Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1855CDFB9B5C6DF6137EDDF7CDF465C30A23F9B5.cer
File:                     1855CDFB9B5C6DF6137EDDF7CDF465C30A23F9B5.cer (raw, json)
Hash identifier:          adsf7qqvqk0vz0PkXCBcUms7WwZ4Q2MKkL49WSETCtI=
Subject key identifier:   18:55:CD:FB:9B:5C:6D:F6:13:7E:DD:F7:CD:F4:65:C3:0A:23:F9:B5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7FE9287FBC87A724B3626E7EA4C5CAE10EF8BF15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/1855CDFB9B5C6DF6137EDDF7CDF465C30A23F9B5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 12:41:24 +0000
Certificate not after:    Tue 11 Mar 2025 12:46:24 +0000
Subordinate resources:    AS: 264872
                          IP: 168.227.48.0/22
                          IP: 2804:2f1c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:e9:28:7f:bc:87:a7:24:b3:62:6e:7e:a4:c5:ca:e1:0e:f8:bf:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 12 12:41:24 2024 GMT
            Not After : Mar 11 12:46:24 2025 GMT
        Subject: CN=1855CDFB9B5C6DF6137EDDF7CDF465C30A23F9B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:b0:4e:1d:5d:c5:78:41:c6:34:5b:85:b5:
                    27:1f:c5:fc:19:4e:9d:87:6b:68:10:08:2d:36:68:
                    1a:f8:65:46:b8:7c:8f:80:a1:ad:3d:e8:b7:83:3d:
                    40:f7:5f:d4:f0:cf:f0:fe:2c:51:72:75:41:42:e5:
                    48:50:4b:1f:35:91:99:c0:b7:c0:53:2e:67:f5:de:
                    34:6d:55:90:35:7b:2c:da:68:fb:82:bd:1b:88:5c:
                    0d:91:df:30:6b:9b:05:58:c6:51:3b:85:45:9d:10:
                    ea:24:46:1e:d4:a9:aa:fb:b7:b6:cc:49:09:be:66:
                    b4:3c:03:af:74:28:bd:05:d7:90:4a:91:02:58:be:
                    46:da:03:7b:87:5e:7b:02:4d:35:8a:ef:f9:ac:4f:
                    31:d0:39:2c:66:45:8b:9a:62:38:7a:e2:6f:9f:75:
                    4c:8d:2b:1f:b4:a6:b5:d5:5e:34:96:a0:f6:75:3b:
                    96:ab:87:40:b3:aa:75:74:28:30:f1:86:8e:79:6d:
                    76:af:25:ac:77:47:11:78:12:83:8f:1e:cc:72:d3:
                    0c:08:42:f0:46:f6:82:0b:23:e8:45:be:12:4d:c7:
                    6e:a9:34:5f:98:e0:8b:41:cc:a8:18:f5:64:13:5c:
                    ea:54:49:01:f4:c4:e6:14:a6:bf:04:12:da:e9:6a:
                    6a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:55:CD:FB:9B:5C:6D:F6:13:7E:DD:F7:CD:F4:65:C3:0A:23:F9:B5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fsnu97xsy8dojFcnRPqdwEKYwFjPAtgcBJkuUt5tjjAi/0/1855CDFB9B5C6DF6137EDDF7CDF465C30A23F9B5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.48.0/22
                IPv6:
                  2804:2f1c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264872

    Signature Algorithm: sha256WithRSAEncryption
         3d:61:a7:53:91:fa:59:f7:dd:1f:e8:6c:0f:40:f7:b0:12:75:
         1b:08:36:3f:87:7e:59:8f:25:e4:a1:2a:1b:e3:a6:71:a2:f8:
         86:c5:32:22:1f:81:4f:85:af:29:c0:b4:c7:f5:df:69:94:a5:
         f1:3b:20:da:b8:83:96:59:4f:bd:a9:2d:4e:7f:bc:19:0f:21:
         d9:27:e5:dc:40:51:dd:77:6f:fb:ac:c5:23:77:f8:4e:6e:a3:
         99:65:c9:06:33:8a:a7:a6:c2:16:74:f7:a0:99:b0:3a:04:40:
         80:e1:b5:30:37:48:78:b7:d9:58:c1:49:4a:3e:61:f4:62:c9:
         b2:ee:fe:38:0e:ed:b4:a7:e5:cc:5c:e7:dd:b2:fd:0b:6a:3d:
         83:4b:d6:16:ab:45:34:e5:59:f1:38:a2:71:d1:69:c8:06:5e:
         85:08:5d:2f:78:be:04:b4:6e:3d:5c:f7:85:2c:67:14:bc:f3:
         9f:71:c1:cb:86:a3:75:9e:c9:61:c4:d5:01:e2:af:56:21:6a:
         8b:98:60:63:31:12:f2:60:31:09:99:26:f9:77:10:43:62:5c:
         85:2e:ff:3d:56:f5:5a:e8:af:e2:bc:6d:33:93:a6:b0:88:ef:
         17:a4:67:39:6a:e1:11:a1:73:a4:6b:4c:3f:ac:65:5f:df:5b:
         a9:4a:79:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org