Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/238A02EA76000E147B644ACF90133F3E8BE57A6B.cer
File:                     238A02EA76000E147B644ACF90133F3E8BE57A6B.cer (raw, json)
Hash identifier:          CTDBQL6nVXN2MshJ3n+p+vDmEta8jqJ3J6HF1hcxuvc=
Subject key identifier:   23:8A:02:EA:76:00:0E:14:7B:64:4A:CF:90:13:3F:3E:8B:E5:7A:6B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1D84783E18B1A5D7DBE6948060FDBB636FC8334E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/238A02EA76000E147B644ACF90133F3E8BE57A6B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Nov 2021 17:57:02 +0000
Certificate not after:    Mon 28 Nov 2022 18:02:02 +0000
Subordinate resources:    AS: 61767
                          IP: 200.77.180.0/22
                          IP: 2804:18fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:84:78:3e:18:b1:a5:d7:db:e6:94:80:60:fd:bb:63:6f:c8:33:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 29 17:57:02 2021 GMT
            Not After : Nov 28 18:02:02 2022 GMT
        Subject: CN=238A02EA76000E147B644ACF90133F3E8BE57A6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:56:54:b6:32:16:a4:4b:32:3a:38:ba:eb:
                    72:eb:ec:59:91:61:cf:86:10:11:a9:ca:a2:e4:2a:
                    85:5f:c1:ee:1d:6e:29:83:6f:4c:b3:a9:b2:78:05:
                    ce:aa:50:76:01:02:13:d1:9f:98:61:80:2b:f8:7a:
                    03:d4:e5:4e:63:2a:33:68:4a:ab:46:48:5a:d5:9c:
                    bc:fb:a1:3a:87:7e:5f:16:0c:4b:8b:c5:de:03:69:
                    49:4a:90:d6:72:e1:e1:92:d9:bf:a1:72:58:59:86:
                    dc:c1:c7:5d:8e:34:9b:a4:96:8c:ec:a9:6b:66:c1:
                    e4:2e:be:ea:64:4d:40:46:1d:49:c8:66:cb:ec:4f:
                    01:c5:b7:fe:9b:9f:2a:61:43:28:4c:80:16:ea:1a:
                    73:23:5b:b1:66:07:60:4c:72:ab:4d:9a:9c:90:0a:
                    7e:75:aa:cf:43:f1:81:a9:d3:71:0a:d8:b1:9e:62:
                    fd:d8:b9:6f:b9:3a:e9:1e:41:61:87:f8:bb:5b:86:
                    ff:26:ed:7b:c4:cc:38:94:3c:5d:06:a0:9d:51:fc:
                    f2:f2:ac:8a:6e:b7:41:37:7d:40:ee:a7:4d:a9:9c:
                    46:fc:e9:e0:48:fc:91:12:a3:d4:ba:2d:ea:e5:84:
                    cf:da:93:ea:03:1b:bc:43:11:a4:db:f6:39:72:df:
                    e3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:8A:02:EA:76:00:0E:14:7B:64:4A:CF:90:13:3F:3E:8B:E5:7A:6B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8j7dWSq1VABVRj5PPPYq3zFSwTJD3AgqiAjQpjkf9Hxr/0/238A02EA76000E147B644ACF90133F3E8BE57A6B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.180.0/22
                IPv6:
                  2804:18fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61767

    Signature Algorithm: sha256WithRSAEncryption
         34:4a:bd:97:54:10:38:83:46:bc:6c:e3:26:6b:47:a2:e1:18:
         d9:0e:3d:26:7c:8d:85:75:c1:02:92:af:a8:01:6e:4b:64:e4:
         8f:4f:a2:42:53:cd:aa:33:c8:06:41:c0:c0:ca:b3:90:31:0c:
         37:2e:c5:e8:e2:91:6e:c4:f7:17:78:00:d8:c3:2c:3b:2b:ca:
         70:39:03:e9:57:45:be:68:db:f0:76:b6:29:d7:1b:54:1a:d8:
         f4:43:e8:8e:25:0c:c4:8c:50:b3:0e:e7:7d:a3:5b:ad:1f:a6:
         32:3b:ab:e9:92:91:6e:42:93:d4:d9:5a:c1:51:22:81:d2:e9:
         c3:c8:8f:ce:19:40:57:eb:57:bf:f9:3c:c7:d5:d6:d7:26:d2:
         d8:67:f0:0d:ad:2c:13:f4:45:37:42:ff:1b:4f:40:55:1c:d2:
         05:93:06:d8:95:ec:2b:ec:66:49:15:bd:bd:72:b2:d7:df:5a:
         81:30:bc:d3:4b:5f:06:87:05:a4:79:f6:e3:16:ed:f0:f2:1a:
         cd:23:fe:5f:f4:0c:b2:7a:99:9a:be:11:0f:76:5f:8b:ec:96:
         61:e8:99:9f:de:82:30:7f:c8:01:82:4f:e2:9d:2b:4e:d0:6f:
         d6:5f:8a:ff:22:3a:01:b6:69:11:36:2e:59:c4:f1:18:41:69:
         e3:bf:f1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:21 2024 by rpki-client on console-ams.rpki-client.org