Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/23EA9A431B801C70D987D17DAC30F48448D22E50.cer
File:                     23EA9A431B801C70D987D17DAC30F48448D22E50.cer (raw, json)
Hash identifier:          yH/2ZAM8/4is9pXHvsRlxLFwODZKuh3ViGRwrNFCRyM=
Subject key identifier:   23:EA:9A:43:1B:80:1C:70:D9:87:D1:7D:AC:30:F4:84:48:D2:2E:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B2E81A2B37842B886987D3CFD39D8D29C6B1773
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/23EA9A431B801C70D987D17DAC30F48448D22E50.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 15 Jan 2024 14:00:16 +0000
Certificate not after:    Mon 13 Jan 2025 14:05:16 +0000
Subordinate resources:    AS: 266394
                          IP: 170.81.76.0/22
                          IP: 2804:372c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2e:81:a2:b3:78:42:b8:86:98:7d:3c:fd:39:d8:d2:9c:6b:17:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 15 14:00:16 2024 GMT
            Not After : Jan 13 14:05:16 2025 GMT
        Subject: CN=23EA9A431B801C70D987D17DAC30F48448D22E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:32:19:dc:de:09:42:86:d5:ac:3f:c4:51:e5:
                    e5:ab:7d:ef:b9:ed:95:87:84:01:c5:f6:29:b3:76:
                    fe:39:63:53:c0:d7:28:11:36:ac:b9:7c:35:b4:ea:
                    3b:52:39:21:bc:25:ce:5b:c2:e8:76:25:73:fe:4b:
                    9c:27:9f:96:7c:2a:3f:00:09:8d:45:99:ba:cc:da:
                    c5:db:e8:dd:5a:1d:36:76:34:92:d0:94:83:ad:36:
                    5d:2c:53:ab:d6:fe:f3:9d:81:3c:2b:d8:34:4a:64:
                    33:c8:6e:24:2a:ca:fb:b3:24:8f:74:bb:20:12:dd:
                    e2:af:18:df:b3:45:7d:c4:94:7c:04:d7:46:9f:9e:
                    5f:5a:d4:4e:00:c5:ab:e8:ee:69:ca:f4:54:ad:ab:
                    61:3d:29:47:31:7f:cf:3c:80:23:f7:c3:db:08:90:
                    5b:02:52:7f:6b:bc:18:19:49:28:ab:22:83:65:1f:
                    34:6e:bf:e5:d6:96:04:9d:bd:0a:b4:db:42:4a:01:
                    ee:22:23:3f:4f:b2:9e:a2:ae:26:05:41:d6:b6:e8:
                    1b:63:7a:0b:34:fe:b1:e1:3a:87:5a:e0:97:06:b2:
                    34:88:d9:82:21:85:cf:4e:4b:fe:b3:e7:c5:0e:b2:
                    bc:92:78:26:a7:b0:e4:49:99:c5:16:fd:0c:2e:8c:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                23:EA:9A:43:1B:80:1C:70:D9:87:D1:7D:AC:30:F4:84:48:D2:2E:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2Dfu4ka165NYmSU17Xix3TaVFWqn38YbutcxDAPZCLAf/0/23EA9A431B801C70D987D17DAC30F48448D22E50.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.76.0/22
                IPv6:
                  2804:372c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266394

    Signature Algorithm: sha256WithRSAEncryption
         a5:f6:30:d7:e9:15:ca:60:c9:46:d4:75:01:c4:89:e3:0c:f5:
         5a:37:5e:ca:22:64:f3:88:ed:46:c1:b9:d3:55:22:a7:b2:91:
         57:55:c1:ed:7d:94:4e:6a:26:8d:03:5c:96:65:3a:fc:63:82:
         96:6f:9b:d6:bd:ee:89:e3:97:ef:96:55:7d:2b:52:59:89:28:
         4d:75:c8:5d:44:eb:9d:1f:a9:73:0c:c1:bd:f0:87:3c:b7:f8:
         97:eb:ad:67:c1:5c:27:90:dd:a0:c8:46:26:19:6d:ce:d8:cc:
         cd:a0:99:eb:ae:bf:c0:c9:8c:d5:c0:be:af:b8:2f:74:41:9a:
         d1:0e:2a:de:6d:3d:93:06:3f:eb:71:0f:ce:21:38:f4:0f:02:
         04:0c:de:0d:16:ee:1b:ae:cb:38:c6:cb:b6:0d:14:75:19:90:
         ae:27:36:c3:8e:77:c7:ae:a3:86:39:6f:12:05:8b:83:61:14:
         6d:6c:1d:fb:e1:62:2c:1a:35:ae:19:27:2e:57:ff:67:73:31:
         60:32:fd:94:6b:57:07:7f:82:2d:19:fe:3d:7a:0f:e0:30:8d:
         52:ae:90:e5:17:4d:28:52:b9:44:06:59:57:ae:d3:68:ad:4f:
         96:02:6c:9b:a2:12:f0:35:c2:f9:48:3f:6f:c5:01:04:b3:40:
         76:79:b4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:13 2025 by rpki-client