Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer
File:                     128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer (raw, json)
Hash identifier:          V0Vpz6+iHyO6or+Fbey3zHhaXyAwf63gwerotRedDeU=
Subject key identifier:   12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       76E1D78BA6A22620B703D33414B77998CCD63860
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 20:24:16 +0000
Certificate not after:    Thu 30 Jan 2025 20:29:16 +0000
Subordinate resources:    AS: 268938
                          IP: 45.174.10.0/23
                          IP: 2804:5ce8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:e1:d7:8b:a6:a2:26:20:b7:03:d3:34:14:b7:79:98:cc:d6:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 20:24:16 2024 GMT
            Not After : Jan 30 20:29:16 2025 GMT
        Subject: CN=128E6FAF19CE8C823CD70DA58CEF1F1B54332142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c3:85:24:de:2d:a5:a8:f2:7f:fe:35:fa:83:
                    73:b0:02:8e:95:00:02:3a:fd:d8:cf:69:7f:ca:a2:
                    67:3a:db:22:a2:ff:0f:a5:e7:c4:62:4f:8a:56:30:
                    5c:ea:64:c0:76:06:d9:d2:ef:f0:d6:35:bc:a7:f4:
                    1c:b1:3e:8e:8c:f0:37:d4:a2:29:c4:8b:05:0f:42:
                    9e:e0:98:ec:04:19:08:e6:9f:d3:d1:5e:50:9b:6b:
                    6b:f8:8d:c3:b2:42:27:65:1b:49:fa:2d:9a:cf:ee:
                    55:a6:41:df:7d:24:11:bf:04:4f:f7:c8:a7:81:df:
                    6d:50:91:ca:53:e6:29:41:7b:01:98:0e:55:3e:ef:
                    35:29:5a:18:35:7b:88:8e:a6:b2:54:81:2d:5b:de:
                    6b:42:67:90:b1:58:06:3e:57:46:92:17:24:55:6f:
                    bb:bd:69:29:fb:cd:dd:99:49:d2:fb:19:07:53:7c:
                    0b:fc:d2:7d:b0:83:a4:f5:7b:c0:81:a1:50:05:bf:
                    56:33:0d:0c:fe:df:22:56:51:e0:fd:54:2d:7b:03:
                    97:aa:40:b9:e3:f8:94:93:1f:e7:25:00:63:65:88:
                    92:10:c6:f0:17:a0:c9:4c:ab:8d:4b:20:30:45:f7:
                    9a:28:ca:7d:b1:cf:1f:52:ef:42:16:24:be:8e:70:
                    36:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.10.0/23
                IPv6:
                  2804:5ce8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268938

    Signature Algorithm: sha256WithRSAEncryption
         5d:8d:4a:c0:79:9b:45:58:f4:a2:4e:11:64:80:51:ff:17:53:
         42:51:e8:f5:d3:5d:5f:4a:18:42:6f:69:7b:5e:a7:9e:06:1d:
         ee:16:b3:b9:15:df:43:41:a8:9b:b9:d0:19:aa:86:a8:05:c5:
         29:6d:be:1f:d1:c1:17:af:47:c9:f2:46:72:ac:25:50:c2:38:
         e7:b9:15:67:1f:b9:79:f7:0c:c3:21:96:b4:21:eb:d5:33:7e:
         8a:b7:9e:36:a7:8c:0d:57:b5:c2:1f:4d:c3:7f:78:be:0e:32:
         a0:8b:9d:64:df:c7:ea:e9:a8:83:dd:29:b5:11:08:a9:31:4d:
         db:f6:2c:7d:43:94:a9:98:fd:0e:f9:38:89:ca:fe:59:c8:1c:
         4f:2b:f1:b5:aa:22:15:f3:bc:71:56:44:22:b3:1b:f9:e4:86:
         79:ee:b5:2f:6c:ae:5f:29:9d:11:ce:3b:bd:72:89:c9:8b:ca:
         82:09:50:bf:71:58:91:1a:4d:cd:73:ec:98:ee:96:43:a0:16:
         71:ba:f4:d0:50:7d:8f:50:4c:eb:02:06:c7:31:63:0a:cf:7c:
         1f:25:c2:8e:47:73:13:a9:0d:2a:03:a2:9d:43:ef:97:19:e6:
         ef:c6:93:77:32:02:9e:a4:7a:f0:d2:81:95:9b:2b:41:78:b3:
         6a:01:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:36 2024 by rpki-client on console-ams.rpki-client.org