Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/318D4DCFA494762EAD6051048B9A3488DEA4BE40.cer
File:                     318D4DCFA494762EAD6051048B9A3488DEA4BE40.cer (raw, json)
Hash identifier:          XlcFNHxsUxsyl7GjFHsQI0Rsl21cwwpg/5zljXt9/Ao=
Subject key identifier:   31:8D:4D:CF:A4:94:76:2E:AD:60:51:04:8B:9A:34:88:DE:A4:BE:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       078DD16F30E4F74FC56261D73C6A47E0F651607C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/318D4DCFA494762EAD6051048B9A3488DEA4BE40.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Oct 2022 20:30:20 +0000
Certificate not after:    Thu 12 Oct 2023 20:35:20 +0000
Subordinate resources:    AS: 264228
                          IP: 168.195.100.0/22
                          IP: 190.109.64.0/22
                          IP: 2804:2488::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:8d:d1:6f:30:e4:f7:4f:c5:62:61:d7:3c:6a:47:e0:f6:51:60:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 20:30:20 2022 GMT
            Not After : Oct 12 20:35:20 2023 GMT
        Subject: CN=318D4DCFA494762EAD6051048B9A3488DEA4BE40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:35:0c:59:02:b8:35:07:ad:4c:5f:bd:69:5f:
                    be:00:30:96:aa:23:80:1c:76:2d:40:9b:a3:03:5b:
                    3f:9b:b5:77:e2:67:72:87:9d:63:ec:69:27:86:c6:
                    05:f1:c6:9a:6d:d0:54:82:1a:2d:90:07:5d:40:0c:
                    40:45:fb:96:a4:aa:84:87:e9:00:73:84:f8:dd:55:
                    d6:1c:10:98:15:53:1b:14:fb:48:fd:37:2e:1f:d4:
                    4d:a9:77:57:a1:24:d5:99:35:cf:54:49:f5:1c:64:
                    4c:d7:4b:e6:05:1d:58:36:1e:0d:1a:da:4d:24:3d:
                    bd:53:07:88:4f:a1:d0:f7:97:03:f2:aa:96:67:30:
                    50:e3:92:e3:b6:5d:d3:1c:85:cd:eb:6e:6d:96:b3:
                    18:52:ca:58:10:4e:d7:4f:fd:69:77:8a:35:73:94:
                    2e:1e:e0:6f:67:ef:44:03:cc:84:75:d3:ce:a3:b4:
                    00:a7:d5:25:62:01:f9:75:ac:30:9c:2e:fe:27:e6:
                    e3:84:97:76:46:24:d2:1c:43:98:b1:32:8c:88:93:
                    d7:df:ee:78:63:b7:e0:32:96:17:a3:f2:eb:f6:dd:
                    39:58:ed:29:06:b1:14:46:4a:18:73:89:3b:c7:84:
                    92:22:9a:d2:9a:7d:c6:8b:6d:23:b2:84:57:dd:9e:
                    af:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                31:8D:4D:CF:A4:94:76:2E:AD:60:51:04:8B:9A:34:88:DE:A4:BE:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/1/318D4DCFA494762EAD6051048B9A3488DEA4BE40.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.100.0/22
                  190.109.64.0/22
                IPv6:
                  2804:2488::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264228

    Signature Algorithm: sha256WithRSAEncryption
         9e:22:07:e7:45:cf:f8:3f:11:9c:1b:c0:e0:60:6c:29:95:39:
         5a:de:69:77:86:2b:64:19:c3:f4:f1:38:bb:99:06:4c:60:b8:
         2c:e3:b6:21:ed:65:b1:df:11:66:11:dc:87:31:17:0c:49:4c:
         f4:52:6c:4b:5a:62:8c:2f:fb:26:df:9c:11:c9:3b:ad:fa:cd:
         a2:42:8b:3f:a7:7f:c1:9a:85:8c:62:39:7d:72:cd:fe:49:ed:
         53:52:0d:14:2f:75:4f:ed:98:76:7f:9c:22:7b:c2:4f:25:57:
         c8:a1:2b:20:cc:2b:73:a7:d4:dc:a6:4d:55:60:00:05:12:fd:
         96:41:26:30:39:14:c0:22:35:3c:f4:d2:4b:85:57:46:71:34:
         04:26:57:a7:af:3c:07:72:a7:d2:95:05:64:25:a6:6a:2f:67:
         76:38:34:32:e4:b9:14:af:f6:e0:9a:d5:2e:c9:3d:40:27:30:
         78:bb:ed:6b:91:7c:80:eb:1a:69:64:c7:67:87:9c:c1:7d:bf:
         e1:80:99:81:8e:b8:6c:1e:83:4e:b9:b7:db:5f:c0:e4:ec:3b:
         99:9e:6b:82:b2:db:e8:ba:f7:3b:c7:24:d8:d9:ed:44:09:b7:
         e3:12:a1:7b:b5:9d:1a:e7:44:dc:07:01:f9:55:77:54:0a:21:
         5b:57:02:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org