Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/33718F506AE5FB47237C2E6EF6823661F4EFE0D7.cer
File:                     33718F506AE5FB47237C2E6EF6823661F4EFE0D7.cer (raw, json)
Hash identifier:          aL1K+FY/Dcht9TAwOi+Ks25X1ZtQ9wN/8kyGDMp9Qdo=
Subject key identifier:   33:71:8F:50:6A:E5:FB:47:23:7C:2E:6E:F6:82:36:61:F4:EF:E0:D7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4F7F24A54E0D0922B82C2665FEE47A3607316C42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/33718F506AE5FB47237C2E6EF6823661F4EFE0D7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Nov 2023 18:33:45 +0000
Certificate not after:    Tue 19 Nov 2024 18:38:45 +0000
Subordinate resources:    AS: 270845
                          IP: 190.115.216.0/22
                          IP: 2804:724c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7f:24:a5:4e:0d:09:22:b8:2c:26:65:fe:e4:7a:36:07:31:6c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 21 18:33:45 2023 GMT
            Not After : Nov 19 18:38:45 2024 GMT
        Subject: CN=33718F506AE5FB47237C2E6EF6823661F4EFE0D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:6a:0d:84:a5:c8:7b:cb:af:ef:0e:30:b8:
                    ab:40:39:6f:9e:c6:7b:3b:03:27:e1:09:af:b7:a9:
                    cd:fb:d1:f0:44:72:51:ae:df:51:5d:8d:3a:a4:b9:
                    b0:c4:50:c5:b2:16:e3:18:1f:07:73:20:a5:3e:ee:
                    46:01:00:11:b8:cb:26:2c:c6:e9:f2:1e:be:d7:4d:
                    73:90:87:ad:bd:b5:08:fa:24:cd:62:f2:8d:9a:c8:
                    ad:17:66:db:c3:b6:9f:76:2c:57:98:f4:d4:e1:b9:
                    fb:1a:39:ab:31:50:46:55:1b:b8:e5:64:c0:51:06:
                    17:c1:1a:5d:6a:1e:00:a7:5f:7d:13:96:4b:62:10:
                    7e:82:dd:99:e1:48:7e:84:dc:41:ec:a6:fc:b1:b3:
                    a9:7b:78:7b:e4:f7:c8:7b:04:26:f4:51:3d:be:f0:
                    06:07:55:f2:dc:ee:07:7b:01:a6:9e:22:ba:fc:e1:
                    23:63:3c:a6:33:93:0f:74:08:16:d6:ab:ff:d3:6a:
                    f3:64:dd:b0:0f:60:6e:12:41:b7:a1:ae:0b:ac:83:
                    ba:71:f0:c5:d9:f3:8e:5d:f2:2e:6a:ea:9e:9a:26:
                    1d:8d:40:50:66:65:e6:b4:03:69:d0:b7:b7:cc:37:
                    74:3b:98:d5:e8:20:1b:0b:b4:58:33:da:ed:9d:37:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:71:8F:50:6A:E5:FB:47:23:7C:2E:6E:F6:82:36:61:F4:EF:E0:D7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84p9UnqYUt1tqV4oz8eHtoYiXp9zmtSiSx7BdUmC8eZM/0/33718F506AE5FB47237C2E6EF6823661F4EFE0D7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.216.0/22
                IPv6:
                  2804:724c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270845

    Signature Algorithm: sha256WithRSAEncryption
         8c:33:ac:c5:9f:7d:d8:e1:9e:0c:75:dc:2b:e7:d6:a5:ba:91:
         c0:cd:f7:fe:07:2e:37:46:63:38:28:a7:bf:d7:45:dc:98:3b:
         32:94:e4:b0:c7:6e:86:92:f8:1a:bf:58:6d:63:fd:7b:36:0b:
         fc:4f:c4:d6:a1:6a:31:e2:82:b2:84:fb:70:d6:f6:09:9c:b8:
         55:3f:00:de:5c:1e:95:6b:f1:92:d6:85:9a:84:53:e8:64:00:
         ac:ca:96:00:00:dd:7a:d7:2d:0c:d9:5e:ba:66:a0:72:d6:b0:
         a8:ab:d6:72:c2:a3:14:be:f1:cf:fd:57:62:ec:13:1b:59:6b:
         37:8c:37:cc:63:26:00:57:9a:cc:24:6c:75:7a:7f:ef:83:f9:
         60:bc:cc:93:ec:d6:68:b4:f5:ed:3f:73:b7:6c:25:16:0b:8f:
         c7:1f:e6:d4:2c:a2:58:8d:9e:ff:a4:dd:c8:47:bd:36:a5:00:
         13:98:e5:f5:72:5f:ba:5e:f7:22:c7:fa:eb:35:af:4f:16:48:
         55:2b:37:f7:41:20:d9:23:7b:0f:0e:51:44:b6:30:b4:46:c5:
         c8:46:01:32:1b:4b:80:17:18:4e:19:80:a4:15:c2:57:02:ae:
         37:f9:f4:a9:7a:ae:4c:71:15:09:c1:2b:93:ae:6c:33:c2:02:
         62:86:24:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org