Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/172F28376814AFE0EA240D36669993BD215583B2.cer
File:                     172F28376814AFE0EA240D36669993BD215583B2.cer (raw, json)
Hash identifier:          YNGoMVo3wTvipEQbU+KxRKYdDegduTKlpa/q3eH0nvk=
Subject key identifier:   17:2F:28:37:68:14:AF:E0:EA:24:0D:36:66:99:93:BD:21:55:83:B2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7041CAA2478756942EDBE3AAAD8E1AF1F26DB01F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/172F28376814AFE0EA240D36669993BD215583B2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 17:21:26 +0000
Certificate not after:    Thu 20 Feb 2025 17:26:26 +0000
Subordinate resources:    AS: 272645
                          IP: 201.216.104.0/22
                          IP: 2804:8678::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:41:ca:a2:47:87:56:94:2e:db:e3:aa:ad:8e:1a:f1:f2:6d:b0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 22 17:21:26 2024 GMT
            Not After : Feb 20 17:26:26 2025 GMT
        Subject: CN=172F28376814AFE0EA240D36669993BD215583B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:68:ae:32:0c:bd:45:e3:a2:60:ab:4d:79:4b:
                    06:a8:cf:aa:9e:2d:aa:3d:82:f2:c2:58:c0:b6:2a:
                    71:1e:07:39:01:a9:04:9f:34:18:12:64:8c:da:ab:
                    d8:f5:f9:55:cd:15:1f:23:b0:b2:f1:2b:34:e7:7a:
                    f3:15:18:55:ff:bf:37:07:5e:9e:0c:a1:a2:65:23:
                    39:ce:00:69:40:dd:ab:d9:5d:69:39:72:f2:46:b9:
                    64:76:66:83:1a:00:6f:3a:d9:e6:b1:21:5c:83:fc:
                    aa:e9:41:86:08:98:20:4f:f7:4f:6e:06:11:03:de:
                    91:6b:7b:a9:3e:bb:f6:81:ac:ad:81:58:26:f5:63:
                    d9:91:f7:69:84:f4:56:cf:1e:81:28:23:8e:fb:9c:
                    8e:2d:a0:d0:40:3a:c9:ab:5b:69:a8:89:ca:59:23:
                    a7:b7:8c:c4:63:15:76:6b:94:16:b7:0a:2b:65:68:
                    76:34:f5:1b:34:49:07:bd:78:0c:15:00:3a:1e:7c:
                    03:02:28:21:61:b1:9e:5b:ca:bc:ed:27:8f:d8:c6:
                    a7:a5:39:a1:65:1e:96:75:60:5f:ad:93:20:92:71:
                    a2:6d:0c:a8:3e:9e:bd:24:c0:28:8d:fd:ff:b4:20:
                    4b:f4:c1:97:37:a5:40:da:ed:6d:7d:34:2d:49:e3:
                    6f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:2F:28:37:68:14:AF:E0:EA:24:0D:36:66:99:93:BD:21:55:83:B2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9izPWQxdQiyTvaf7yJqhz5fXFSpURSwiuBTB1wskHZ4B/0/172F28376814AFE0EA240D36669993BD215583B2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.104.0/22
                IPv6:
                  2804:8678::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272645

    Signature Algorithm: sha256WithRSAEncryption
         3c:d1:97:86:2d:2d:d6:0a:ce:ab:68:0f:5f:ad:3e:b6:51:19:
         19:15:c2:af:eb:3d:71:7f:cf:ee:39:28:5f:98:c8:8c:34:d5:
         06:25:9c:1a:73:4c:62:96:70:fa:89:d6:2e:a0:58:e9:ca:13:
         f6:73:9c:e3:80:4c:48:d1:61:c8:90:2f:a0:d8:35:50:48:a4:
         c0:63:12:00:a8:0d:80:21:b5:9a:b0:c5:2d:37:ad:14:d8:5f:
         60:88:0c:da:11:e3:8a:8f:f2:fd:a6:55:f4:93:06:d8:5f:ef:
         4f:07:28:35:8d:73:50:26:e5:ff:7f:01:9e:db:3e:f0:11:2c:
         61:59:8c:cf:57:8a:d4:55:ee:e7:6c:15:e3:40:82:e1:7f:16:
         3c:2b:54:5c:12:1e:80:e0:d4:19:db:e1:1c:4f:98:7d:2f:e9:
         98:41:96:5a:eb:0a:96:92:7e:63:8d:b7:7c:dd:ce:ce:86:8f:
         a7:2d:5b:af:20:e8:d7:80:62:cd:da:55:c4:74:30:f2:80:d0:
         f7:88:32:db:ce:2f:34:f5:57:cf:40:28:42:1f:48:a7:d1:d9:
         c9:ce:59:0a:88:eb:1b:5f:e4:99:4f:21:7d:22:1d:cd:59:88:
         81:70:80:f0:e6:7d:db:6c:b4:3e:04:0d:08:53:d9:8f:ab:df:
         4f:7e:3b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org