Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1977019332F9E0FD88239313189DE9ADE5BF213F.cer
File:                     1977019332F9E0FD88239313189DE9ADE5BF213F.cer (raw, json)
Hash identifier:          +O+y4MYYMFYw/433hPt4y7s8fDN++Z4IQ3FK0XSM5Hg=
Subject key identifier:   19:77:01:93:32:F9:E0:FD:88:23:93:13:18:9D:E9:AD:E5:BF:21:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       29BC1426A62892023BEFBE6F520AFD4F833DE253
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/1977019332F9E0FD88239313189DE9ADE5BF213F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 17:27:34 +0000
Certificate not after:    Wed 26 Feb 2025 17:32:34 +0000
Subordinate resources:    AS: 262296
                          IP: 168.181.196.0/22
                          IP: 170.81.0.0/22
                          IP: 177.11.120.0/21
                          IP: 177.85.76.0/22
                          IP: 2804:a84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:bc:14:26:a6:28:92:02:3b:ef:be:6f:52:0a:fd:4f:83:3d:e2:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 17:27:34 2024 GMT
            Not After : Feb 26 17:32:34 2025 GMT
        Subject: CN=1977019332F9E0FD88239313189DE9ADE5BF213F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3f:74:2c:06:64:fb:7c:4c:d7:68:ce:f4:5f:
                    28:0c:9f:0a:56:7f:d0:fd:79:3c:1a:a6:78:7d:d1:
                    08:c9:4f:d7:8b:5e:44:8f:94:b6:06:91:63:2c:4f:
                    4e:50:b0:ee:e8:49:0a:a4:d1:1d:6f:97:44:14:22:
                    5d:ff:4e:5d:93:78:0c:50:db:98:b6:45:62:43:f4:
                    b0:f0:a0:3d:67:b2:a6:e7:0f:38:aa:06:f5:8f:a3:
                    91:39:60:4b:7c:6b:07:ea:a1:93:a3:1a:cd:2f:cc:
                    76:f2:85:48:91:c4:d1:4e:dd:5b:f1:9a:00:41:9b:
                    05:28:5d:8c:89:7b:5b:13:ad:2f:e3:42:ab:82:04:
                    6b:7f:5d:d4:ad:a4:cb:0f:a0:af:ee:0c:d7:86:19:
                    7a:a4:0e:c8:12:8b:a0:ee:99:e4:e3:44:53:b0:7f:
                    2b:13:4e:56:3c:4c:65:82:9b:4d:95:b5:3b:43:78:
                    18:8e:7f:96:27:19:19:ae:d1:a5:75:b0:05:04:ba:
                    c7:c7:df:ec:ac:27:6d:08:e3:47:f1:7d:52:c9:09:
                    d8:39:5c:65:3d:f3:87:5d:1c:41:d0:39:b0:16:78:
                    f0:12:c9:3c:fd:d0:3f:b8:ee:c0:a8:bf:c0:b0:e0:
                    43:6d:c4:a9:df:50:29:b9:9e:f8:32:30:c6:c5:f6:
                    0c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                19:77:01:93:32:F9:E0:FD:88:23:93:13:18:9D:E9:AD:E5:BF:21:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/1977019332F9E0FD88239313189DE9ADE5BF213F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.196.0/22
                  170.81.0.0/22
                  177.11.120.0/21
                  177.85.76.0/22
                IPv6:
                  2804:a84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262296

    Signature Algorithm: sha256WithRSAEncryption
         13:83:0c:45:10:65:9e:e7:e6:a2:83:a6:5d:fa:28:7c:32:d9:
         3f:f9:fe:1f:ea:fe:02:d4:e2:93:b0:ff:a2:bf:92:83:a3:4c:
         6f:0e:de:1b:3b:10:ce:18:70:01:60:7e:f9:f7:c5:fc:8f:9e:
         0c:ff:b8:81:55:e1:eb:1c:3d:0c:3e:f0:1c:7d:e9:21:f0:f1:
         4a:a1:57:cf:03:13:8c:10:7d:90:4a:ae:05:c4:f7:71:2f:45:
         9b:bc:d2:69:44:9f:27:f7:36:68:3b:48:99:dc:e0:34:bd:98:
         63:ba:8b:4b:67:c9:50:49:e2:39:da:ef:9f:32:dc:52:b2:7f:
         48:03:67:08:4f:0d:7c:7e:32:0d:c7:2c:1d:16:19:e0:f3:a7:
         c1:4a:2b:f2:28:ae:bc:7d:dc:62:4d:9c:e3:72:09:46:1f:a1:
         08:16:e9:58:df:b3:80:6c:1e:00:3e:bf:97:33:b4:aa:d0:df:
         a5:e8:ae:da:8e:46:ff:de:4d:9f:b4:e2:be:10:83:be:f5:16:
         c2:51:ad:22:37:d7:81:c8:23:09:40:34:ae:8e:2c:cd:69:e3:
         b6:a6:ce:06:7d:52:1c:96:1a:f5:ce:32:21:fa:70:6c:39:8c:
         b2:ba:81:f9:5f:00:93:4d:06:22:00:d5:9d:01:e6:b6:06:0f:
         74:51:9a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:16 2024 by rpki-client on console-fra.rpki-client.org