Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/143369A8462926C767FB72021BA92477A0B3D307.cer
File:                     143369A8462926C767FB72021BA92477A0B3D307.cer (raw, json)
Hash identifier:          Qdm1N3IdxrVwMG+OIFvyEOD0o9LNP0vQfbuGyClURP4=
Subject key identifier:   14:33:69:A8:46:29:26:C7:67:FB:72:02:1B:A9:24:77:A0:B3:D3:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32FBE09360A95C63802704BDD077A91221AC7308
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/0/143369A8462926C767FB72021BA92477A0B3D307.mft
caRepository:             rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 10:59:47 +0000
Certificate not after:    Thu 11 Jul 2024 11:04:47 +0000
Subordinate resources:    AS: 268781
                          IP: 45.172.236.0/22
                          IP: 2804:5a90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:fb:e0:93:60:a9:5c:63:80:27:04:bd:d0:77:a9:12:21:ac:73:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 10:59:47 2023 GMT
            Not After : Jul 11 11:04:47 2024 GMT
        Subject: CN=143369A8462926C767FB72021BA92477A0B3D307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:08:9b:28:cc:f0:7e:b7:db:69:f5:00:a8:fc:
                    e5:bd:89:47:da:7c:c4:8f:2c:30:28:b0:83:89:a1:
                    72:c4:8a:19:dd:34:a0:af:c6:1d:64:1d:26:de:d0:
                    6f:6b:55:99:23:55:7c:af:cd:57:60:f8:8b:bc:d1:
                    67:5e:89:aa:d6:cd:14:1a:f8:cc:ec:49:20:26:af:
                    b2:1b:42:40:fe:7d:9c:8b:98:56:49:12:30:51:da:
                    97:62:2b:09:22:d1:76:be:da:40:67:81:fb:94:4d:
                    61:c2:19:54:21:c3:4a:fd:61:5d:61:dd:ee:11:27:
                    13:e3:65:d3:a3:ff:a8:d9:84:6f:7f:66:37:3d:11:
                    fa:2e:bf:28:78:6c:71:2d:43:cf:b1:e1:93:de:f7:
                    98:1e:43:ea:fa:15:ed:f3:63:3b:dd:93:4e:19:56:
                    2d:ea:f0:bd:68:e7:dc:af:bb:ad:81:aa:b5:43:5e:
                    8f:5a:5d:d7:64:d4:2c:b7:6c:37:bc:31:3f:fa:e0:
                    b7:9b:63:f4:7f:66:e6:4f:63:36:24:8f:82:1d:22:
                    2d:78:ed:e5:ad:c1:9c:f4:d6:f0:7c:2d:75:c1:32:
                    ff:ff:26:23:1e:5f:dc:ed:c9:fb:98:39:20:f8:4a:
                    0e:ba:99:6f:a0:c6:e5:ca:a0:7b:e6:82:4f:94:0a:
                    22:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:33:69:A8:46:29:26:C7:67:FB:72:02:1B:A9:24:77:A0:B3:D3:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/WYgSZv8DUMrZVQXe7wf8z223MfN5tHjHrgeaRe5zp3r/0/143369A8462926C767FB72021BA92477A0B3D307.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.236.0/22
                IPv6:
                  2804:5a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268781

    Signature Algorithm: sha256WithRSAEncryption
         54:c5:7b:16:25:fd:c2:14:d4:1c:b6:7b:3d:c0:b6:48:a4:b7:
         ba:3c:0f:02:c7:9d:02:fa:d6:0f:bc:12:27:76:20:c0:b5:e7:
         5d:25:c1:8b:4a:1c:f7:d8:2e:ef:b0:08:20:40:52:b1:45:0b:
         c6:62:d0:71:a2:5a:db:e8:ae:55:8f:80:b3:a4:cc:fe:63:0d:
         fb:d9:d1:03:a5:79:b6:34:a6:8b:ea:f9:2d:9d:fb:7b:52:dc:
         4a:d1:b1:d9:b9:db:27:61:75:9f:61:38:da:76:56:87:7c:10:
         18:b6:34:2e:aa:ce:59:43:39:e0:14:5e:7b:bd:bc:32:80:bf:
         62:eb:e5:3a:0d:7a:6b:4e:67:a6:3e:c3:63:0a:2b:9b:04:fe:
         62:5b:dd:2a:dd:6d:21:9d:67:6d:dc:18:a9:74:12:e0:b0:e0:
         d5:d1:45:4f:ba:6e:3d:ec:b8:84:0f:42:01:6b:52:ce:50:3d:
         c6:90:d5:19:15:65:40:65:14:4c:c9:33:b5:35:57:67:2d:02:
         6b:a9:c8:6b:5d:a2:e5:4b:73:60:43:17:2f:99:45:04:46:45:
         86:54:fd:c1:e5:63:e3:ef:11:67:d9:dd:9b:be:79:1d:65:38:
         f6:14:c3:bd:e9:ae:a4:cf:6a:1e:0e:e1:bd:6e:71:87:ea:0b:
         de:e3:af:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org