Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.cer
File:                     1D4B1E0F83937DB50136A86BC6213C3318CDF58A.cer (raw, json)
Hash identifier:          Ziu5QI0a1ZVCWoKa2g6Q0UtuTbADCUmISvUap+nb1LU=
Subject key identifier:   1D:4B:1E:0F:83:93:7D:B5:01:36:A8:6B:C6:21:3C:33:18:CD:F5:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7EB5C3F0077E44434B67B8EE977F184BD68C0199
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 08:48:38 +0000
Certificate not after:    Mon 27 Jan 2025 08:53:38 +0000
Subordinate resources:    AS: 264926
                          IP: 168.228.176.0/22
                          IP: 2804:3004::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b5:c3:f0:07:7e:44:43:4b:67:b8:ee:97:7f:18:4b:d6:8c:01:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 29 08:48:38 2024 GMT
            Not After : Jan 27 08:53:38 2025 GMT
        Subject: CN=1D4B1E0F83937DB50136A86BC6213C3318CDF58A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:19:8a:f3:4a:39:e4:54:aa:b9:51:ec:1b:
                    34:15:4d:31:3a:17:b1:d7:78:de:3a:a3:40:f7:f6:
                    ff:b6:c4:82:84:a4:3c:75:52:fb:1d:f0:7f:f6:41:
                    cb:b6:36:ec:97:4f:8e:cc:8a:df:5a:c5:54:fc:b0:
                    6f:46:37:48:46:27:a2:ba:f9:7b:89:52:63:25:b7:
                    06:6c:32:09:80:40:cf:ee:c6:4e:4c:79:0a:ad:37:
                    03:8a:aa:45:14:51:45:ce:60:a9:ab:68:12:65:88:
                    09:3e:e1:52:ce:bd:08:79:2e:f5:7c:1f:1e:8c:52:
                    b4:dc:a4:79:82:3f:36:3b:41:ce:2f:8f:6f:51:28:
                    b7:1c:f5:38:2c:91:11:3c:da:d1:47:a8:f4:99:0d:
                    19:84:08:b5:24:64:8a:66:7e:7f:c1:b3:a5:de:27:
                    07:7a:0e:81:f9:6e:04:57:5b:a1:cb:9b:f2:fe:0a:
                    7d:04:b0:8c:dd:4c:20:c5:8c:83:b6:7a:46:45:fe:
                    f3:63:23:18:88:86:e6:d6:87:61:e7:31:28:71:f3:
                    d4:03:cc:18:9f:c3:d0:52:b3:08:21:62:2e:4d:9d:
                    04:55:3c:29:17:ca:38:e9:e7:c2:d6:82:e5:fb:bb:
                    e9:f5:9f:64:ac:c4:8f:7b:db:e0:14:a3:df:70:b2:
                    f7:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:4B:1E:0F:83:93:7D:B5:01:36:A8:6B:C6:21:3C:33:18:CD:F5:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/75cZdGnxZHm2tetjABVfwtQZ7fNT5hj2wWV48tCmEetS/0/1D4B1E0F83937DB50136A86BC6213C3318CDF58A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.176.0/22
                IPv6:
                  2804:3004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264926

    Signature Algorithm: sha256WithRSAEncryption
         16:c7:a3:91:af:e9:b4:b8:31:16:5f:52:c0:4c:bb:ab:1c:78:
         2e:86:b1:e1:b1:eb:f2:0c:87:44:6b:65:6a:9b:b6:3f:d1:e9:
         41:78:22:bd:f8:43:52:8c:06:49:53:55:7b:89:06:3f:ac:5c:
         95:5d:1b:4a:37:eb:44:89:09:34:74:06:cf:04:39:23:4a:75:
         5e:2d:c1:3a:76:50:7b:e9:2c:1f:9b:13:aa:06:47:13:36:1c:
         e2:a4:b0:65:70:90:23:b0:32:0a:2a:13:71:19:de:cd:41:b8:
         d3:f8:1a:fa:14:25:fe:85:3a:a2:fd:00:fd:56:e3:cb:e2:3c:
         21:9c:0f:e2:70:3b:b0:5f:2f:47:59:46:03:fc:bb:31:cc:3c:
         e7:69:13:b9:c4:f0:15:ef:b0:73:5d:41:75:99:d2:55:23:b5:
         54:86:63:6c:6a:cb:75:cd:7b:8c:64:48:e0:56:7f:37:53:77:
         df:a1:96:af:8d:e7:d2:ed:1e:64:80:55:28:2e:b5:e1:5b:df:
         ea:a3:c5:ee:80:80:2b:47:83:26:b7:36:4d:36:e1:dc:72:69:
         93:47:f0:45:80:b5:34:c1:f3:6c:67:01:68:d7:0f:f9:97:43:
         08:f3:86:ac:27:26:39:32:bd:0f:6d:de:9b:09:0f:e5:57:43:
         5f:a7:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org