Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/28099F655F9326704CA106B9B86F52E88D393F7B.cer
File:                     28099F655F9326704CA106B9B86F52E88D393F7B.cer (raw, json)
Hash identifier:          6vwoh9XuOZkdneGsIAzHd0UWfYv7XWCQO7OjtodfCRA=
Subject key identifier:   28:09:9F:65:5F:93:26:70:4C:A1:06:B9:B8:6F:52:E8:8D:39:3F:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       274103DE8BE51ADECC1B0B712B4C50D7B459D455
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/69P6RGriXpSCLpycFEQtzZ7JWJTrf1vGr8KuztDkZGXi/0/28099F655F9326704CA106B9B86F52E88D393F7B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/69P6RGriXpSCLpycFEQtzZ7JWJTrf1vGr8KuztDkZGXi/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 30 Nov 2022 19:54:37 +0000
Certificate not after:    Wed 29 Nov 2023 19:59:37 +0000
Subordinate resources:    AS: 269475
                          IP: 45.187.176.0/22
                          IP: 2804:6534::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:41:03:de:8b:e5:1a:de:cc:1b:0b:71:2b:4c:50:d7:b4:59:d4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 30 19:54:37 2022 GMT
            Not After : Nov 29 19:59:37 2023 GMT
        Subject: CN=28099F655F9326704CA106B9B86F52E88D393F7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:b3:c7:e4:f3:88:9a:b8:52:5c:0e:6a:be:
                    05:39:71:27:19:3a:4a:cc:53:6a:cb:3c:5e:88:0a:
                    46:63:00:07:bc:ab:2d:c2:ad:bd:ed:86:cd:dc:14:
                    04:e7:95:ca:ac:43:8b:69:92:1d:c5:26:2b:c9:e7:
                    02:01:37:14:f6:5c:50:03:3f:c1:5a:6d:c9:9d:41:
                    85:9c:73:fe:e7:07:e5:31:4c:4c:9b:02:9f:b7:9f:
                    61:de:e2:42:0b:3b:83:ce:0a:99:48:57:40:6d:73:
                    37:72:e7:18:14:42:9d:d6:52:66:24:30:02:7c:88:
                    93:c5:20:ec:77:2e:99:74:9a:c5:98:47:cd:99:57:
                    cd:c5:8b:a9:70:f5:c9:35:ed:02:67:d2:a4:f8:ea:
                    bd:1d:19:3b:98:f9:3a:85:57:70:58:04:93:f2:68:
                    03:81:ab:e8:1b:1a:0d:72:5f:fc:be:62:5f:c3:be:
                    3e:91:2d:88:95:b7:d1:9a:27:1f:84:60:0f:6e:35:
                    fe:9c:7f:f5:d5:7b:a2:8d:92:f8:5e:9a:2d:5b:ac:
                    55:f7:7b:42:b3:df:52:4d:57:3a:09:c3:bb:94:e9:
                    a4:e1:bc:1c:83:95:96:b5:be:e2:7d:4a:a8:94:36:
                    dd:9a:dc:3a:a9:d3:38:e2:77:19:35:57:db:0f:b4:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:09:9F:65:5F:93:26:70:4C:A1:06:B9:B8:6F:52:E8:8D:39:3F:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/69P6RGriXpSCLpycFEQtzZ7JWJTrf1vGr8KuztDkZGXi/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/69P6RGriXpSCLpycFEQtzZ7JWJTrf1vGr8KuztDkZGXi/0/28099F655F9326704CA106B9B86F52E88D393F7B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.176.0/22
                IPv6:
                  2804:6534::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269475

    Signature Algorithm: sha256WithRSAEncryption
         22:c9:a0:bc:85:94:94:31:ce:b8:ca:b5:81:69:03:f2:d3:9c:
         25:73:ee:b3:2e:df:ef:af:5d:14:a1:da:5b:8f:ae:58:3b:c5:
         4c:f4:9a:19:0f:18:04:ba:c3:96:ac:66:1c:84:03:45:fc:c0:
         35:1d:96:98:67:3b:dd:0f:83:fe:78:3b:f2:f0:c2:d7:7e:90:
         a1:da:dc:41:05:65:ce:4a:88:e0:14:1f:00:ae:18:7e:8d:00:
         ee:ee:f8:bd:92:fb:98:7b:b0:91:62:77:7e:f9:bc:48:e7:ed:
         67:35:15:7b:b8:5e:95:dc:ca:ab:d0:92:aa:16:5f:e8:3b:fa:
         9d:f0:13:69:49:e2:e5:69:e6:55:61:1c:d8:bc:8a:58:30:2a:
         c2:9c:f1:2c:d3:b9:7e:ed:72:7e:95:3b:66:c4:b9:3c:82:b6:
         4e:12:3e:4e:ad:0f:bd:bb:ca:97:f2:ea:93:a3:78:42:25:7d:
         fe:36:5e:07:b9:7e:09:e2:16:d7:73:27:73:79:3c:1d:bf:ce:
         ff:5a:cc:b6:66:4e:8f:26:65:74:57:fc:88:9b:22:35:d1:48:
         2b:e2:e7:0b:40:f8:49:f8:db:60:83:7c:82:d7:d7:50:5d:bb:
         8f:7f:e6:e9:db:9b:4a:05:b6:d4:4c:2b:e5:30:bc:62:fc:1a:
         d8:ec:ff:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:17 2024 by rpki-client on console-fra.rpki-client.org