Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer
File:                     1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.cer (raw, json)
Hash identifier:          bE5OoSMjup9ewoqvACdwNhxXDcK29SrTQYjBtRAUDdA=
Subject key identifier:   1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0D6FEEFE24CDE340C8D23A08C900E4A65C1F7878
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.mft
caRepository:             rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 05 Jun 2021 20:31:52 +0000
Certificate not after:    Sat 04 Jun 2022 20:36:52 +0000
Subordinate resources:    AS: 265066
                          IP: 168.121.200.0/22
                          IP: 170.79.96.0/22
                          IP: 170.231.112.0/22
                          IP: 179.125.20.0/22
                          IP: 2804:3244::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6f:ee:fe:24:cd:e3:40:c8:d2:3a:08:c9:00:e4:a6:5c:1f:78:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  5 20:31:52 2021 GMT
            Not After : Jun  4 20:36:52 2022 GMT
        Subject: CN=1DFA20766D63768BAF34AD0AEE5C60BFC03EF988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:54:e1:5e:62:4e:c8:ef:6a:fd:81:69:01:
                    6d:10:29:7d:e2:e8:bb:7f:dc:b0:e4:59:8e:49:4a:
                    69:f3:da:c6:6a:3c:fe:0f:bc:8f:30:92:72:11:4f:
                    b8:02:89:4b:db:f7:c1:cf:1b:ba:09:78:fc:0c:d9:
                    78:a4:56:53:c7:62:25:75:3a:4e:c8:59:ed:71:71:
                    8d:2c:cb:57:4f:7b:0a:9e:5e:0c:76:d8:21:22:db:
                    4e:87:19:7e:04:64:20:78:f6:8a:c2:16:35:b9:92:
                    70:1b:05:63:8c:52:ba:56:2d:bb:85:9e:4b:48:6c:
                    f4:74:2d:66:91:dc:4a:ee:c4:5a:7e:fd:8b:49:7e:
                    de:b8:65:ed:f1:67:90:41:7c:ef:d4:3f:74:e2:0b:
                    86:22:48:16:b4:6c:41:9f:ea:8f:59:63:08:02:34:
                    bd:e6:9a:65:ef:8e:a6:c9:cb:62:d0:10:e5:5b:3f:
                    cc:39:84:26:49:31:d5:14:a1:ab:0e:0f:86:d9:64:
                    fd:8e:6e:51:ab:f5:ec:fb:04:21:c1:3f:7c:17:3a:
                    10:bc:63:8e:da:b8:32:6a:bc:3e:31:3f:d8:99:07:
                    ce:0f:b0:de:eb:32:0c:29:35:a7:b6:a4:89:d4:e6:
                    bf:6e:5c:01:2b:ff:c3:85:e5:96:c4:a5:8e:e9:b8:
                    85:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                1D:FA:20:76:6D:63:76:8B:AF:34:AD:0A:EE:5C:60:BF:C0:3E:F9:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/73UwtARL2gGoXwnoq9TkX8Veu3QziussiXcHJPH1CXTj/0/1DFA20766D63768BAF34AD0AEE5C60BFC03EF988.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.200.0/22
                  170.79.96.0/22
                  170.231.112.0/22
                  179.125.20.0/22
                IPv6:
                  2804:3244::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265066

    Signature Algorithm: sha256WithRSAEncryption
         0e:24:19:36:d5:a5:d2:84:ce:91:bc:13:0f:cc:d6:ae:de:7a:
         39:35:75:cb:d3:db:d8:ca:58:90:f4:72:cf:78:07:bc:ba:60:
         b3:60:a4:e5:ae:d4:4f:16:63:81:63:ce:44:a8:ca:f9:ed:e5:
         1d:96:de:9d:c9:8a:fd:8f:6d:39:e0:f2:67:b9:13:04:d4:c9:
         5f:0e:20:9d:70:04:63:78:70:05:ab:2e:cf:15:49:3f:52:e9:
         e5:a5:63:e5:36:76:fe:ef:f2:04:31:74:0d:04:15:79:da:5d:
         ef:cc:5d:9c:f6:7f:7e:ae:5d:ac:37:9d:2b:d4:48:0a:73:0a:
         5c:f9:1b:0e:9a:19:fb:f9:26:fe:ef:ad:ac:2e:d6:12:fd:7d:
         a8:f6:75:7a:bd:a6:d5:05:d3:24:6b:d0:d8:31:11:3b:d7:c1:
         58:e1:bb:29:25:0c:c7:d9:93:28:34:81:8a:d3:76:18:b0:48:
         0b:8a:5f:33:49:07:e4:fc:19:c6:61:55:44:84:76:85:c6:f9:
         8a:5b:b8:0e:05:b5:b2:a9:c5:9a:1a:6e:f3:5c:70:bc:d1:69:
         00:77:64:cc:21:3e:b0:d5:de:a0:72:b4:a4:0b:8e:ab:a0:62:
         d3:f6:16:0a:4e:93:23:ba:a5:55:da:68:bc:7d:ed:fd:8c:c7:
         09:65:98:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:20 2024 by rpki-client on console-ams.rpki-client.org