Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/206195A3F31278D368CE482292CC9971A22AC833.cer
File:                     206195A3F31278D368CE482292CC9971A22AC833.cer (raw, json)
Hash identifier:          jocCT94l8QEgF5SLJIb8U9+5lu88FqAoN/3AxdQOVV4=
Subject key identifier:   20:61:95:A3:F3:12:78:D3:68:CE:48:22:92:CC:99:71:A2:2A:C8:33
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       22A5A71F16D55D94FC483D70018573071D319C3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/206195A3F31278D368CE482292CC9971A22AC833.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 14:40:18 +0000
Certificate not after:    Wed 05 Feb 2025 14:45:18 +0000
Subordinate resources:    AS: 267060
                          IP: 45.228.112.0/22
                          IP: 2804:4788::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a5:a7:1f:16:d5:5d:94:fc:48:3d:70:01:85:73:07:1d:31:9c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  7 14:40:18 2024 GMT
            Not After : Feb  5 14:45:18 2025 GMT
        Subject: CN=206195A3F31278D368CE482292CC9971A22AC833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:8f:f8:d7:70:fc:3c:08:41:d2:3c:54:e5:
                    88:09:6c:85:87:2e:47:d1:42:09:60:e8:31:5f:62:
                    8a:ad:62:6d:a2:7f:3b:4c:e2:d9:58:de:4e:17:e8:
                    6e:24:07:15:e2:c8:fb:9f:0c:b1:88:35:ea:51:35:
                    e3:0c:b9:3d:bf:f8:ad:66:0f:26:04:0b:e5:c0:b3:
                    c7:61:06:0b:dd:04:90:88:d6:36:7c:a6:ec:d4:f5:
                    08:a6:dd:90:a5:95:35:fb:cf:77:9e:b0:c5:88:e3:
                    c3:04:96:1e:3c:25:9a:95:85:48:1b:de:c7:c6:0f:
                    9b:5b:fa:98:69:bd:ff:3d:7d:0c:87:64:79:f4:cd:
                    d7:2e:56:a3:ec:4b:7b:a6:6a:93:80:c0:79:4d:1e:
                    b6:4c:4e:10:c0:18:c3:41:ca:44:2b:5e:a2:35:9c:
                    46:e9:21:7b:0d:46:ce:4a:c7:92:92:c9:76:ca:02:
                    3d:a1:9a:09:d9:ca:6b:c3:0c:7c:cc:fe:9d:bb:ce:
                    67:84:84:11:74:6a:ea:dd:a0:e7:9b:98:3c:f2:f8:
                    7f:c5:53:16:55:a7:86:26:28:1a:4a:8a:02:5c:8b:
                    c9:83:80:56:bc:e3:ee:18:d6:96:e4:d6:7f:ca:2e:
                    4c:15:9a:3f:b7:b8:0b:b0:54:f2:97:01:3d:16:f3:
                    02:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                20:61:95:A3:F3:12:78:D3:68:CE:48:22:92:CC:99:71:A2:2A:C8:33
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/206195A3F31278D368CE482292CC9971A22AC833.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.112.0/22
                IPv6:
                  2804:4788::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267060

    Signature Algorithm: sha256WithRSAEncryption
         5a:a3:6a:8f:3d:49:ef:57:37:5e:cb:f1:62:e5:b0:85:c7:d1:
         f8:90:7b:8d:8e:df:d3:e5:83:50:00:ba:47:b9:d6:ca:1d:83:
         5c:27:13:5c:99:e0:20:64:a1:85:12:d8:76:2d:49:13:1e:df:
         2d:a3:c4:70:50:f2:40:b6:80:de:10:98:38:8c:d5:1e:1c:1b:
         5d:cc:09:e6:00:04:f9:12:83:ec:f1:3c:bf:eb:b8:32:85:55:
         2d:a2:9c:b1:92:70:15:df:d4:7d:94:ea:95:20:1f:5d:e6:8c:
         65:1c:aa:5c:49:1e:57:c6:ff:7c:2c:ad:e5:fd:52:74:d9:fd:
         be:81:19:49:c1:5f:4d:fa:b3:40:b3:e3:4f:c7:f8:d1:12:12:
         78:2d:33:8c:0f:2f:b7:96:1b:13:be:54:4c:95:50:69:69:8a:
         ee:8e:a1:90:76:bf:16:d0:cc:e4:8d:3e:91:ef:1e:88:c2:fa:
         16:0b:c4:ff:52:84:4e:f7:26:34:06:d5:1a:7f:fe:10:4a:5f:
         12:f0:f1:e1:be:a2:a2:3e:70:7e:e4:77:a8:00:bf:e2:27:8f:
         5d:ae:b4:43:20:54:24:55:97:cd:3e:62:0b:da:58:ca:13:fe:
         bb:2b:16:74:c6:93:92:dd:8b:ae:c6:0c:55:4f:50:d1:76:7c:
         00:65:a8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org