Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer
File:                     143582F75704EEF8880AF5E444EE85042913D47D.cer (raw, json)
Hash identifier:          czW2T60KQPVPk48J2hjLkuVCe0DSRt2kuyXn8klJnds=
Subject key identifier:   14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1854EFF9E01A8DA33D093EE24B0DF40F6B96368B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/143582F75704EEF8880AF5E444EE85042913D47D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 19:41:01 +0000
Certificate not after:    Tue 23 Jul 2024 19:46:01 +0000
Subordinate resources:    AS: 52965
                          IP: 131.0.224.0/22
                          IP: 177.36.0.0/20
                          IP: 177.72.208.0/21
                          IP: 177.221.32.0/20
                          IP: 179.124.136.0/21
                          IP: 187.103.64.0/20
                          IP: 2804:3b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:54:ef:f9:e0:1a:8d:a3:3d:09:3e:e2:4b:0d:f4:0f:6b:96:36:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 19:41:01 2023 GMT
            Not After : Jul 23 19:46:01 2024 GMT
        Subject: CN=143582F75704EEF8880AF5E444EE85042913D47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1d:95:fb:a1:a8:39:1a:60:de:84:7e:e1:c4:
                    16:5e:d0:a2:d3:e6:47:7c:a2:f1:14:b5:f7:25:42:
                    3a:9b:59:db:84:25:6f:6f:1d:d6:f8:6e:19:8f:af:
                    05:2b:e7:99:d4:51:b4:f0:cd:09:92:b1:08:fa:3e:
                    41:7f:ca:fd:52:34:de:54:14:ae:cf:ff:85:67:c8:
                    5a:31:10:b9:0b:9e:65:09:8b:1f:ec:e0:30:58:1a:
                    4b:89:59:c0:a5:82:69:27:7e:b6:90:ee:e1:11:5e:
                    5b:67:d4:15:e0:e9:38:e5:bd:4e:a1:30:83:15:71:
                    20:2e:e6:bc:ce:1e:ee:da:2b:90:d0:79:43:df:f0:
                    cc:c3:f1:77:7e:9e:64:ce:08:bc:4e:9d:3b:c2:51:
                    8c:76:e5:5b:f6:3d:48:b5:26:f4:d8:b7:78:96:7d:
                    da:42:5a:8e:58:f0:e2:81:63:c2:07:49:52:82:b3:
                    4c:5f:d9:1d:47:2b:48:fb:9d:4c:3d:29:4d:4c:e6:
                    18:60:5f:23:1f:ac:a2:00:16:6d:90:76:43:d0:a1:
                    cd:16:67:11:ce:12:26:0d:05:a3:f9:f5:d6:33:fa:
                    48:1d:09:23:99:f9:14:1d:82:7d:34:65:d7:e1:57:
                    62:f4:7c:43:67:6d:b6:fa:21:3b:0a:dd:8a:79:aa:
                    a1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/143582F75704EEF8880AF5E444EE85042913D47D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.224.0/22
                  177.36.0.0/20
                  177.72.208.0/21
                  177.221.32.0/20
                  179.124.136.0/21
                  187.103.64.0/20
                IPv6:
                  2804:3b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52965

    Signature Algorithm: sha256WithRSAEncryption
         04:8f:80:22:87:dc:05:ff:5a:55:88:69:47:be:d3:f3:e2:e6:
         12:c7:23:2e:ae:65:b1:74:e0:fe:a9:e4:38:52:12:4a:1c:54:
         59:70:8c:06:f8:a1:7e:fe:66:60:e3:f3:9c:6f:99:40:4b:07:
         77:15:44:ce:e5:61:22:a2:8a:1e:b2:bc:05:64:cd:22:25:67:
         2c:55:06:d8:3b:ce:96:e6:35:20:62:28:b9:6d:ad:82:04:c8:
         31:e1:78:80:f8:19:43:7c:6b:91:13:6f:64:09:5c:77:1a:e2:
         dd:5b:87:3d:f5:56:69:83:df:c7:5f:b6:02:c8:75:0f:1d:34:
         c0:90:7d:fe:a0:2a:28:9c:2c:05:ff:57:ad:b4:16:1f:9b:9b:
         06:0d:c7:92:99:ce:e1:3d:50:18:1e:12:50:ee:77:e3:8b:4a:
         31:a4:62:6f:1c:e1:25:d8:95:0d:6b:c9:7b:c4:29:bb:b6:76:
         09:4e:73:c6:16:bd:0d:20:69:ee:fd:af:42:d7:a7:0d:3b:6a:
         a7:58:89:47:4a:46:b6:aa:81:b1:a1:33:58:3d:c5:e1:83:93:
         3b:ee:10:40:d7:fc:9b:ad:6b:f0:5b:50:af:02:a8:f3:43:a1:
         a0:a0:79:b3:2b:54:70:8a:43:ed:55:15:40:dc:64:ca:94:35:
         5f:cb:a9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org