Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/13422013BE43E0A8A2F3B9F26A020D02A4855349.cer
File:                     13422013BE43E0A8A2F3B9F26A020D02A4855349.cer (raw, json)
Hash identifier:          HkxNlLjxhcjJmg760BLKVZEJKvDTvRi8IwzafwIQPCU=
Subject key identifier:   13:42:20:13:BE:43:E0:A8:A2:F3:B9:F2:6A:02:0D:02:A4:85:53:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       371E65239C07D727C1C03918DB4DDA855F85D842
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/13422013BE43E0A8A2F3B9F26A020D02A4855349.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Sep 2023 10:06:32 +0000
Certificate not after:    Tue 17 Sep 2024 10:11:32 +0000
Subordinate resources:    AS: 263089
                          IP: 168.195.232.0/22
                          IP: 186.250.24.0/22
                          IP: 2804:2a60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:1e:65:23:9c:07:d7:27:c1:c0:39:18:db:4d:da:85:5f:85:d8:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 19 10:06:32 2023 GMT
            Not After : Sep 17 10:11:32 2024 GMT
        Subject: CN=13422013BE43E0A8A2F3B9F26A020D02A4855349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f8:46:00:ef:64:43:7a:15:65:2d:7c:a3:36:
                    c2:c7:f1:3c:d0:65:fb:dc:da:3a:93:92:9f:c3:a1:
                    26:c9:f8:f9:85:55:d5:0d:4b:a2:1f:eb:a3:c9:8d:
                    c0:ff:5c:5e:67:4a:5c:e0:5e:ed:3a:71:b3:2c:20:
                    30:c2:c6:91:be:b3:9b:df:2b:0a:a6:f1:96:a3:fd:
                    b5:b3:04:98:66:8b:f0:cc:0f:3e:d1:08:8c:d1:d4:
                    71:77:02:66:aa:71:66:96:a4:42:8a:26:68:3c:2b:
                    c4:a0:0a:3b:7c:38:4e:ed:86:08:8f:2c:fc:44:9c:
                    cf:8c:41:6d:2f:b6:13:2d:c3:a0:f2:c5:40:4f:08:
                    27:69:0a:96:d7:b4:aa:f5:54:69:72:ce:27:a7:f4:
                    0b:6a:5c:98:3f:48:fe:6c:f2:85:98:61:1f:c0:c3:
                    47:b5:d5:e5:d6:09:92:f1:2e:12:a0:12:dc:19:32:
                    de:4f:d1:1a:1d:00:9e:16:a5:76:31:25:76:6b:6b:
                    eb:ef:15:9f:cf:0c:7e:aa:cf:87:b0:a4:75:34:ef:
                    cc:a8:23:1c:c3:9d:8e:55:df:78:89:fd:a6:56:2b:
                    5e:ff:48:4e:e9:39:24:3e:b6:ea:ee:03:92:9f:a3:
                    9a:6a:24:29:c0:60:6c:ef:7d:2d:d3:65:c3:56:81:
                    0e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                13:42:20:13:BE:43:E0:A8:A2:F3:B9:F2:6A:02:0D:02:A4:85:53:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FAtTXjvrsoSZEfqpgQx65FcGnaco1ENgZmQgFf9BKXQL/0/13422013BE43E0A8A2F3B9F26A020D02A4855349.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.232.0/22
                  186.250.24.0/22
                IPv6:
                  2804:2a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263089

    Signature Algorithm: sha256WithRSAEncryption
         62:84:22:68:54:fc:20:1c:a4:a1:68:c6:d2:a1:0f:76:33:b3:
         25:a8:b2:ba:11:47:21:14:03:4b:f9:d1:f2:22:80:59:b5:af:
         3f:cf:16:ec:53:e3:e5:59:f4:3d:ac:22:0a:aa:fa:5b:03:b2:
         61:7a:35:09:70:1a:67:c7:fe:26:53:88:31:7d:47:80:30:5b:
         c7:e1:17:90:3f:80:50:87:a1:f2:3b:81:91:31:d3:08:48:d2:
         80:4a:e9:0a:b7:3f:06:70:08:f6:9a:1d:2b:eb:e0:83:07:db:
         fd:0e:0c:ed:25:ca:dc:e4:eb:70:53:26:f5:35:70:ae:11:7e:
         9c:52:53:e8:16:f0:a4:6f:9a:b7:3a:88:a4:5b:2d:50:5f:5f:
         a8:c6:ad:71:64:6d:f8:86:b1:e3:46:eb:ae:59:7e:fd:6c:fc:
         81:71:ef:0f:2f:33:83:cf:2b:53:84:96:9b:ce:9f:c1:2f:92:
         0c:ea:68:02:c0:4e:bd:4a:4f:cb:1c:72:60:89:b2:ac:95:db:
         25:08:f3:e2:a4:3f:c1:f0:7e:6a:7b:ec:8a:4d:c7:9c:41:cf:
         6a:cb:70:b9:a7:ea:f4:40:a5:e3:78:23:c9:1a:69:62:41:35:
         26:62:3f:a1:af:95:02:c5:ae:f6:c1:1f:e8:4d:28:b4:7f:fa:
         6e:8e:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org