Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/17098E4DBCF1C9C107842B022A573079F4BBB2F6.cer
File:                     17098E4DBCF1C9C107842B022A573079F4BBB2F6.cer (raw, json)
Hash identifier:          4TltwLH9ncXgwx5vXw5jm9icP7fvEt63x2GJ209ejJo=
Subject key identifier:   17:09:8E:4D:BC:F1:C9:C1:07:84:2B:02:2A:57:30:79:F4:BB:B2:F6
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34DE0CBCCA293DE1DE51BAE01D6FB51DE15ADC58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/17098E4DBCF1C9C107842B022A573079F4BBB2F6.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 14 Nov 2022 15:52:05 +0000
Certificate not after:    Mon 13 Nov 2023 15:57:05 +0000
Subordinate resources:    AS: 268577
                          IP: 45.163.116.0/22
                          IP: 2804:5354::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:de:0c:bc:ca:29:3d:e1:de:51:ba:e0:1d:6f:b5:1d:e1:5a:dc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 14 15:52:05 2022 GMT
            Not After : Nov 13 15:57:05 2023 GMT
        Subject: CN=17098E4DBCF1C9C107842B022A573079F4BBB2F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:58:86:cc:a0:42:e1:c2:48:00:ec:37:ec:f3:
                    b5:12:ff:36:7a:54:84:22:9d:df:cb:96:8c:6e:d2:
                    d6:14:1e:04:53:31:a1:6b:ee:75:1c:ee:de:a7:9b:
                    15:6c:ab:76:c2:13:55:c8:85:d0:41:75:bc:25:27:
                    a7:43:e0:42:eb:1e:6e:24:40:69:f9:66:ea:60:33:
                    02:62:b7:6f:df:2f:cc:6a:25:a6:4c:20:2f:9d:09:
                    55:df:3e:87:e2:17:97:f5:66:f9:2e:52:ff:e9:e1:
                    91:fe:c6:84:e1:c7:ba:0d:a0:37:ec:c9:7f:32:c1:
                    de:c8:98:4c:c0:a4:ed:82:0b:ca:e0:0b:dd:e2:25:
                    a6:3b:db:1c:3b:11:8a:9d:86:36:4e:ed:bd:e0:2b:
                    ba:83:d8:48:db:84:87:be:84:a2:4b:bd:e9:89:ef:
                    9e:a9:ad:8a:a5:16:79:16:6a:e7:ef:8d:e0:89:3c:
                    f6:00:b7:72:aa:4d:23:13:23:ea:b6:07:7d:0d:79:
                    35:f5:b9:3b:cd:cc:9d:fa:57:e6:c2:51:29:f7:e6:
                    67:a1:ec:ed:c4:37:a4:bd:9f:a4:5f:4d:a4:c5:c2:
                    50:6e:9e:3b:1d:0e:91:9d:c4:55:59:18:e3:ba:e7:
                    76:12:60:19:df:62:04:87:99:ba:c7:ae:b0:45:33:
                    0a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:09:8E:4D:BC:F1:C9:C1:07:84:2B:02:2A:57:30:79:F4:BB:B2:F6
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5XC7fUpjUnSDsrGhYff18V83amt7aup6tVDZHYKFf8xz/0/17098E4DBCF1C9C107842B022A573079F4BBB2F6.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.116.0/22
                IPv6:
                  2804:5354::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268577

    Signature Algorithm: sha256WithRSAEncryption
         4f:29:ee:04:b4:38:a6:11:d9:ce:f5:1a:15:99:ef:3e:07:ec:
         97:da:16:bc:dd:f4:3e:22:48:9d:85:51:25:ed:26:51:51:44:
         80:c3:65:63:f4:24:7e:b6:5b:e2:27:52:d8:f3:70:8d:b7:a7:
         21:36:df:4a:78:af:a5:e1:ea:b7:db:cc:8f:04:92:8e:d6:28:
         9d:50:20:56:85:03:dd:d0:54:82:70:16:fb:d7:f7:38:63:b9:
         52:69:a2:b4:52:b3:69:03:28:c6:f7:d6:75:31:bc:cc:ea:6b:
         c6:0f:be:31:a8:92:cd:9a:06:ad:52:7c:87:9c:dc:de:c1:58:
         7f:c8:c8:23:4c:69:f3:58:03:c6:b5:a4:e7:d2:07:e4:62:e7:
         13:43:dd:56:35:21:a4:be:99:fe:0d:a5:07:87:98:64:ea:53:
         3b:bb:c0:4a:36:9f:35:97:34:94:67:7b:72:35:06:4f:37:e4:
         a3:22:6e:91:4e:91:25:4c:09:80:f8:db:98:63:23:4b:67:b6:
         08:0a:78:20:57:36:21:a7:15:d7:23:7d:89:49:6c:73:e4:58:
         3a:e4:36:92:f6:76:6f:e1:5a:d8:b7:0c:54:42:53:e6:9a:e3:
         75:28:8e:df:7e:45:27:61:52:04:ab:64:da:46:57:8d:0f:35:
         78:fd:ee:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org