Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/176036B0F4E8C948F280F48EE4789439CD6021D9.cer
File:                     176036B0F4E8C948F280F48EE4789439CD6021D9.cer (raw, json)
Hash identifier:          ieTH09V8AGKZeGWoJBiP+z4sxVnYynNCjjjQk3Eqirc=
Subject key identifier:   17:60:36:B0:F4:E8:C9:48:F2:80:F4:8E:E4:78:94:39:CD:60:21:D9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4FDE3E38144B2A62E6E8AEC3D086ABD6F23854BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/176036B0F4E8C948F280F48EE4789439CD6021D9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 15:20:34 +0000
Certificate not after:    Thu 18 Jul 2024 15:25:34 +0000
Subordinate resources:    AS: 268262
                          IP: 45.237.24.0/22
                          IP: 2804:4e74::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:de:3e:38:14:4b:2a:62:e6:e8:ae:c3:d0:86:ab:d6:f2:38:54:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 15:20:34 2023 GMT
            Not After : Jul 18 15:25:34 2024 GMT
        Subject: CN=176036B0F4E8C948F280F48EE4789439CD6021D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:e4:76:50:1f:7d:ff:28:00:e6:0e:0a:31:
                    d1:4a:65:20:56:c8:6e:08:17:30:35:b1:05:2e:d4:
                    f1:a8:52:4e:86:2a:32:5d:96:e7:ce:89:b3:3c:fa:
                    c0:9d:10:17:8b:95:ea:b1:01:23:bc:7b:de:fa:0f:
                    af:91:24:6a:92:e8:c3:74:2d:87:8a:9a:e7:9d:45:
                    a9:88:35:bf:eb:f2:0e:ec:23:e6:b2:f1:2c:1b:52:
                    b6:f6:55:3e:27:1a:8b:11:96:48:f9:00:53:02:f7:
                    45:84:01:74:a8:08:ed:ee:d3:c1:db:ab:fe:14:67:
                    18:3a:74:5b:2c:ae:47:95:1a:12:51:96:ca:19:c0:
                    38:7e:1e:54:7f:13:6d:44:53:4a:aa:a0:c2:66:d6:
                    e9:14:76:f8:c2:ad:18:a0:35:c3:55:f8:b7:ce:4a:
                    07:9b:dd:f8:49:a6:d0:1d:35:11:74:cd:fc:f5:98:
                    04:7a:79:77:32:f2:67:b2:28:23:3d:dc:4a:f1:b5:
                    3e:dd:fc:f7:02:e9:c6:68:86:b8:a7:83:ad:b5:7a:
                    ef:b7:11:3a:5c:09:ae:20:af:e3:70:50:36:3a:85:
                    6a:07:61:e4:1a:5e:2e:85:36:15:42:90:4c:57:c3:
                    bf:45:0b:cc:ab:3a:af:6e:5c:89:da:55:b4:99:cf:
                    22:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:60:36:B0:F4:E8:C9:48:F2:80:F4:8E:E4:78:94:39:CD:60:21:D9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CtXhNoDpzbZNjWTr9Kr2YQg7JhF6e1VHjcnFk7X3TeVj/0/176036B0F4E8C948F280F48EE4789439CD6021D9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.24.0/22
                IPv6:
                  2804:4e74::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268262

    Signature Algorithm: sha256WithRSAEncryption
         08:5d:a2:31:bb:fc:36:f0:b5:60:85:6e:1d:62:e4:12:b0:00:
         58:db:af:fa:c5:34:56:0d:2b:90:4b:ab:23:88:ef:b2:53:6e:
         66:51:c8:33:fe:f1:64:0f:da:d8:df:07:5b:e6:97:9d:2c:55:
         65:d3:d0:db:a7:55:fc:b7:6d:20:16:cb:71:e5:17:6c:66:06:
         6e:a7:a5:2b:6b:f5:f7:73:f7:30:f1:49:f7:c8:40:9d:e7:e5:
         e0:c8:a9:b3:b7:fa:f2:03:55:29:9d:eb:36:ac:71:49:f1:43:
         c3:10:3e:cf:0d:18:1f:38:69:c8:e3:2e:79:30:89:95:4e:8b:
         d1:9d:ba:42:05:c6:b6:a3:a0:c4:74:6b:a7:79:3a:ca:35:e3:
         8d:21:05:a5:b8:fd:c0:d4:34:6d:03:88:60:59:fa:92:fc:15:
         52:2b:3d:40:73:0c:6d:17:6c:b1:16:4e:b8:cc:72:12:92:93:
         6d:f8:d0:f1:96:9e:55:fc:e1:63:f4:64:4d:2e:6d:a7:1d:10:
         90:aa:b4:2f:8e:00:04:bc:c6:72:da:01:d9:4a:32:6a:7a:ce:
         cc:22:3e:18:63:ab:01:05:25:f6:55:b2:a8:a6:7d:fa:59:81:
         0f:e1:3c:d6:6f:b7:1d:27:32:7b:13:06:3c:be:a8:71:a0:1d:
         f7:5f:97:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org