Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.cer
File:                     1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.cer (raw, json)
Hash identifier:          gAhDE0EQF+n91Kxkv/NlH+eisFvQz69aHw7OBvmkICE=
Subject key identifier:   16:54:C6:91:18:D9:AB:EA:0E:ED:EB:FD:99:B8:4C:5E:C5:08:3F:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18585F2FA8F62B6A672F3D31F3523CDCE7C4443C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 May 2022 16:54:31 +0000
Certificate not after:    Mon 01 May 2023 16:59:31 +0000
Subordinate resources:    AS: 262288
                          IP: 177.154.160.0/20
                          IP: 191.6.32.0/20
                          IP: 2804:13b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:58:5f:2f:a8:f6:2b:6a:67:2f:3d:31:f3:52:3c:dc:e7:c4:44:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  2 16:54:31 2022 GMT
            Not After : May  1 16:59:31 2023 GMT
        Subject: CN=1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3b:86:fa:5b:6c:3f:41:74:30:62:eb:69:76:
                    c7:58:a6:6a:d1:fe:90:53:96:57:52:57:aa:01:8a:
                    1d:98:2c:6b:cb:86:a6:97:6f:7c:3b:64:5b:13:33:
                    f4:4c:1a:3f:5a:ae:e7:a0:d0:3f:e0:af:90:7f:02:
                    ff:80:48:65:41:36:5a:99:5f:ba:12:48:7f:5e:37:
                    74:e3:66:74:77:2c:0f:6a:31:67:1d:14:38:11:38:
                    b5:b0:43:7d:b1:e9:4f:63:ca:fc:31:f9:6b:6b:c7:
                    1e:eb:21:c6:fb:a9:99:d3:47:49:83:41:82:16:e4:
                    ff:ac:4c:1b:ca:01:aa:d3:fa:06:bc:ef:24:fd:5f:
                    df:06:5b:ef:e1:6d:ef:e1:ed:05:e0:e6:26:2e:b0:
                    b6:72:72:7e:94:dc:22:52:cb:8b:5e:69:2d:af:4e:
                    54:65:c4:94:df:44:2f:44:fb:7c:e5:ff:60:da:32:
                    87:58:51:f3:7a:db:18:bd:94:a6:22:a5:11:a1:d7:
                    b2:21:74:c4:ff:06:99:9b:79:aa:e1:c0:d2:cd:b3:
                    e3:c8:ef:08:4b:be:55:29:f0:6a:3b:f4:b8:47:36:
                    5f:32:4f:38:df:16:18:01:2c:e4:ac:e1:a4:7c:3a:
                    ea:92:0b:72:05:e4:b7:2b:97:69:a4:49:b6:6a:6d:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                16:54:C6:91:18:D9:AB:EA:0E:ED:EB:FD:99:B8:4C:5E:C5:08:3F:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6s9tBc9dZFAJcpjJBB4zBDAH1s9e6Eb14MECCWaDSdiP/0/1654C69118D9ABEA0EEDEBFD99B84C5EC5083FC5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.154.160.0/20
                  191.6.32.0/20
                IPv6:
                  2804:13b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262288

    Signature Algorithm: sha256WithRSAEncryption
         b0:ed:53:c6:45:aa:09:e7:c0:fb:64:6d:22:38:10:78:02:55:
         17:54:54:24:74:20:27:3f:08:9e:eb:5e:0d:e5:7d:28:df:aa:
         e1:18:3c:2d:49:10:f1:bc:5a:48:a6:22:9c:b7:a3:72:da:f0:
         d4:bd:19:69:7e:36:2a:1c:d7:fb:f9:3c:3c:e9:5c:4e:94:a5:
         3e:bd:af:e3:78:60:4d:20:a6:88:6c:7b:d9:b3:ce:42:5c:af:
         0a:31:37:45:d9:1e:d7:28:c0:0d:78:0c:16:92:92:66:4b:ad:
         19:10:25:6b:e8:69:b8:bf:67:db:a2:a7:b2:b2:08:b6:cc:40:
         24:6b:b2:b2:65:db:fe:80:7d:38:bb:b0:41:6c:23:09:1d:95:
         0e:2b:4a:9a:4f:a0:3c:22:fa:2f:7c:bf:dd:5d:d6:37:d3:20:
         03:3f:19:39:43:c3:e4:50:b4:58:2c:82:78:3c:14:c9:ce:7e:
         e6:86:c8:56:dc:e9:61:e2:fc:18:86:9a:4b:67:a2:9c:5e:d4:
         b2:41:3a:d0:d2:2e:43:dd:a5:db:72:05:ac:41:c9:51:ca:24:
         28:c8:df:f1:4f:38:28:24:59:1a:6e:56:bb:a4:c3:75:03:ac:
         51:02:98:fc:63:52:e0:c3:58:86:fc:41:23:06:08:58:fc:ae:
         8f:ea:25:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org