Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/14995964E3C3740848C92995AF7E386BC7102388.cer
File:                     14995964E3C3740848C92995AF7E386BC7102388.cer (raw, json)
Hash identifier:          2849SdVjCoKoO58OfMZUjGLyMnRNI1nu0mU/najFsjE=
Subject key identifier:   14:99:59:64:E3:C3:74:08:48:C9:29:95:AF:7E:38:6B:C7:10:23:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2EBD59957948FD0D9B602FD13B64B2F004A0370B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/14995964E3C3740848C92995AF7E386BC7102388.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2023 12:48:24 +0000
Certificate not after:    Mon 09 Dec 2024 12:53:24 +0000
Subordinate resources:    AS: 266917
                          IP: 45.71.140.0/22
                          IP: 2804:454c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:bd:59:95:79:48:fd:0d:9b:60:2f:d1:3b:64:b2:f0:04:a0:37:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 11 12:48:24 2023 GMT
            Not After : Dec  9 12:53:24 2024 GMT
        Subject: CN=14995964E3C3740848C92995AF7E386BC7102388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:fb:bd:80:c5:a6:7b:91:09:70:b0:89:4e:
                    13:92:bf:b6:13:63:da:94:c7:47:94:ee:1d:fe:9c:
                    5a:06:39:73:e8:64:e1:e9:62:3e:de:49:69:c1:8f:
                    10:39:9a:56:1d:46:2b:e5:8e:7e:3d:c5:1e:79:66:
                    16:1f:54:fc:0c:30:27:72:51:4c:ad:69:b7:59:e0:
                    f6:50:ab:74:1a:1e:37:47:e6:93:35:9c:f8:c4:57:
                    41:07:e9:92:79:3c:4d:cd:7c:9d:32:60:ab:37:a8:
                    3f:5a:e2:3b:ee:56:d3:19:7d:c9:2a:08:71:7d:22:
                    9f:89:b8:dc:0c:f2:34:7c:66:86:ca:2d:61:b8:32:
                    f4:7d:69:10:d7:14:fc:73:8f:23:58:1f:45:a6:5c:
                    bd:4a:2b:c0:b7:57:37:e5:d9:45:b1:80:25:28:8e:
                    af:ed:9b:7a:e8:d0:b8:8f:ec:e7:fc:ca:7c:fc:6a:
                    79:f6:4d:22:94:bd:40:ce:84:ca:c2:2f:dc:7b:49:
                    74:ad:fe:fa:88:f1:ec:61:c9:7b:8d:78:a6:0c:b0:
                    43:11:59:ae:72:ea:0d:85:5c:6e:de:67:f8:91:3a:
                    44:9c:de:4e:5b:d8:d8:d4:d0:31:04:15:2e:94:9a:
                    d5:2a:f3:78:14:20:25:da:42:b3:7b:e1:bf:f5:ca:
                    7c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                14:99:59:64:E3:C3:74:08:48:C9:29:95:AF:7E:38:6B:C7:10:23:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3XfMyyuGXJ6zvqDaSDXwNCC8ke6QQJbRSqci6RfFGmnN/0/14995964E3C3740848C92995AF7E386BC7102388.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.140.0/22
                IPv6:
                  2804:454c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266917

    Signature Algorithm: sha256WithRSAEncryption
         4d:1a:bc:fb:46:df:dc:dd:6e:42:4e:65:7b:39:ac:b3:96:e0:
         34:a2:ed:ad:c5:6a:f7:00:60:84:f5:9d:e7:90:d6:90:ef:a4:
         d8:db:18:44:5b:90:06:31:d3:cf:37:e3:41:17:95:6e:0a:8a:
         b7:ee:ba:36:be:ec:d8:4c:1f:ed:f2:d6:5d:2a:17:ea:af:01:
         ce:2f:a0:81:89:65:4a:37:5c:9e:ec:27:6e:dd:f8:47:41:6a:
         93:20:cf:22:3e:f1:6b:5d:50:c1:30:53:12:e0:99:1f:fc:f0:
         3a:bc:74:92:a4:23:2f:cc:48:46:84:ed:1b:f3:8b:3d:dd:18:
         bc:ac:2b:bb:59:c8:45:f9:b3:b8:30:75:93:c9:39:ad:73:82:
         0b:de:cb:d6:7b:44:35:0b:4d:1f:63:38:ed:c3:b5:f4:d7:15:
         d8:dc:e1:6c:e1:8f:2e:da:0a:1b:43:56:22:5b:69:14:cb:2c:
         26:ad:61:88:23:b8:58:1d:98:93:5b:e7:23:c6:3f:87:9f:8c:
         56:bc:fb:ea:ed:98:8b:3e:5d:83:e7:98:48:a3:d6:d7:1c:ef:
         0b:d1:31:e2:7a:86:4d:7b:cc:92:02:06:46:4a:2b:28:5c:2a:
         f0:5c:34:dc:3f:25:1d:41:0d:75:75:6c:3d:51:2f:ea:4d:10:
         05:4a:c7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org