Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.cer
File:                     32B0E6548F3A2FFBFDFF7091C549B32A759B6617.cer (raw, json)
Hash identifier:          5fv2tZljiHuuo1+wwZvRWQv0jjXiVsuWH+oSJmRKJsc=
Subject key identifier:   32:B0:E6:54:8F:3A:2F:FB:FD:FF:70:91:C5:49:B3:2A:75:9B:66:17
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58704C161490894898765DBC2400D675E89DAA15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 14:11:45 +0000
Certificate not after:    Thu 12 Dec 2024 14:16:45 +0000
Subordinate resources:    AS: 269036
                          IP: 45.178.172.0/22
                          IP: 177.107.31.0/24
                          IP: 190.83.43.0/24
                          IP: 200.188.218.0/23
                          IP: 2804:5e7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:70:4c:16:14:90:89:48:98:76:5d:bc:24:00:d6:75:e8:9d:aa:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 14:11:45 2023 GMT
            Not After : Dec 12 14:16:45 2024 GMT
        Subject: CN=32B0E6548F3A2FFBFDFF7091C549B32A759B6617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:63:89:79:cb:17:ab:52:07:4e:ca:5b:a0:bd:
                    47:7a:20:7b:ed:b4:84:1c:f6:29:12:bf:9d:98:35:
                    93:2d:01:86:38:d6:ab:1f:5e:f7:ef:ae:8c:c0:2f:
                    1c:51:82:10:e8:fb:4d:75:d4:aa:dc:33:bc:bf:18:
                    27:ee:9c:5a:3a:4c:82:c1:c0:ad:4c:c1:47:da:28:
                    6c:b8:3b:36:9b:a0:fb:7e:49:88:65:84:0c:b6:17:
                    31:ca:e1:0a:a9:39:97:17:c8:dc:33:6c:15:20:14:
                    da:54:ea:b6:1e:51:ea:32:47:a4:8c:64:03:c7:3b:
                    40:3e:0b:b2:a0:fa:92:34:cf:47:6e:a8:fa:43:d2:
                    e6:13:08:10:c2:a8:b2:bf:d5:30:69:74:f4:ad:51:
                    d6:dd:8d:35:3c:ae:8a:5d:0a:3a:19:e1:28:72:06:
                    6b:38:32:3d:38:03:6c:10:98:dc:f2:55:82:e1:23:
                    1e:ee:8a:bf:c2:fa:91:61:a9:6a:5a:23:15:c6:0e:
                    36:85:bf:f3:e6:8f:44:06:f6:da:81:dd:19:a3:5c:
                    e4:b8:3f:de:6e:40:43:45:fc:67:14:6c:29:65:db:
                    16:61:90:fc:a2:fb:b4:97:b4:e5:61:10:16:3a:52:
                    b9:45:a6:59:cf:79:fd:69:0a:d9:ff:04:59:62:2e:
                    02:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                32:B0:E6:54:8F:3A:2F:FB:FD:FF:70:91:C5:49:B3:2A:75:9B:66:17
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8SFkxGm1makxA9R1tiev1K9jkKkUKMrmgqRuzB1BZCZn/0/32B0E6548F3A2FFBFDFF7091C549B32A759B6617.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.172.0/22
                  177.107.31.0/24
                  190.83.43.0/24
                  200.188.218.0/23
                IPv6:
                  2804:5e7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269036

    Signature Algorithm: sha256WithRSAEncryption
         a9:e5:58:df:5b:55:f9:dd:93:de:d6:e3:84:32:8a:ce:d7:e2:
         28:ab:7a:a9:86:85:96:7c:53:69:c3:fe:75:a8:62:1d:cf:0f:
         64:ef:4b:d9:a7:45:6c:dd:27:5a:f3:62:26:1c:d8:9a:9d:e1:
         ce:b5:2f:82:06:36:e2:07:da:e4:ee:fc:f5:d6:d4:fa:07:be:
         cf:1d:f2:d1:60:bb:7e:81:29:7d:ac:70:26:78:18:6b:2c:a0:
         23:f0:bb:4b:00:b8:4d:5f:45:06:5c:ed:17:4d:cb:77:68:7c:
         85:ef:c5:2c:60:d7:8c:68:f7:b0:ae:74:36:e8:62:19:14:b3:
         10:ff:14:c3:39:b0:be:9f:6e:b3:4c:7d:fa:eb:f4:8b:1e:3a:
         9f:ee:98:96:09:dd:0f:55:ee:e0:c5:32:f2:d4:a8:44:8a:26:
         88:25:72:5f:e1:4b:8f:e8:d7:38:06:35:d0:89:20:83:59:4d:
         9b:c1:15:b7:cc:d5:5b:f0:25:c0:31:be:ee:84:13:54:36:42:
         fe:dd:4b:d8:d6:f6:6c:43:07:c4:50:b9:09:61:24:04:8f:32:
         3c:62:ec:36:00:a4:3f:0b:28:e5:09:99:f7:2a:39:c1:66:03:
         15:c5:46:5d:85:60:7a:86:5a:6c:8e:05:fa:82:65:e2:a2:b2:
         87:4a:aa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org