Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/154E613ED504333D29B7BC5D9743A9D63FB0B2C2.cer
File:                     154E613ED504333D29B7BC5D9743A9D63FB0B2C2.cer (raw, json)
Hash identifier:          rTOmI2l2wuMoONnKliHFdg9ruMQgXNONM1eCpqIFvyE=
Subject key identifier:   15:4E:61:3E:D5:04:33:3D:29:B7:BC:5D:97:43:A9:D6:3F:B0:B2:C2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3671B2C7DFEF00EE3A4E94E01FC88AB7A252FBFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/154E613ED504333D29B7BC5D9743A9D63FB0B2C2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Dec 2022 15:45:13 +0000
Certificate not after:    Wed 06 Dec 2023 15:50:13 +0000
Subordinate resources:    AS: 28232
                          IP: 189.127.32.0/20
                          IP: 2804:7ed8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:71:b2:c7:df:ef:00:ee:3a:4e:94:e0:1f:c8:8a:b7:a2:52:fb:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 15:45:13 2022 GMT
            Not After : Dec  6 15:50:13 2023 GMT
        Subject: CN=154E613ED504333D29B7BC5D9743A9D63FB0B2C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:d5:7b:2d:c8:56:33:cc:33:32:4b:fa:53:
                    02:64:ae:31:56:a3:ec:f1:e4:82:64:f1:82:ea:98:
                    10:33:05:13:d3:6c:cf:23:0c:9b:c8:18:6d:72:26:
                    e5:28:d5:a4:90:aa:20:6b:03:d7:db:dd:b0:c5:9a:
                    98:75:e9:2b:11:21:be:e8:6e:d9:37:02:03:0b:aa:
                    be:25:22:73:ef:e7:8e:8f:a4:32:44:fc:f8:8e:40:
                    14:88:18:4a:cb:6e:f4:81:ca:5b:18:4d:ee:64:e8:
                    a8:ea:b7:40:d6:c7:e7:6b:cc:3a:51:69:b5:db:b3:
                    d5:7e:ab:3d:aa:0e:ce:7f:61:b4:58:cf:fd:66:94:
                    af:d1:b8:f8:b0:a5:d0:88:ca:e9:45:b9:b1:34:b0:
                    63:95:94:f4:88:1e:82:e8:9d:75:38:22:eb:d9:df:
                    ba:a7:68:78:dd:57:26:51:00:23:dd:cd:e7:c8:1d:
                    92:04:3d:4f:c9:a3:75:09:28:aa:f2:3e:a5:77:42:
                    19:d4:10:bd:c4:f3:fa:07:d9:85:72:6a:9d:48:1b:
                    eb:ca:d5:53:4d:15:ba:8d:01:e7:44:01:7a:9e:01:
                    b4:26:26:b6:5c:f2:5e:1e:40:a0:89:4a:e8:29:d3:
                    d9:4e:55:4e:bc:9d:f2:ea:3e:22:1a:f2:9b:d8:cc:
                    3d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:4E:61:3E:D5:04:33:3D:29:B7:BC:5D:97:43:A9:D6:3F:B0:B2:C2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7ZexdsxgF49LD9Cm4XbcRQguNP57rREG15nHB3LHugzZ/0/154E613ED504333D29B7BC5D9743A9D63FB0B2C2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.32.0/20
                IPv6:
                  2804:7ed8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28232

    Signature Algorithm: sha256WithRSAEncryption
         b8:3f:e1:81:91:cd:dc:e3:f8:37:ce:b0:eb:7e:ee:97:7c:6c:
         53:a5:df:27:91:9f:12:d2:06:93:12:bb:48:f0:ec:f1:8c:f2:
         0a:27:60:e9:ad:0f:07:71:96:53:a1:44:76:95:ea:c5:f8:b7:
         9e:dc:90:ae:20:24:30:e3:b1:9b:87:cc:67:91:df:58:ea:d2:
         ad:49:11:00:97:49:2e:50:ef:0b:92:fc:ad:2e:55:86:4f:84:
         d5:bf:de:01:b0:29:c3:42:c6:93:66:15:5c:2a:7c:2c:8b:55:
         a0:e2:26:55:9d:6f:30:76:f3:79:27:36:13:f7:8e:ea:d5:c6:
         83:03:3d:23:8f:22:05:ee:bf:3c:76:24:82:1f:3e:7c:29:cc:
         0d:e7:6b:ae:e1:04:2a:d0:3a:17:12:80:cf:cf:1b:23:60:f6:
         72:c3:0b:4f:e6:e1:ed:62:99:df:88:61:02:0a:bd:84:1f:1e:
         1d:d2:21:06:0e:71:b4:72:fa:38:b8:46:54:02:9b:1d:66:32:
         c5:d4:ec:dc:00:70:8f:dc:1e:d2:df:14:a0:b9:1f:92:82:28:
         00:d8:e0:4a:b5:03:8d:04:13:47:e1:ae:de:0c:ed:66:56:d5:
         ee:66:1c:59:0d:a8:a1:40:4f:5b:4e:61:42:96:18:a0:a5:ab:
         a4:e6:76:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org