Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/18A43826A65928B70C1A033867FABC5F6E4207C0.cer
File:                     18A43826A65928B70C1A033867FABC5F6E4207C0.cer (raw, json)
Hash identifier:          /p8U6cfj3IixaJWcWUWn7/JIWPep2vfxxV3yOh9gYN4=
Subject key identifier:   18:A4:38:26:A6:59:28:B7:0C:1A:03:38:67:FA:BC:5F:6E:42:07:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       088A428D7D33C67C36A1C26EC3C4E77F75739002
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/18A43826A65928B70C1A033867FABC5F6E4207C0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 03:53:38 +0000
Certificate not after:    Tue 05 Nov 2024 03:58:38 +0000
Subordinate resources:    AS: 268154
                          IP: 45.170.120.0/22
                          IP: 2804:58dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8a:42:8d:7d:33:c6:7c:36:a1:c2:6e:c3:c4:e7:7f:75:73:90:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 03:53:38 2023 GMT
            Not After : Nov  5 03:58:38 2024 GMT
        Subject: CN=18A43826A65928B70C1A033867FABC5F6E4207C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:e2:82:42:78:2d:f3:5f:f8:5a:cf:a5:00:
                    c9:4f:c6:2b:05:12:d5:5c:c5:43:44:85:71:86:0a:
                    2e:4e:25:0a:21:2b:5f:f5:97:5b:6c:df:8c:01:9a:
                    5d:2b:2a:35:50:32:7b:50:2c:3b:8d:4b:1a:62:23:
                    75:68:26:ba:69:96:97:12:c3:5b:10:d5:dc:1f:cf:
                    5c:0f:2c:6a:6e:11:f7:6d:51:1b:32:60:5b:62:fd:
                    49:97:19:ad:b5:f9:4d:80:bc:36:e1:d8:6e:f5:1f:
                    1d:2c:74:d4:1b:d9:40:db:55:77:b9:bc:89:ec:b5:
                    f6:cf:50:78:f8:3f:45:c2:1c:b4:90:18:e9:de:1c:
                    5a:69:86:fe:00:ab:fe:61:91:57:0f:1a:e0:ca:29:
                    89:a0:84:21:f7:83:a7:47:25:8f:21:53:8e:82:9d:
                    43:28:81:76:d9:18:71:89:24:8f:5a:db:a9:8f:c2:
                    5e:a4:d3:7a:c9:b4:d7:31:ff:5c:ca:80:ea:d5:ac:
                    7c:d4:77:3c:2e:8d:13:6e:45:fe:36:0a:3c:88:8c:
                    58:96:66:91:0a:e6:a9:a6:e6:ef:f6:c1:75:7c:65:
                    3a:db:45:3d:cb:e6:89:32:84:57:ba:b5:b7:f0:d0:
                    e3:1b:db:06:10:f9:62:27:5c:d7:fd:63:3c:c0:68:
                    5a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:A4:38:26:A6:59:28:B7:0C:1A:03:38:67:FA:BC:5F:6E:42:07:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B4U3B1dWDjoo2a8Sms4iy81dQVjgv358UHbAyXeYXzqh/0/18A43826A65928B70C1A033867FABC5F6E4207C0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.120.0/22
                IPv6:
                  2804:58dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268154

    Signature Algorithm: sha256WithRSAEncryption
         42:6b:65:9e:7f:09:b2:66:bb:d9:8e:3e:be:e9:46:75:75:8b:
         c6:84:45:5e:3e:43:ad:1f:c2:29:b3:62:f2:d3:88:a8:27:91:
         de:00:08:85:a7:61:4d:59:d3:6e:eb:4c:b5:5e:d5:e1:21:e7:
         ee:96:a8:81:49:e1:2f:94:b4:cf:b6:c7:11:3a:f1:03:ef:49:
         7e:e7:92:35:c2:f0:7c:4a:e9:a5:cc:66:c4:49:7d:22:e2:78:
         84:0d:a9:8f:30:ab:3c:e0:ce:e9:3f:cb:4c:d4:08:b8:fc:02:
         f9:3d:fa:7b:af:5a:8f:8f:ba:c1:de:30:8f:c7:f1:e1:5b:fd:
         f5:9e:30:78:ef:23:ca:c8:f5:fc:76:14:70:c3:a1:45:60:7d:
         c1:fc:d0:9d:ae:63:0d:4f:2e:1d:2c:c1:e3:46:03:d1:97:35:
         fc:24:4b:a8:ca:d0:6d:44:47:9f:3c:c5:73:71:72:1c:82:a3:
         8d:2b:90:be:e9:ba:f6:39:54:d2:74:0a:cc:8c:17:20:3b:83:
         93:aa:42:96:b7:e7:0c:d0:1f:07:cb:bb:57:c9:22:b5:ac:cf:
         3e:2e:77:95:55:1b:29:4f:6b:09:a8:f5:f6:af:68:9f:71:53:
         17:d7:55:18:e9:21:86:b1:21:bc:d1:09:fb:d8:35:f3:fd:4a:
         50:e8:19:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org