Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer
File:                     28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.cer (raw, json)
Hash identifier:          8zTIyRhTrgLjk86ORO9LzUbq6a7UtA90VsBzz7eDyqc=
Subject key identifier:   28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       593F0BD4D46704979E01D3A7A5D259446BAA5478
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 11:50:15 +0000
Certificate not after:    Thu 30 May 2024 11:55:15 +0000
Subordinate resources:    AS: 28264
                          IP: 177.22.240.0/21
                          IP: 179.124.0.0/21
                          IP: 187.17.176.0/20
                          IP: 2804:130::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3f:0b:d4:d4:67:04:97:9e:01:d3:a7:a5:d2:59:44:6b:aa:54:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  1 11:50:15 2023 GMT
            Not After : May 30 11:55:15 2024 GMT
        Subject: CN=28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9d:dc:35:e9:87:5c:a1:3d:e9:76:f9:7b:37:
                    9a:a3:1e:32:50:2c:7a:b3:fc:ea:0f:09:74:4b:9b:
                    15:be:fb:2d:86:a5:bf:42:9d:0e:dc:2f:c0:ce:a9:
                    72:df:7b:e8:f6:1e:d1:b6:40:31:26:04:fa:a3:c7:
                    c2:ce:ad:09:a4:fd:48:c9:b0:4d:eb:04:69:40:a9:
                    3e:cc:9f:63:98:60:d9:ec:c7:fb:be:26:30:93:8e:
                    6c:d8:c5:47:ec:ac:08:86:3e:30:73:8b:d7:1d:fd:
                    41:43:00:07:ff:fb:fd:5a:df:e5:18:a1:2f:18:fb:
                    06:5d:84:3e:c2:52:ff:e9:25:83:5b:5c:4e:e0:ba:
                    5b:51:11:a2:0e:be:0a:ed:2c:36:be:6d:85:ac:c9:
                    cf:37:c5:09:ec:18:ea:bb:00:36:ce:9e:7f:f3:df:
                    67:48:2a:b7:d8:2c:a4:8d:3f:a9:e8:78:c7:f7:f4:
                    3e:cc:77:e7:b9:06:b1:b9:97:81:e9:90:ce:95:96:
                    b0:40:fe:d6:e5:11:dd:96:71:be:4e:29:44:0f:d1:
                    53:11:db:98:68:da:05:86:12:82:e9:2e:92:78:5e:
                    6a:6d:d2:23:a7:b9:c9:a2:e0:b4:e3:f1:5e:b6:45:
                    69:ff:34:fe:fa:41:be:15:d5:1c:ed:72:d6:21:aa:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                28:F2:1F:17:4B:29:1C:E2:F7:F9:20:E2:42:2D:1D:C6:AF:FF:CD:6C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EdwGNgQ4gXq8wBTNHfhNrG4QU2NzJZgCRvvz93QP8yXm/0/28F21F174B291CE2F7F920E2422D1DC6AFFFCD6C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.240.0/21
                  179.124.0.0/21
                  187.17.176.0/20
                IPv6:
                  2804:130::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28264

    Signature Algorithm: sha256WithRSAEncryption
         a2:4a:39:b2:9e:5f:59:2e:0a:19:51:7e:58:56:76:52:6d:39:
         c9:9b:a0:9e:a7:50:dd:cd:c3:71:5e:3f:e2:18:75:f6:ea:a9:
         25:c4:78:7b:3f:f4:d4:34:ca:5d:f8:33:ad:1e:23:46:ee:50:
         31:48:32:a8:e9:d2:21:a7:72:bc:f5:fc:53:d8:4e:05:18:21:
         4f:5f:c1:47:8d:1a:27:5f:fd:05:c7:06:ec:9c:88:da:0b:84:
         70:29:66:22:c1:62:a7:2d:8a:4f:9c:64:4c:2c:22:d6:80:b6:
         74:45:dd:f6:e1:43:59:df:99:6a:c9:55:73:be:6b:33:bb:24:
         4d:42:32:2a:c7:53:76:ab:bf:1b:96:f2:96:9a:a0:aa:fd:ab:
         e3:f3:ae:6a:96:b9:8a:04:cd:0a:de:82:a2:32:31:1c:51:4c:
         59:31:b2:21:04:63:02:cc:f2:eb:71:f1:dd:44:72:fb:43:05:
         22:e9:aa:b2:71:88:3e:30:98:03:25:6b:de:13:0a:7c:5e:97:
         5e:12:ef:9a:e3:57:89:3b:c3:49:5a:d7:c2:c5:b4:fa:85:d8:
         43:24:78:59:ec:12:e9:a5:06:01:68:a2:0d:29:6d:e3:69:cb:
         d1:c0:8c:ea:75:b2:f0:77:5d:17:a4:d5:ff:e6:13:89:96:3c:
         68:2a:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:37 2024 by rpki-client on console-ams.rpki-client.org