Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2790140A9257D513DE89FD90294D5486CFE3591A.cer
File:                     2790140A9257D513DE89FD90294D5486CFE3591A.cer (raw, json)
Hash identifier:          UHPZxhPAJtHZ2NGCgI1W0unyqIYNuNtO60usUwTmVe0=
Subject key identifier:   27:90:14:0A:92:57:D5:13:DE:89:FD:90:29:4D:54:86:CF:E3:59:1A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       74B29000499AF82D7FC0274EDE5BFC6C914A0978
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/2790140A9257D513DE89FD90294D5486CFE3591A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Feb 2023 20:50:23 +0000
Certificate not after:    Thu 15 Feb 2024 20:55:23 +0000
Subordinate resources:    AS: 265487
                          IP: 168.197.144.0/22
                          IP: 2804:34e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:b2:90:00:49:9a:f8:2d:7f:c0:27:4e:de:5b:fc:6c:91:4a:09:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 20:50:23 2023 GMT
            Not After : Feb 15 20:55:23 2024 GMT
        Subject: CN=2790140A9257D513DE89FD90294D5486CFE3591A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0d:6f:78:9e:8e:64:5d:6b:3f:b5:aa:29:3e:
                    78:45:7c:0e:54:0a:01:09:30:78:ad:3c:5c:5f:d1:
                    bc:1e:14:44:93:b0:9b:3e:cd:c2:d0:40:4d:5f:88:
                    1e:e3:bc:13:d1:54:15:f7:62:4f:8d:bc:74:9d:a1:
                    58:89:7d:6f:7c:f9:e6:42:34:ff:4e:01:24:20:9a:
                    65:0e:a8:a5:2b:37:02:f3:70:df:22:51:10:32:f5:
                    52:c0:62:6a:58:ea:f7:b7:1e:2f:14:ea:dc:5f:8e:
                    35:41:39:97:8a:81:a2:df:28:ff:d4:b2:04:a9:0c:
                    45:4e:d4:54:b5:4e:65:7f:3d:a7:6c:70:04:83:cc:
                    0c:18:58:37:e6:a8:ff:19:8a:04:81:03:95:f1:bc:
                    71:a0:ff:fa:8f:7f:b5:57:36:65:f0:ca:33:78:00:
                    0a:3f:c4:53:3c:0a:76:9c:2f:e7:08:c2:02:1a:a4:
                    77:a4:ad:6a:80:c6:86:88:3a:d5:7c:64:71:bc:e0:
                    2a:d4:3c:6b:10:d8:1b:6f:b7:be:0f:03:42:89:a9:
                    3f:6c:34:df:fb:88:fb:a3:79:30:ca:68:93:04:76:
                    98:89:eb:ed:bb:b9:5b:62:6f:f5:d1:05:2e:0d:a3:
                    3f:2c:ae:0e:56:67:9b:38:33:a5:04:ad:e9:69:60:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                27:90:14:0A:92:57:D5:13:DE:89:FD:90:29:4D:54:86:CF:E3:59:1A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8H178CJ5Vwb6DSqmzgSFzh715T1s7eoCUBNNwBKTGZUc/0/2790140A9257D513DE89FD90294D5486CFE3591A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.144.0/22
                IPv6:
                  2804:34e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265487

    Signature Algorithm: sha256WithRSAEncryption
         78:49:5b:38:7a:be:7b:17:5f:dc:74:26:49:58:89:1b:c7:de:
         8e:e7:17:ae:29:cd:ff:04:15:30:79:1c:d2:0a:1b:ec:91:75:
         f2:f4:0a:4e:e3:f0:b6:24:0d:ea:4a:a8:15:d9:88:5d:64:48:
         01:5c:34:ae:fb:4c:a0:ed:f6:cd:93:46:80:90:6d:c8:de:92:
         02:24:a9:ac:16:59:99:75:fe:40:b0:0b:0b:5f:66:dc:3b:61:
         b0:d6:c0:06:98:1c:68:e9:76:87:88:4c:56:60:b0:44:94:68:
         5e:40:5c:1d:71:08:62:45:4c:f4:0f:56:ae:e2:9f:8d:1c:76:
         eb:cf:e6:21:db:f5:06:21:99:ff:82:72:71:55:04:b5:43:85:
         13:ee:03:68:4f:20:2d:a5:3a:63:4c:c2:97:82:a9:bb:54:92:
         d1:54:c7:fc:60:8c:25:66:c1:87:d5:d4:a0:9a:32:27:b9:06:
         f3:08:61:28:e3:21:af:de:cc:00:93:80:01:aa:5a:c0:34:9f:
         c0:d8:e7:84:66:12:1d:5d:97:cf:bc:02:d4:a9:72:96:55:22:
         02:2d:ef:f0:00:f0:b9:f5:a1:c5:dd:af:6b:6c:a8:25:86:e3:
         d8:e3:01:a3:45:6a:b9:01:2b:72:2d:cc:28:23:89:2e:cc:87:
         34:49:3d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org