Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/24C0C154980B1116A9062AE924B9DF7EB8CEA165.cer
File:                     24C0C154980B1116A9062AE924B9DF7EB8CEA165.cer (raw, json)
Hash identifier:          CarUcRlsMALLnHuz75PZeNciqKk9fhSu5qCWGR8ySIM=
Subject key identifier:   24:C0:C1:54:98:0B:11:16:A9:06:2A:E9:24:B9:DF:7E:B8:CE:A1:65
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74BCDEEB24B24ABCDBC47C3CA56B9924207422AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/24C0C154980B1116A9062AE924B9DF7EB8CEA165.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 15:27:12 +0000
Certificate not after:    Thu 11 Jul 2024 15:32:12 +0000
Subordinate resources:    AS: 267396
                          IP: 45.233.200.0/22
                          IP: 2804:4cd8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:bc:de:eb:24:b2:4a:bc:db:c4:7c:3c:a5:6b:99:24:20:74:22:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 13 15:27:12 2023 GMT
            Not After : Jul 11 15:32:12 2024 GMT
        Subject: CN=24C0C154980B1116A9062AE924B9DF7EB8CEA165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:42:44:1d:35:66:c1:48:ba:6a:0a:1c:2f:42:
                    68:de:2e:13:30:85:91:55:b8:64:9a:c9:85:68:9b:
                    0c:0e:07:27:6d:d6:b1:e3:4f:f4:c0:96:42:03:62:
                    5b:42:22:16:64:dd:3e:1a:b0:05:75:92:22:d5:51:
                    4c:70:2d:9c:16:da:f0:73:3b:cd:60:52:25:56:34:
                    1d:23:6f:0f:02:50:c6:ac:d5:28:7e:c1:d2:c7:30:
                    5d:50:19:6b:fe:cc:34:20:53:6f:e0:f8:ad:35:4c:
                    58:fd:c4:d3:dd:b7:69:0c:15:51:36:61:f4:9b:53:
                    99:0d:eb:dc:b7:46:c6:83:77:ea:9f:8f:e1:8b:ce:
                    fb:88:ba:c6:0c:fc:ed:0c:45:9e:c7:3a:17:b0:0b:
                    8b:95:da:56:d4:5a:77:58:b1:94:2c:2b:e5:c1:0f:
                    46:93:d8:39:e4:b7:12:91:7b:c7:3d:a8:81:7f:8a:
                    5e:92:21:aa:40:ed:ba:4f:b9:97:67:97:0e:7a:d9:
                    b6:0e:39:9f:5f:43:f1:fc:f8:4c:23:e9:ec:6a:f2:
                    4c:a2:d9:c6:87:08:40:6a:be:34:d2:45:95:60:44:
                    c5:66:c3:f3:2f:fa:87:67:6c:b4:89:40:49:cd:6d:
                    de:e5:61:2d:6d:52:83:d1:67:99:2b:dd:39:29:f7:
                    c6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:C0:C1:54:98:0B:11:16:A9:06:2A:E9:24:B9:DF:7E:B8:CE:A1:65
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HGjMS22p4HBnxKqABPqp396vcpsvLn1xgvDhRAwkLU3S/0/24C0C154980B1116A9062AE924B9DF7EB8CEA165.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.200.0/22
                IPv6:
                  2804:4cd8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267396

    Signature Algorithm: sha256WithRSAEncryption
         69:b7:7b:22:4a:74:c1:19:a4:b5:8f:4d:69:55:24:88:14:6c:
         c4:f9:e5:cf:5b:1d:13:86:9d:58:87:91:ee:36:39:e7:c0:95:
         81:3c:c3:81:cd:25:41:d1:14:7f:1e:00:90:4b:4a:05:91:d8:
         66:17:ac:7d:23:81:5b:1c:d1:82:0c:2c:c2:cd:d3:e8:1e:8f:
         6b:6f:3d:aa:78:eb:3f:ab:64:0d:37:1c:8d:c0:f5:f8:14:e9:
         a0:f7:b5:dc:ce:7f:e9:37:61:69:83:bb:e6:5d:f5:c5:9d:75:
         b7:be:05:b5:24:9d:b3:2c:24:60:c8:2d:ec:1e:7b:67:38:88:
         40:52:ca:97:f5:94:d4:94:41:f4:5c:21:90:0f:64:cf:57:d1:
         96:2c:6f:55:eb:41:64:90:1c:7f:4a:74:f4:96:91:68:f9:fe:
         46:9b:56:4a:3e:de:52:fb:71:88:29:ef:87:41:a2:6d:a5:00:
         dc:98:3d:f6:26:41:2c:e8:56:05:98:e7:c3:5d:8e:cb:ed:cf:
         da:d6:9a:b6:22:8f:c3:02:08:86:d1:ac:39:7d:13:94:54:77:
         40:e6:58:e7:cb:c3:98:9d:7f:37:73:23:71:86:ad:2c:bc:f4:
         3e:32:1d:b9:31:65:51:1b:e8:4f:df:b5:cc:db:5a:43:c8:45:
         f2:61:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org