Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/172F46A9A851486435DD77C21C958357351450AC.cer
File:                     172F46A9A851486435DD77C21C958357351450AC.cer (raw, json)
Hash identifier:          QxrFTigyvb05fBGIYesMJvZTowP9mYtgOScGC6c2GdQ=
Subject key identifier:   17:2F:46:A9:A8:51:48:64:35:DD:77:C2:1C:95:83:57:35:14:50:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       55812874552B5136F767EEBEA63CC893A9D5B0B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/172F46A9A851486435DD77C21C958357351450AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Sep 2023 08:40:03 +0000
Certificate not after:    Fri 06 Sep 2024 08:45:03 +0000
Subordinate resources:    AS: 264047
                          IP: 143.137.220.0/22
                          IP: 2804:29f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:81:28:74:55:2b:51:36:f7:67:ee:be:a6:3c:c8:93:a9:d5:b0:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  8 08:40:03 2023 GMT
            Not After : Sep  6 08:45:03 2024 GMT
        Subject: CN=172F46A9A851486435DD77C21C958357351450AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:36:26:a8:ca:25:0a:97:d7:0c:9d:9f:61:b7:
                    df:7d:9f:97:98:2c:4a:14:c8:e6:4e:08:1b:91:54:
                    9e:86:a7:11:42:fb:7c:b2:c0:87:dd:1d:58:28:c3:
                    78:bc:b9:24:13:d9:e2:3a:be:4e:2a:07:7a:01:14:
                    f1:2f:4f:37:37:f1:8c:72:17:e3:98:79:7a:78:21:
                    59:99:0e:da:84:52:fa:8a:0c:98:a2:cc:dd:36:12:
                    81:11:3c:24:38:77:a3:25:6b:3f:82:30:3a:a1:1d:
                    ac:06:10:f6:ba:fb:fd:6b:20:13:28:58:1c:1f:f5:
                    8d:4c:a3:f9:bc:a5:02:97:fe:ad:91:f0:6d:54:0d:
                    e2:8c:83:8f:2a:04:45:05:7a:67:6f:70:57:20:d4:
                    cc:b8:cf:fe:85:6b:68:5b:f6:e7:8c:ab:6a:c0:c9:
                    2f:2c:83:c1:7d:73:0d:11:e1:a9:b1:5b:b8:f4:bb:
                    2c:c3:1a:9f:92:51:bb:1c:c2:95:05:c4:3b:50:a5:
                    0c:3e:74:98:e0:30:70:df:b6:30:8d:ef:bd:ab:75:
                    ed:79:5c:40:aa:df:02:69:57:82:64:d7:98:67:eb:
                    96:91:4f:e7:ff:9f:9b:ad:0e:cd:42:9f:29:3f:07:
                    fe:5c:ba:88:f4:26:db:de:79:01:6a:ef:65:65:46:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:2F:46:A9:A8:51:48:64:35:DD:77:C2:1C:95:83:57:35:14:50:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/0/172F46A9A851486435DD77C21C958357351450AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.220.0/22
                IPv6:
                  2804:29f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264047

    Signature Algorithm: sha256WithRSAEncryption
         02:93:6a:0f:4c:c6:a0:86:53:b2:50:cc:fa:30:f7:33:4a:d2:
         a3:af:23:c5:6f:a3:e6:ad:0b:03:dc:a7:1e:5f:71:81:54:ed:
         f6:47:15:bb:33:27:60:d1:c2:88:f7:0d:91:64:e0:25:0b:f4:
         87:d4:cf:d8:b5:d6:11:a5:57:7b:2e:a6:7a:83:41:42:25:27:
         29:3f:53:a7:9c:9e:49:e7:72:21:f9:b1:36:76:d7:b8:65:bb:
         0e:98:17:c9:b1:12:fd:ae:23:4c:09:2b:66:1d:1a:59:b0:20:
         43:d7:2a:39:e4:6e:ff:55:2b:ac:1a:c1:d8:6e:48:be:d6:0e:
         8f:de:4b:15:32:83:62:75:a8:68:6c:7b:76:bd:6d:e2:54:19:
         c0:47:53:3b:82:cf:ec:66:d5:dc:51:bf:db:75:f3:0b:cb:18:
         73:98:11:18:21:3f:a4:9b:8e:17:aa:aa:93:59:c8:fd:36:b3:
         ad:5d:8c:ef:41:6a:43:43:31:1b:96:3b:1f:33:9f:fb:04:1c:
         2a:d2:1c:f7:59:97:65:15:9b:f9:2a:47:78:49:36:0e:4a:e4:
         75:17:29:14:db:55:d7:85:e7:c4:b6:51:87:2a:ad:30:1e:66:
         c1:e5:55:7b:de:9f:c5:5f:4f:81:b6:5b:78:57:18:68:ce:47:
         df:e8:c1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org