Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/130F2470115D19BF5CF7B72B9460F858B4989897.cer
File:                     130F2470115D19BF5CF7B72B9460F858B4989897.cer (raw, json)
Hash identifier:          M25D5NYAlZhpyeXdey2Q9ZUcM/+anzi2Cexdj4spGq0=
Subject key identifier:   13:0F:24:70:11:5D:19:BF:5C:F7:B7:2B:94:60:F8:58:B4:98:98:97
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2DC4286070717CF7A9C44A80894AB4CE23D9EC7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/130F2470115D19BF5CF7B72B9460F858B4989897.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 May 2023 14:12:09 +0000
Certificate not after:    Tue 07 May 2024 14:17:09 +0000
Subordinate resources:    AS: 262841
                          IP: 177.10.24.0/21
                          IP: 177.136.216.0/21
                          IP: 2804:fb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c4:28:60:70:71:7c:f7:a9:c4:4a:80:89:4a:b4:ce:23:d9:ec:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  9 14:12:09 2023 GMT
            Not After : May  7 14:17:09 2024 GMT
        Subject: CN=130F2470115D19BF5CF7B72B9460F858B4989897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:00:70:4c:66:85:2c:70:38:69:58:3e:c1:
                    a1:67:d7:85:42:9f:67:9a:68:b6:12:1a:d7:e9:e1:
                    bf:c1:43:02:c9:c7:8d:8e:07:64:41:b9:cc:9f:e6:
                    47:0f:0c:10:a0:2c:05:1b:b3:76:d3:10:d7:e6:07:
                    91:5f:20:c7:fb:d5:4d:eb:0c:40:70:83:b0:02:0d:
                    5d:55:78:77:45:11:28:2a:5f:61:42:1a:1d:ad:e3:
                    99:44:86:9f:a2:75:6c:63:9e:94:7a:18:e1:44:b7:
                    50:a1:93:e3:fb:5a:b1:a7:36:96:c3:ff:85:9f:f4:
                    8c:76:3f:00:a6:d6:a9:72:39:ee:f0:bc:a4:21:5e:
                    26:84:7c:cd:ca:b4:ef:1b:86:02:99:b8:86:59:6b:
                    94:1e:33:17:11:ef:ad:5c:c7:e7:c5:13:04:8e:9d:
                    45:40:20:5d:7a:8d:63:16:1e:51:7f:b6:7e:b3:cc:
                    31:8b:2d:ab:e1:19:68:23:d6:28:8b:5c:00:59:39:
                    0a:2b:33:44:30:6f:b7:14:58:04:86:4e:0c:ee:28:
                    38:cf:e3:31:ca:4e:3e:98:db:6d:12:91:34:00:34:
                    8c:b8:83:0e:93:48:a9:a1:91:0f:a0:d6:b7:51:06:
                    04:6c:1b:26:bd:9f:85:9d:db:a4:2c:56:77:b9:b3:
                    57:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:0F:24:70:11:5D:19:BF:5C:F7:B7:2B:94:60:F8:58:B4:98:98:97
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HMLUvn9tgWcSjVFsuG2WZspidAHjdii8gzPrwRFPF2Pn/0/130F2470115D19BF5CF7B72B9460F858B4989897.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.24.0/21
                  177.136.216.0/21
                IPv6:
                  2804:fb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262841

    Signature Algorithm: sha256WithRSAEncryption
         b2:94:52:4a:9a:5b:66:ab:74:3d:e5:11:10:fc:97:e1:41:ec:
         5a:22:82:78:a3:f4:e7:62:47:d2:ea:5b:4a:91:e3:ea:2a:8d:
         ea:4f:70:1a:be:f2:0f:a6:43:24:38:ff:84:bc:fd:4f:fc:26:
         65:0c:67:8e:69:98:37:a7:ef:2b:51:6b:bc:79:87:1b:20:98:
         46:0c:87:c0:c8:14:ab:58:23:cc:2c:38:e2:6e:15:4d:ed:66:
         9e:05:73:ae:a8:1e:46:94:ab:ba:e3:62:18:b7:47:7f:46:86:
         b0:26:4e:c5:06:26:24:a1:a4:48:2a:66:1c:d7:61:67:d8:cb:
         be:75:49:11:f7:f8:14:ac:6a:ef:43:00:e3:b9:c1:7d:5d:71:
         5b:22:c3:69:86:e5:4c:13:d6:3d:d7:0c:3f:aa:9f:b3:37:fe:
         2d:b4:98:22:2e:c4:d1:6a:b5:bd:cc:4a:03:13:af:60:1c:a2:
         bc:20:06:91:cf:dd:5f:2c:c2:71:98:19:c6:5d:eb:4f:22:76:
         21:fa:34:5d:fc:17:93:23:e9:94:63:a6:bd:97:6e:a8:97:e3:
         f6:42:7b:3e:cb:74:df:7a:31:b9:3b:8c:42:21:a8:28:3b:67:
         db:8b:5f:8d:19:71:0c:e1:dd:87:c1:3b:ff:e9:1e:64:4b:c8:
         6d:6b:26:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org