Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/17AB1AB3397F9DB436D7F8A775263AEE104BA10A.cer
File:                     17AB1AB3397F9DB436D7F8A775263AEE104BA10A.cer (raw, json)
Hash identifier:          DlzAtH1c6lP0mR6Drv/GDTeXT2awEu0vVwn3FDgDT+M=
Subject key identifier:   17:AB:1A:B3:39:7F:9D:B4:36:D7:F8:A7:75:26:3A:EE:10:4B:A1:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       41F9EA26E8296664C6172BD9E2D994FE90E5593F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/17AB1AB3397F9DB436D7F8A775263AEE104BA10A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 29 Feb 2024 10:49:09 +0000
Certificate not after:    Thu 27 Feb 2025 10:54:09 +0000
Subordinate resources:    AS: 270800
                          IP: 200.219.36.0/22
                          IP: 2804:719c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:f9:ea:26:e8:29:66:64:c6:17:2b:d9:e2:d9:94:fe:90:e5:59:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 29 10:49:09 2024 GMT
            Not After : Feb 27 10:54:09 2025 GMT
        Subject: CN=17AB1AB3397F9DB436D7F8A775263AEE104BA10A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8e:2e:7f:35:a0:57:58:40:bb:d2:f2:b5:f3:
                    e2:1a:ed:e7:5d:3b:8a:3e:1b:73:32:bd:fb:f5:b9:
                    45:dc:4b:9c:7a:80:73:fe:64:1b:bc:d7:0e:d6:3c:
                    84:13:de:b3:cb:85:85:1d:bc:a9:e6:37:19:22:da:
                    c5:13:c5:cc:92:ad:50:6f:f9:9b:ce:26:d9:c8:66:
                    ae:89:d9:00:97:ba:3b:33:47:32:73:b0:04:3d:a5:
                    b2:3a:80:8b:03:98:29:83:e2:30:3e:87:7d:95:88:
                    e8:84:dd:95:8c:82:d3:59:66:1d:96:08:b8:79:85:
                    6c:8f:72:c1:bf:b7:5a:9b:15:c9:fd:7e:20:b2:e2:
                    2f:d4:9a:d5:83:95:21:50:1a:cd:ae:7d:72:c0:63:
                    21:72:86:f0:28:d5:f5:08:d2:4e:f6:3c:e4:33:8d:
                    a8:cd:da:4b:7e:dc:07:65:98:c6:9a:79:01:a9:b6:
                    1a:bf:2e:f2:47:42:51:65:5f:35:da:b9:71:42:da:
                    78:fc:98:30:96:4a:c8:ca:45:78:d3:70:b3:cd:ca:
                    42:d2:1a:34:03:fc:2b:54:d5:55:7f:90:03:4b:c2:
                    cd:1a:26:1d:be:82:56:f9:ec:8b:03:d4:be:42:32:
                    0f:f3:f2:c1:e0:54:cf:12:88:64:95:37:2d:1c:ec:
                    0f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                17:AB:1A:B3:39:7F:9D:B4:36:D7:F8:A7:75:26:3A:EE:10:4B:A1:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HyQWGMstP1AtWKNEqhvYiwbR7i2TveNz67cL9cnuQyZt/0/17AB1AB3397F9DB436D7F8A775263AEE104BA10A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.36.0/22
                IPv6:
                  2804:719c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270800

    Signature Algorithm: sha256WithRSAEncryption
         46:f1:29:55:0f:e5:30:77:81:bd:9f:0d:e9:ae:aa:fb:59:ef:
         2d:c3:87:9e:54:df:72:37:76:77:70:d7:4e:a1:91:50:51:28:
         ae:ea:78:30:b5:62:bc:d7:90:90:5b:84:54:df:e3:7b:d3:aa:
         b7:86:02:8a:ee:9a:73:d1:e2:2c:9c:df:6e:b0:54:52:d1:77:
         6c:2f:35:1e:41:07:c1:5c:54:80:05:84:f5:44:33:0a:26:06:
         60:37:91:be:46:55:2a:74:a5:18:71:ba:9d:10:80:87:7d:2d:
         67:bc:75:87:5c:9d:53:e3:cc:55:94:e3:a4:2a:7c:87:12:1c:
         75:f0:7e:d7:b5:c8:89:a7:66:49:ea:3b:2f:7a:3e:3a:e5:55:
         40:cf:28:a3:ef:50:61:c0:df:38:23:b3:ae:4b:89:a8:84:fb:
         2c:ac:0c:fd:ca:3c:6c:52:71:8f:cf:94:f5:b1:bf:4b:28:ca:
         c7:d3:63:4b:e1:95:9a:ce:e4:fd:bb:5a:ad:74:b4:5e:3a:ff:
         ec:83:75:26:a6:f0:c2:d5:2e:86:c8:b3:13:43:33:03:b4:be:
         25:d3:2a:c1:93:13:7a:fa:de:c1:7a:8b:d8:60:5c:27:73:b8:
         b0:ee:ee:dc:bc:74:75:be:10:ed:7c:d8:12:16:32:0a:e9:ab:
         c9:3c:70:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org