Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1A631EACEB568194FA26B00FCBE133626298AF8A.cer
File:                     1A631EACEB568194FA26B00FCBE133626298AF8A.cer (raw, json)
Hash identifier:          791nMyrfjsyIwJkO+LWX9yMn5h3yL9Iek4Na1vm6r5o=
Subject key identifier:   1A:63:1E:AC:EB:56:81:94:FA:26:B0:0F:CB:E1:33:62:62:98:AF:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20ADF7E65F27A30B7C9E885ECE914387D30642D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/1A631EACEB568194FA26B00FCBE133626298AF8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 01 Aug 2023 19:44:34 +0000
Certificate not after:    Tue 30 Jul 2024 19:49:34 +0000
Subordinate resources:    AS: 267129
                          IP: 45.229.160.0/22
                          IP: 2804:4890::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ad:f7:e6:5f:27:a3:0b:7c:9e:88:5e:ce:91:43:87:d3:06:42:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  1 19:44:34 2023 GMT
            Not After : Jul 30 19:49:34 2024 GMT
        Subject: CN=1A631EACEB568194FA26B00FCBE133626298AF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:60:95:78:ed:42:f8:2d:96:22:2c:7a:06:
                    ca:84:d4:b1:1d:3f:55:29:13:a7:f8:32:4a:70:d2:
                    b7:a5:45:54:50:9f:5e:42:37:20:94:87:70:9e:be:
                    3c:f4:be:bc:e3:a6:c5:fe:a2:b3:db:d8:cb:e9:78:
                    c6:1e:ce:8e:58:75:3b:3d:03:0f:19:a4:3a:08:99:
                    b9:e3:05:02:54:15:1b:87:46:5b:d6:ec:13:7c:a4:
                    bf:82:9b:05:40:4c:da:bc:55:a4:df:35:52:64:0b:
                    9b:4b:b8:07:7b:35:5b:43:a7:29:15:d1:dc:29:ae:
                    f0:6e:df:f2:65:3c:55:cc:41:db:ec:fa:40:c3:b4:
                    13:18:7e:98:1d:ea:e1:58:20:b6:9c:13:0c:f6:a7:
                    93:7c:ef:d9:57:63:3a:03:ed:7a:96:42:aa:cc:41:
                    b9:0f:ba:9b:01:d7:a0:37:17:da:38:c6:f9:8e:77:
                    8a:69:4e:1c:2c:d5:99:5e:25:36:67:8c:16:27:73:
                    cb:c7:04:56:a7:1c:ba:9c:75:68:98:33:9e:ce:74:
                    1b:7b:4d:8e:e2:87:8d:f8:5a:20:83:ee:13:76:b9:
                    a9:11:6f:c6:bf:8c:d6:98:e0:84:71:44:46:7e:0d:
                    54:fe:66:c5:7d:1c:de:8a:1d:18:19:c4:28:d8:e8:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1A:63:1E:AC:EB:56:81:94:FA:26:B0:0F:CB:E1:33:62:62:98:AF:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CAtppzkxDhPpqSY4Z7EfoAJQv9vVEcYamjJG2QZreppX/0/1A631EACEB568194FA26B00FCBE133626298AF8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.160.0/22
                IPv6:
                  2804:4890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267129

    Signature Algorithm: sha256WithRSAEncryption
         0b:40:df:23:d1:14:20:bf:2d:c1:bf:71:af:a4:be:4d:22:5f:
         38:6f:0b:41:54:c2:c5:11:7c:0f:07:ff:89:23:69:e9:b7:3c:
         eb:ea:9c:71:62:8f:83:94:30:cc:e2:98:0f:b0:70:58:17:89:
         da:57:f5:b7:61:0a:e0:97:d6:35:90:b9:b6:d7:33:6b:12:8e:
         ce:26:ab:55:24:22:99:54:83:06:d3:ae:08:10:9f:e1:a5:9d:
         ac:28:dc:af:a6:22:d1:de:a7:fa:b5:1a:62:d4:83:70:c6:4a:
         c9:47:f1:5e:34:95:73:51:23:65:c4:41:89:c2:2d:83:e4:4b:
         86:74:59:ea:a8:d3:68:b2:14:65:73:cc:be:de:29:bb:ec:4e:
         44:89:bd:d8:49:11:2f:05:72:6b:67:80:0b:68:7b:6d:6c:49:
         ba:38:2c:0e:a3:0d:ae:dd:ae:e1:48:a9:98:62:a8:4e:da:47:
         4f:64:83:f3:b0:c6:a9:01:37:5f:db:b3:1d:46:dd:14:ef:ed:
         d7:54:7a:24:11:83:39:12:7a:ed:65:23:87:21:6a:d8:b9:83:
         a5:ad:0f:7c:98:b7:bf:3e:d3:2c:f0:df:83:5a:fe:9d:ee:38:
         6c:f3:76:83:fd:26:8f:ca:77:06:69:3d:89:02:5a:ce:a3:c4:
         81:bd:c9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org