Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.cer
File:                     23637A3ACBE3FC644CF6846D1612352C519DDA0A.cer (raw, json)
Hash identifier:          sGdXbjH+W4QYBt9P/9aj0AenepBjr+CQlZLMMaXF1k4=
Subject key identifier:   23:63:7A:3A:CB:E3:FC:64:4C:F6:84:6D:16:12:35:2C:51:9D:DA:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0747050B94840E3D84BEE8C31184F0754128BC0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 11:44:57 +0000
Certificate not after:    Tue 17 Dec 2024 11:49:57 +0000
Subordinate resources:    AS: 269394
                          IP: 45.185.216.0/22
                          IP: 138.36.8.0/22
                          IP: 2804:63f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:47:05:0b:94:84:0e:3d:84:be:e8:c3:11:84:f0:75:41:28:bc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 11:44:57 2023 GMT
            Not After : Dec 17 11:49:57 2024 GMT
        Subject: CN=23637A3ACBE3FC644CF6846D1612352C519DDA0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:f2:83:1a:c7:9d:8c:ac:ab:b6:0e:a9:39:
                    4c:fa:5d:63:eb:00:a2:f6:c1:23:be:c6:c2:4f:dd:
                    eb:15:ad:be:6e:42:a1:56:71:d7:54:a6:65:25:a4:
                    7b:d9:40:5b:64:16:04:a1:84:eb:27:ff:4f:ab:81:
                    47:ad:e3:1c:d3:c4:32:ac:45:05:be:41:48:ec:75:
                    a4:1f:6b:fb:f5:93:23:dd:42:e6:5b:62:bc:7a:fe:
                    e4:7b:ce:6e:fa:ce:8c:61:88:c9:3a:cd:92:05:16:
                    1a:9f:e4:c6:77:7f:a9:96:23:f9:7a:24:ec:30:2b:
                    36:8d:da:ce:45:20:de:ee:be:6e:84:b8:9b:c2:f1:
                    2a:28:ef:4c:0b:8e:62:b1:9a:84:a8:48:8c:bd:c6:
                    e0:01:a6:70:a9:19:2a:9a:c9:bb:5f:39:bf:04:c1:
                    d9:be:2f:86:d0:64:e0:5e:7f:75:93:7d:45:5b:be:
                    73:fc:48:b1:51:42:61:7d:85:2e:cb:77:d7:fa:17:
                    f8:52:c3:d0:c0:7f:20:6c:d7:fe:c8:b2:97:e7:9b:
                    8e:6c:70:86:e2:5a:b3:bf:0c:03:dd:94:b8:d9:e5:
                    79:c3:77:48:ca:2a:37:a7:92:9b:82:3d:86:33:03:
                    cb:55:f2:2c:cd:27:c6:bf:bf:6d:df:81:78:3f:d7:
                    63:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:63:7A:3A:CB:E3:FC:64:4C:F6:84:6D:16:12:35:2C:51:9D:DA:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/98UxadnRbogDxH338MVhdp6tivXi8RDzRL8nz8dbu42g/0/23637A3ACBE3FC644CF6846D1612352C519DDA0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.216.0/22
                  138.36.8.0/22
                IPv6:
                  2804:63f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269394

    Signature Algorithm: sha256WithRSAEncryption
         79:e0:d6:4d:61:32:ef:7d:b2:5f:18:e7:49:47:ae:75:9d:a4:
         29:57:86:c7:3a:4a:1c:1a:62:5b:7b:45:2a:63:e0:2c:fc:fe:
         0e:d9:08:c9:4d:41:0d:57:37:1c:18:bf:c1:83:5c:38:bd:90:
         b5:1e:6c:a7:63:ab:f0:13:fd:31:36:fc:ca:76:d7:a4:79:de:
         a8:6d:1a:e3:e2:5b:a9:d1:70:56:12:3a:36:f1:77:8c:91:e0:
         a4:34:e6:bd:9f:75:93:55:1b:85:b0:66:7d:cd:ec:57:60:4d:
         9b:e6:8a:31:b6:d5:c1:27:19:00:88:39:b4:2c:8d:dd:c0:e2:
         8f:82:c7:f0:8b:5d:54:e7:c3:35:45:93:26:b4:2b:d6:5e:e0:
         67:66:1c:61:18:c1:d6:6c:a2:42:d3:a0:4d:86:ef:c5:11:4e:
         f3:7f:25:5c:41:b6:9d:b4:e1:e7:98:ca:92:36:07:6e:1a:8c:
         2c:f8:c2:0b:0c:68:45:73:11:ab:22:d0:a6:a1:31:d7:ad:28:
         4a:a0:af:40:e0:38:b1:8a:96:7a:58:1e:41:a4:ce:31:f9:50:
         b4:53:36:52:aa:af:e5:c8:cb:7b:00:b9:14:b4:c6:38:00:20:
         db:fb:e8:e1:aa:1b:0e:54:6e:17:ad:82:a4:80:53:d6:f7:de:
         96:81:0b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org