Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer
File:                     142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer (raw, json)
Hash identifier:          UwZBvCMAtXbw19r7Kp1VUvvdpWieZGw5OtGIHwUi+hM=
Subject key identifier:   14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       28B3A99FC139ED4BACB59FE29C9D2161266820C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 28 Feb 2023 03:14:06 +0000
Certificate not after:    Tue 27 Feb 2024 03:19:06 +0000
Subordinate resources:    AS: 263083
                          IP: 179.106.192.0/18
                          IP: 186.233.12.0/22
                          IP: 2801:b6::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b3:a9:9f:c1:39:ed:4b:ac:b5:9f:e2:9c:9d:21:61:26:68:20:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 03:14:06 2023 GMT
            Not After : Feb 27 03:19:06 2024 GMT
        Subject: CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:00:8b:a7:04:fb:54:57:9a:f5:36:db:bb:6a:
                    c8:b3:57:6b:d2:bb:42:da:e8:ce:66:a6:b6:18:68:
                    d6:ae:1c:fa:9d:67:a7:72:34:f4:24:5e:5e:5a:d1:
                    82:3d:be:cb:af:87:9a:34:10:9a:f2:ae:74:57:c8:
                    81:6b:25:c2:47:14:87:bb:20:d0:a1:5a:ef:e2:0f:
                    03:07:df:03:0c:8f:94:ea:8e:d3:d7:5e:e2:36:92:
                    89:85:08:63:35:95:24:2b:35:79:f6:de:db:d4:24:
                    a8:16:fa:47:e7:e5:4e:be:f9:3b:65:70:15:34:7d:
                    6b:a8:4b:b3:c4:2a:bc:80:24:94:f2:e7:aa:b6:71:
                    7f:26:af:70:01:c0:e0:9a:0e:59:54:56:6a:a4:6d:
                    5b:cc:b2:3c:12:15:b3:59:48:8a:47:ed:91:01:3a:
                    e4:fc:f0:18:a8:5b:8d:1f:b0:67:06:bb:4b:cd:5f:
                    59:14:a7:1b:81:34:49:11:48:f0:da:a8:d2:f5:79:
                    b5:20:9e:d0:2a:21:68:8d:7e:99:d4:d9:af:e5:e6:
                    0e:bf:24:6e:9e:67:33:d0:28:d9:13:d6:27:b9:c8:
                    a2:87:21:90:71:56:78:ef:80:fb:92:8b:e4:1d:3a:
                    4b:64:e3:fe:37:69:1f:95:58:e5:91:e6:42:46:6c:
                    17:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.192.0/18
                  186.233.12.0/22
                IPv6:
                  2801:b6::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263083

    Signature Algorithm: sha256WithRSAEncryption
         1e:d9:50:ee:6c:98:1d:d7:22:a7:7b:9e:6c:af:56:47:d9:4f:
         21:1f:85:3a:0a:b1:6f:68:45:c8:fb:7a:7d:9b:28:2c:32:0d:
         32:92:0d:c5:41:49:aa:45:c1:88:e7:b1:84:2f:02:db:0e:46:
         26:15:e5:db:f9:38:14:fb:15:da:12:ff:54:88:25:5a:16:98:
         e3:d0:1c:b9:eb:cc:49:a2:11:d0:79:d2:ef:5c:87:da:eb:fe:
         2e:70:e8:29:91:38:a8:16:fa:22:24:74:7b:15:a8:c1:bf:90:
         1e:79:60:a7:62:d7:84:8b:36:2b:b9:97:bd:9e:ce:47:af:1d:
         f2:4c:44:ad:f3:47:4c:4f:a7:bc:7d:bd:f9:10:75:e9:ab:2a:
         56:b6:77:53:13:1c:35:01:f3:43:a9:3e:c9:ab:9b:57:2b:57:
         82:62:90:b4:ee:21:bd:78:b9:0f:98:35:f3:27:bc:67:38:d8:
         ae:b6:ba:f3:b8:98:46:be:8a:cb:77:24:c8:0c:f0:d6:ec:00:
         e0:0b:a6:d8:36:24:89:f1:b5:f9:8a:1a:1a:9b:ba:75:53:d0:
         43:af:61:ae:2d:05:57:e0:03:b7:af:67:f9:00:76:b3:00:7b:
         f6:85:9a:c9:a7:5e:56:f4:8d:84:ef:ce:d0:3d:47:e7:c5:3c:
         ad:c6:57:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org