Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/2801F3AE55B11BBF2516320C3B2AA65997A085FF.cer
File:                     2801F3AE55B11BBF2516320C3B2AA65997A085FF.cer (raw, json)
Hash identifier:          esB1/aWCmhOlk8Daa2cRqmt0R7ATEtkeFKelhGHTkrc=
Subject key identifier:   28:01:F3:AE:55:B1:1B:BF:25:16:32:0C:3B:2A:A6:59:97:A0:85:FF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       605D1BAACACAE235939E72C0966D55BA0F630477
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/2801F3AE55B11BBF2516320C3B2AA65997A085FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 19:32:23 +0000
Certificate not after:    Thu 18 Apr 2024 19:37:23 +0000
Subordinate resources:    AS: 266375
                          IP: 170.80.52.0/22
                          IP: 2804:36d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:5d:1b:aa:ca:ca:e2:35:93:9e:72:c0:96:6d:55:ba:0f:63:04:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 20 19:32:23 2023 GMT
            Not After : Apr 18 19:37:23 2024 GMT
        Subject: CN=2801F3AE55B11BBF2516320C3B2AA65997A085FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:19:ba:21:78:88:2a:d4:e2:b3:ba:8f:20:
                    e2:35:f9:fa:79:96:3b:e6:cd:65:b9:59:53:af:f2:
                    be:9d:be:b0:27:a8:83:cc:a3:e5:b1:29:fb:57:8a:
                    c6:dd:c5:3f:fd:a4:a0:e7:cb:e5:04:b5:e2:6b:58:
                    28:6f:43:0c:91:6c:6c:8f:13:6d:52:8c:68:46:b9:
                    a7:6d:8d:1e:b2:ef:c2:f8:6e:87:1f:7a:f5:aa:7f:
                    1a:04:6a:6c:3e:b8:85:65:f5:fa:31:05:8d:11:5d:
                    53:81:5a:cf:9b:95:ff:74:cf:d8:36:81:d0:37:2f:
                    07:9d:87:aa:9d:5b:71:cd:f5:dc:ee:86:ed:0d:2c:
                    d8:04:b0:67:96:17:9e:ef:fa:6b:2e:27:88:4e:b9:
                    cf:cd:c1:b7:94:5a:41:a4:d9:bd:de:79:01:70:ad:
                    f0:48:27:15:77:e6:f6:3d:fb:7a:48:1a:e0:b3:fc:
                    9b:5e:65:c6:4a:9b:3a:e3:ae:38:8d:5b:42:f1:f4:
                    a8:27:73:a4:34:16:0f:09:cd:a5:63:f7:de:25:82:
                    c9:a8:f4:d4:6e:39:d9:5f:ed:56:54:b0:be:f7:e9:
                    6c:ea:d3:0e:62:38:41:f6:73:29:31:11:18:51:a0:
                    8b:e5:40:d6:16:41:87:c1:48:be:22:1d:2e:eb:01:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:01:F3:AE:55:B1:1B:BF:25:16:32:0C:3B:2A:A6:59:97:A0:85:FF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/F58Vor2eSQ1f18YGaqhimNdjyYoHnQKyKv8Wjyn68F76/0/2801F3AE55B11BBF2516320C3B2AA65997A085FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.52.0/22
                IPv6:
                  2804:36d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266375

    Signature Algorithm: sha256WithRSAEncryption
         60:14:77:70:dc:8d:e1:39:16:13:78:5c:9c:9b:23:90:09:e4:
         cd:04:3b:f7:d9:d7:35:75:5c:16:b5:a4:88:32:1c:cb:78:28:
         17:e7:ab:6c:89:eb:ba:a7:49:bc:49:38:3a:5e:3e:a0:75:38:
         13:ac:98:93:56:e2:68:e7:60:6e:70:69:d5:e5:13:30:24:dc:
         29:15:08:7d:57:d5:68:a9:f1:2c:57:f1:eb:1a:4c:47:f9:f4:
         09:92:d9:c2:21:a3:b7:c1:ed:77:50:ba:dd:ec:17:e1:b4:3e:
         ea:f4:ce:61:c1:31:b3:db:a1:9e:d6:4a:23:fd:c7:37:9a:3f:
         90:02:1a:fb:57:fd:65:a5:a3:af:e7:46:96:7b:f5:5e:2e:92:
         f7:0c:8d:61:7a:46:f2:e7:d1:e6:3d:a3:a6:a0:92:c0:92:09:
         47:ea:df:ad:f5:cd:2b:15:99:52:5a:1d:eb:1e:20:29:fa:32:
         ba:8c:ac:c0:94:59:8b:14:d4:23:b1:69:3f:61:f0:f1:ab:21:
         67:ae:bd:19:d8:e6:58:78:41:f9:fb:51:0b:78:cf:07:8b:fc:
         34:b9:95:e6:58:ff:80:07:91:53:f8:48:1a:66:64:1b:97:a5:
         f3:78:9c:6a:e2:66:89:6e:5c:58:05:e5:55:09:62:b7:7d:a5:
         02:3b:66:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org