Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/18B2369C4368F8B88927DD83F1C9A98D2A048BA9.cer
File:                     18B2369C4368F8B88927DD83F1C9A98D2A048BA9.cer (raw, json)
Hash identifier:          N6Qr2GiWwn9LW+DTtqxKuR8rdOZCaiTeYSmJoXLYx7Q=
Subject key identifier:   18:B2:36:9C:43:68:F8:B8:89:27:DD:83:F1:C9:A9:8D:2A:04:8B:A9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D582155C49C95B354D1A7D11F79EF77C5E76517
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/18B2369C4368F8B88927DD83F1C9A98D2A048BA9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Oct 2022 19:07:40 +0000
Certificate not after:    Mon 23 Oct 2023 19:12:40 +0000
Subordinate resources:    AS: 52660
                          IP: 177.66.248.0/21
                          IP: 2804:c04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:58:21:55:c4:9c:95:b3:54:d1:a7:d1:1f:79:ef:77:c5:e7:65:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 24 19:07:40 2022 GMT
            Not After : Oct 23 19:12:40 2023 GMT
        Subject: CN=18B2369C4368F8B88927DD83F1C9A98D2A048BA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7f:ad:fb:6f:9e:6f:34:b4:0d:ee:8a:fa:6f:
                    4a:1c:88:17:ac:75:39:82:c6:e3:79:00:16:02:fa:
                    f5:e9:e6:f3:76:c0:6f:e3:f7:6b:7d:1f:be:54:ee:
                    30:f2:f3:fc:f3:b3:71:9b:05:8e:bc:3a:77:99:f7:
                    c5:38:1d:de:25:e3:26:db:c4:4b:ea:35:88:8f:0e:
                    aa:f5:89:42:0c:57:cf:68:cd:f3:1d:ee:32:30:95:
                    fa:6b:fe:92:1d:b5:73:6a:d1:4d:35:84:c1:5b:ea:
                    f7:ef:2f:da:08:71:36:4c:42:6f:a0:1f:4c:17:ba:
                    7c:f3:33:7c:d4:ee:be:09:9d:9d:b5:6b:0b:c1:e5:
                    1a:0d:83:10:8b:1d:6f:cf:18:36:a4:83:30:51:1a:
                    66:07:87:e6:0c:7f:a4:41:c9:24:a5:f0:eb:61:0a:
                    14:db:57:95:26:4b:4e:77:3a:dc:42:ee:ec:e7:16:
                    a9:30:79:74:be:a2:1a:7f:d7:67:83:5e:9c:cb:e7:
                    7d:0e:62:36:9d:83:15:5e:82:4c:15:9b:62:45:02:
                    10:10:e5:a5:8f:1f:9e:f4:b4:0c:78:3d:6e:06:be:
                    fe:f9:79:0e:c1:01:30:54:d7:3b:dd:c9:ec:ef:b6:
                    bd:93:e2:df:e1:0c:d4:e5:bd:1b:12:1d:15:e5:20:
                    c2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                18:B2:36:9C:43:68:F8:B8:89:27:DD:83:F1:C9:A9:8D:2A:04:8B:A9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C9EWucubr3t4EQCeU52fLF4fqpn7CoEmej8pJoCASQ1q/0/18B2369C4368F8B88927DD83F1C9A98D2A048BA9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.66.248.0/21
                IPv6:
                  2804:c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52660

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:ec:e6:d1:66:db:1b:b2:52:16:51:0a:9e:55:3a:91:64:
         e8:d3:26:cb:48:fb:f9:f9:0f:c9:47:da:91:53:0e:71:46:56:
         77:bf:e8:aa:1b:0f:22:37:e8:bb:dc:dc:db:2a:35:bd:66:f3:
         30:e1:b7:e4:01:4b:45:b2:7d:40:6b:e6:bf:d7:b6:ae:d1:9c:
         cb:4d:21:1c:ac:86:d3:d5:3c:73:f5:08:cf:32:a4:34:dd:a3:
         e5:7a:d7:ad:94:d1:4d:21:ac:cc:99:73:a8:c7:56:00:a4:2b:
         b3:9a:84:6e:a7:2b:3e:a8:cf:64:36:ef:7e:b7:d8:a8:52:86:
         0a:1a:ce:5b:6f:98:a5:84:18:e5:2b:9f:5b:61:4c:52:d5:80:
         01:1e:b5:c1:66:57:8d:7b:01:56:57:1e:7a:4a:86:1f:d5:b0:
         cf:b2:7a:fe:0a:af:a4:ec:ee:b7:ad:9f:d4:7d:e5:15:11:e3:
         d1:32:44:b4:2b:71:10:4d:86:4b:40:1e:7c:69:62:9b:ef:7f:
         c2:32:8f:e9:0d:00:63:be:e6:cf:e4:dd:a2:22:f8:db:91:e8:
         fb:37:13:75:95:fe:8a:93:e5:8e:3b:fa:9e:c2:c5:52:33:e8:
         c3:0b:f4:f2:47:32:89:3e:5d:ea:a2:8e:0d:9b:23:e6:96:fb:
         9a:1e:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org