Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/15A3962525A580E279BE9D590AD3C9AFBE0D46F9.cer
File:                     15A3962525A580E279BE9D590AD3C9AFBE0D46F9.cer (raw, json)
Hash identifier:          p9I+vFaIhWsETg1K8360YBuloJQRP8KZNrOg17dixgk=
Subject key identifier:   15:A3:96:25:25:A5:80:E2:79:BE:9D:59:0A:D3:C9:AF:BE:0D:46:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30B3F88FA1C42AA8D7AFB7BA9C371F1DB5F8B26D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/15A3962525A580E279BE9D590AD3C9AFBE0D46F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Nov 2021 15:05:53 +0000
Certificate not after:    Mon 28 Nov 2022 15:10:53 +0000
Subordinate resources:    AS: 262842
                          IP: 177.10.32.0/21
                          IP: 2804:7338::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b3:f8:8f:a1:c4:2a:a8:d7:af:b7:ba:9c:37:1f:1d:b5:f8:b2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 15:05:53 2021 GMT
            Not After : Nov 28 15:10:53 2022 GMT
        Subject: CN=15A3962525A580E279BE9D590AD3C9AFBE0D46F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:48:fa:24:51:27:3c:1a:57:e6:bf:e9:d1:
                    1a:2d:96:6b:33:91:99:e8:9c:34:34:fd:6e:29:89:
                    89:48:5a:8f:e7:b9:75:6d:fb:f3:28:64:60:30:99:
                    e7:08:cd:43:40:b2:90:c8:e6:71:fe:06:d3:e7:bf:
                    f7:03:ad:1e:98:5b:a1:1e:70:fa:4d:1e:b3:ef:52:
                    c5:d9:61:08:23:e7:8d:0d:80:76:99:18:83:3b:56:
                    e5:9f:68:5f:55:51:44:ac:bb:01:ee:00:f5:61:11:
                    bf:00:95:60:8c:82:7a:12:9c:88:11:3a:8b:d7:37:
                    47:b2:30:c3:a2:f6:80:1b:01:b8:b2:dd:f9:11:9c:
                    89:49:f3:2b:f2:2a:ed:79:77:63:bb:5a:b2:05:a3:
                    6d:19:25:71:8a:68:d5:04:71:bc:46:8c:19:0e:a8:
                    5f:e5:27:a7:4e:d1:79:cf:df:d0:1e:c2:78:49:84:
                    f3:75:38:be:95:37:f5:ea:7f:70:aa:72:97:2c:48:
                    59:5c:a4:61:51:e9:86:8c:81:65:e5:2f:0c:23:93:
                    d7:8b:ba:dd:a5:fe:eb:fd:31:a7:79:84:db:0d:f7:
                    33:13:92:12:ea:3f:2d:e7:02:a1:9a:80:e2:cf:63:
                    67:e3:4d:ea:fa:2f:88:f1:cb:42:50:c0:61:2e:8b:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                15:A3:96:25:25:A5:80:E2:79:BE:9D:59:0A:D3:C9:AF:BE:0D:46:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4ZTDHniW5Ju8wypiefuiaKv6mmi6NPfrZKMf2pDLnwn3/0/15A3962525A580E279BE9D590AD3C9AFBE0D46F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.32.0/21
                IPv6:
                  2804:7338::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262842

    Signature Algorithm: sha256WithRSAEncryption
         71:62:c3:e0:d6:50:53:98:6d:d8:71:95:14:17:6e:b9:ee:d8:
         af:75:ad:0e:38:c9:8a:89:c5:1c:25:6b:70:e1:f0:9f:20:f8:
         32:57:f7:a8:0c:76:e7:82:1d:77:fe:fa:87:b2:93:7a:51:c4:
         4a:c9:48:cb:3a:b7:33:d8:d4:b3:7c:3a:5b:a1:3d:96:51:50:
         0b:73:52:32:6f:0e:b4:26:4d:43:49:a8:35:7e:9f:95:ef:a5:
         ca:79:3e:90:3d:58:2b:c0:a3:ff:42:0e:37:f4:c0:73:39:3b:
         4e:1c:76:b2:89:dd:c4:9b:78:ad:ee:d2:3d:c6:6b:b8:31:a0:
         38:9c:2e:3f:26:56:3d:8b:c0:f4:9c:c7:aa:c2:a0:9a:01:b8:
         30:a9:db:d8:e5:4a:ac:f5:07:e5:aa:c0:24:4d:07:bf:fa:cb:
         f6:48:72:1b:82:57:77:8c:93:e1:c8:27:81:94:69:b6:79:45:
         5c:e1:69:39:3e:15:a4:19:17:74:c5:08:1f:7b:93:9e:39:e6:
         65:10:f8:96:fc:36:cc:d5:fa:0d:84:62:ed:92:e4:c0:91:aa:
         31:c8:89:f3:71:a9:c8:63:cf:4c:d3:a1:30:99:a3:3d:53:51:
         5f:86:31:ff:97:66:7b:cc:a2:ca:18:c5:a8:c0:b0:4d:db:07:
         85:42:ec:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org