Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/25B1765BE1196A916D606610E67447F8241DF008.cer
File:                     25B1765BE1196A916D606610E67447F8241DF008.cer (raw, json)
Hash identifier:          mE7PTZa53kR2ezLUq54rTf/3Fif2MeiV8VIm0ay2l58=
Subject key identifier:   25:B1:76:5B:E1:19:6A:91:6D:60:66:10:E6:74:47:F8:24:1D:F0:08
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       36B3D53D0DB37526303500A7A673A570489954AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/25B1765BE1196A916D606610E67447F8241DF008.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Sep 2023 11:15:10 +0000
Certificate not after:    Tue 24 Sep 2024 11:20:10 +0000
Subordinate resources:    AS: 272262
                          IP: 2804:8478::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b3:d5:3d:0d:b3:75:26:30:35:00:a7:a6:73:a5:70:48:99:54:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 11:15:10 2023 GMT
            Not After : Sep 24 11:20:10 2024 GMT
        Subject: CN=25B1765BE1196A916D606610E67447F8241DF008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:2b:24:d1:b3:6d:51:5f:77:df:63:3e:23:
                    e9:2c:f1:39:b4:43:76:e0:73:75:ff:16:95:95:8f:
                    31:80:8e:79:48:f7:52:3f:71:91:bb:e6:44:9b:31:
                    c1:e4:94:32:95:51:08:52:12:7e:6f:ae:54:c7:af:
                    37:85:cf:67:68:50:0d:76:29:6c:62:38:7d:26:e8:
                    07:d3:b0:b6:96:a7:01:24:28:41:a5:36:71:b4:55:
                    93:37:21:b2:f4:16:d7:fc:61:6a:d2:20:3e:eb:90:
                    a5:28:a0:ac:29:d1:d9:52:87:ad:89:04:b6:de:d8:
                    fb:f3:f6:73:aa:ee:56:63:55:c2:92:c1:6c:a6:e2:
                    b2:bb:4b:79:09:9a:82:75:b8:20:b4:49:a0:21:8a:
                    d9:ec:d8:0f:69:da:bb:92:62:ec:1e:ca:2a:fa:af:
                    94:8a:17:dc:19:ef:49:7f:36:fd:bb:12:2f:a2:80:
                    1f:d3:92:b2:d6:0a:00:ab:a8:f5:ec:5a:36:88:81:
                    9f:c9:1d:0f:2c:b2:e2:d1:7b:db:04:fb:c8:77:a3:
                    53:7c:b2:ec:42:bf:1a:bb:f9:0c:ad:4f:64:97:3c:
                    8f:35:7c:7a:4c:5b:27:05:ea:c6:b3:c0:35:f0:f0:
                    c7:06:dd:70:f4:da:79:e4:ac:a8:99:dd:f2:44:7a:
                    7c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                25:B1:76:5B:E1:19:6A:91:6D:60:66:10:E6:74:47:F8:24:1D:F0:08
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BznALgRqg4juQdGxXZ8EEgJSmaHdqsKYgcdAtzezSpFx/0/25B1765BE1196A916D606610E67447F8241DF008.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8478::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272262

    Signature Algorithm: sha256WithRSAEncryption
         9f:35:01:41:b0:81:5a:ae:7f:34:0f:7f:06:f7:7b:4b:4e:af:
         b7:98:6a:4f:f4:0a:a1:99:dd:9f:fc:93:05:bc:39:42:1b:c9:
         4c:28:26:c1:0f:bc:64:43:af:37:ca:d3:55:b2:51:67:76:06:
         34:9a:0a:c1:59:d7:18:5f:ac:81:c7:24:4e:14:42:f6:f2:3a:
         16:71:b4:00:f4:1b:09:b0:5b:80:aa:2b:c1:3d:cf:e6:d5:18:
         23:4f:a5:f7:a3:aa:66:88:65:98:40:79:d1:58:cc:35:99:e0:
         fa:ca:9c:18:88:c2:dc:a0:e5:cf:05:a1:fe:35:2a:8b:c0:4c:
         c5:fe:9b:b0:d1:56:b9:fd:a0:57:1e:45:4e:2c:42:a3:65:f7:
         f6:00:47:2c:99:1a:57:dd:2a:20:e0:b4:50:52:96:37:76:dc:
         8e:bf:30:c4:05:53:28:8d:25:77:e8:b1:28:6a:9b:68:da:df:
         e3:6f:5e:b6:31:4a:f8:50:0d:1a:a6:cc:00:d8:07:32:5a:d2:
         3d:9a:1c:44:10:cd:48:9c:7d:49:22:28:a5:ca:a4:76:e7:d5:
         6a:56:bf:68:20:ff:cf:6d:d6:67:85:83:41:6e:ed:52:d0:3a:
         42:bd:52:54:f1:c8:74:d7:2f:ed:1a:7d:e3:3b:a7:93:16:d8:
         a0:6a:04:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org