Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/234F64922A212C21046D3F316A32BBA74BE88DAB.cer
File:                     234F64922A212C21046D3F316A32BBA74BE88DAB.cer (raw, json)
Hash identifier:          oMZ7om5vPy0EMDhpRmKblGGbqHsUKZw83wNu72+92uw=
Subject key identifier:   23:4F:64:92:2A:21:2C:21:04:6D:3F:31:6A:32:BB:A7:4B:E8:8D:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4CDA4A5947BB8D97B5FC0B39B2DFC288EC7F4B99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/234F64922A212C21046D3F316A32BBA74BE88DAB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 12 Sep 2023 12:38:41 +0000
Certificate not after:    Tue 10 Sep 2024 12:43:41 +0000
Subordinate resources:    AS: 270305
                          IP: 201.216.120.0/22
                          IP: 2804:6a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:da:4a:59:47:bb:8d:97:b5:fc:0b:39:b2:df:c2:88:ec:7f:4b:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 12 12:38:41 2023 GMT
            Not After : Sep 10 12:43:41 2024 GMT
        Subject: CN=234F64922A212C21046D3F316A32BBA74BE88DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:ce:e2:12:10:ec:43:f5:d6:f6:cc:21:ca:
                    69:99:99:ea:5c:d5:60:36:50:01:7c:69:71:fc:0b:
                    d9:09:83:07:45:25:28:48:b0:1e:fc:68:3c:a1:76:
                    1e:be:e7:10:88:55:c3:e8:39:46:29:a4:5f:dc:67:
                    ee:7a:0c:36:08:e4:0c:c7:7a:5b:5d:ff:d0:6c:37:
                    d4:6a:57:d0:c8:7b:47:17:9d:a6:04:8d:1e:f5:ba:
                    1a:23:63:2b:36:93:91:20:b7:4d:6a:1c:ac:fa:9b:
                    c4:e6:ce:10:cb:7a:47:e2:76:00:48:39:bb:42:18:
                    9e:a1:5c:cc:27:59:6f:05:f3:1b:3b:41:a9:d3:04:
                    c3:ce:e6:8d:4d:eb:bf:05:b1:57:5a:f9:a6:0a:93:
                    90:b9:89:f6:82:40:9e:01:b7:5e:de:e1:99:3d:62:
                    72:fb:2b:61:70:ae:e8:b5:0e:71:94:63:a4:a0:1c:
                    1d:bd:3d:fe:8c:5d:3c:1b:4c:b8:2c:da:2c:86:c8:
                    d7:32:b7:0b:dc:8a:3f:79:0b:07:a2:36:79:f4:05:
                    0b:e0:dd:48:5e:50:72:95:4e:54:71:3f:8d:5f:98:
                    64:09:3e:cf:a9:0b:67:9f:ff:8b:3d:c2:b9:e9:ae:
                    78:24:fb:83:0a:7a:45:76:42:9a:49:77:dc:16:6a:
                    e6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:4F:64:92:2A:21:2C:21:04:6D:3F:31:6A:32:BB:A7:4B:E8:8D:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/0/234F64922A212C21046D3F316A32BBA74BE88DAB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.216.120.0/22
                IPv6:
                  2804:6a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270305

    Signature Algorithm: sha256WithRSAEncryption
         2c:8f:4b:dd:c7:2d:52:a4:7b:81:e5:de:24:be:e9:a6:f5:77:
         b1:3d:18:9e:56:29:4e:54:48:a1:0e:b3:df:dd:83:8e:f7:c2:
         12:1c:48:64:cb:2b:ae:8c:ec:93:ab:e1:2c:15:44:44:3c:5e:
         cd:ab:37:ca:d3:de:ac:af:fc:6d:56:5e:73:74:87:6a:69:b9:
         36:66:4f:4c:a2:49:bd:6d:3f:25:9f:02:73:93:5a:2e:ed:64:
         dd:07:f0:13:29:c5:a9:ce:0b:88:d3:c5:cc:5a:56:2d:05:85:
         ae:be:07:25:92:f1:18:ff:83:b8:a8:4b:f9:f4:6d:3e:30:4a:
         79:f8:eb:dc:5b:61:8d:c4:4c:0f:cd:dd:74:1c:11:aa:cc:19:
         0a:2c:8f:9c:82:86:12:4b:9e:eb:33:6c:e9:79:49:a5:18:8b:
         cc:9d:05:d7:2a:e3:cd:e2:c1:b2:98:05:ca:87:ad:b5:1f:e8:
         7d:38:00:c8:4c:a8:6b:6c:e0:89:19:68:13:3a:33:8a:26:c1:
         9d:98:48:23:8d:56:13:43:fe:59:37:2d:15:c5:5e:78:23:9f:
         1b:76:b1:7f:ca:b4:2d:dc:82:f9:68:4c:bb:52:d9:e3:3f:65:
         2c:f9:a1:5e:3d:b7:fb:df:21:16:9f:93:e1:54:5b:0a:5d:90:
         dd:68:e1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org