Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/24D8BCA9BF876E38F028369A0BE446ED24077B61.cer
File:                     24D8BCA9BF876E38F028369A0BE446ED24077B61.cer (raw, json)
Hash identifier:          qFb2WARZuAXP7u3AMdh8bvsr0E0ef9x29XPotCMheF0=
Subject key identifier:   24:D8:BC:A9:BF:87:6E:38:F0:28:36:9A:0B:E4:46:ED:24:07:7B:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       244D6120935F53DAE295BDA08859A1FE67A2E648
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/24D8BCA9BF876E38F028369A0BE446ED24077B61.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 Jan 2024 13:53:51 +0000
Certificate not after:    Thu 23 Jan 2025 13:58:51 +0000
Subordinate resources:    AS: 271007
                          IP: 170.254.236.0/22
                          IP: 2804:74d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4d:61:20:93:5f:53:da:e2:95:bd:a0:88:59:a1:fe:67:a2:e6:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 25 13:53:51 2024 GMT
            Not After : Jan 23 13:58:51 2025 GMT
        Subject: CN=24D8BCA9BF876E38F028369A0BE446ED24077B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:fc:bc:4a:1e:43:d2:3e:94:08:ef:e8:83:d6:
                    8a:e2:f0:fb:9a:79:f8:81:01:89:b2:98:e3:b7:71:
                    2e:d6:90:d5:23:f6:88:5c:93:61:ff:dd:e0:08:2d:
                    c5:00:73:8c:09:f5:bb:31:36:a0:b9:e8:5b:f4:67:
                    04:f4:37:f0:bd:49:a9:ca:7b:e4:a2:f0:fd:2e:32:
                    a8:8b:11:26:5a:05:4f:e4:a5:55:bd:61:07:c2:83:
                    a4:9a:2d:8d:a1:8f:d7:6c:b6:40:3c:e9:00:0a:c9:
                    41:84:7f:dd:a9:e6:9f:27:ce:71:ce:be:c4:06:f8:
                    47:6c:7a:95:04:85:31:ef:ba:5a:98:0c:07:17:6d:
                    12:9c:2c:8b:c4:fd:52:64:bc:ea:69:30:59:a3:2a:
                    f3:11:13:45:23:58:c9:15:72:13:de:4d:85:bb:cc:
                    a7:97:de:e6:8c:09:6b:f0:41:00:b0:5f:13:5e:c2:
                    c7:df:e9:34:f1:71:bb:dc:d6:58:a2:1e:4d:5e:0e:
                    d3:5e:9d:ad:10:58:75:d1:65:d6:70:42:54:9a:be:
                    5e:c1:c3:79:46:05:07:46:69:27:e7:7e:4d:e9:b2:
                    b0:e9:ba:14:0a:86:79:9c:15:92:cc:07:8d:fc:86:
                    00:26:02:89:b3:8a:34:f8:2a:25:fb:a6:8a:b8:f1:
                    ba:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                24:D8:BC:A9:BF:87:6E:38:F0:28:36:9A:0B:E4:46:ED:24:07:7B:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AkQsPZ9vdp2ANWRof7Nf2kwmpJqrhHXvSCyubLRe7Fw3/0/24D8BCA9BF876E38F028369A0BE446ED24077B61.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.236.0/22
                IPv6:
                  2804:74d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271007

    Signature Algorithm: sha256WithRSAEncryption
         45:cd:73:40:fb:99:07:21:60:e7:37:f5:e2:b4:e2:63:be:1c:
         dc:2e:2a:e1:91:81:34:16:19:92:28:8b:33:3f:f4:c5:cb:76:
         09:05:e5:f4:c1:ae:be:7a:47:61:13:a6:e0:ba:d7:db:52:d6:
         11:06:95:42:f7:71:66:f7:b0:17:34:48:04:95:87:b7:44:4c:
         d3:83:d3:b6:2e:10:6a:4b:ef:4b:8a:7d:59:55:85:33:05:80:
         3a:19:b1:5d:cf:b1:50:2a:26:2a:91:87:2c:30:6a:a7:71:62:
         89:8e:63:50:82:1a:c5:a9:91:5c:0e:db:41:ab:c5:f2:07:b3:
         37:cd:f8:9b:31:ea:0c:89:00:24:31:05:62:95:b0:33:ed:4e:
         b1:a0:5e:3b:b7:7c:4c:4b:33:55:2f:dd:be:c5:14:b9:59:3f:
         68:be:a8:26:f4:59:f2:6f:72:33:42:e9:83:b6:27:d9:61:3a:
         8c:2f:eb:e8:0c:bf:61:30:f4:58:a0:17:cf:24:a3:cd:25:8a:
         eb:a0:7a:37:11:15:25:81:58:87:6e:7b:42:2a:0a:67:d2:ed:
         8c:6d:11:62:69:cf:cf:ce:ca:2d:74:fd:6c:81:06:e4:86:f0:
         b4:9d:c7:c7:93:ce:b2:9e:bc:39:ce:2f:8d:0c:48:47:97:44:
         bd:86:62:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org