Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
File:                     337F0355B2973828836736A5986B11322B9C530B.cer (raw, json)
Hash identifier:          dx1KtSM4aLqjfD9KLbtvo0YVErkz+7YgTxNmbT9TuQc=
Subject key identifier:   33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53C99E4612C04AEE110267C728C7B21CD61094D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 18:23:22 +0000
Certificate not after:    Wed 04 Dec 2024 18:28:22 +0000
Subordinate resources:    AS: 1916
                          AS: 6125
                          IP: 132.255.96.0/22
                          IP: 138.121.68.0/22
                          IP: 150.165.0.0/16
                          IP: 170.79.212.0/22
                          IP: 200.17.0.0/20
                          IP: 200.17.32.0 -- 200.17.79.255
                          IP: 200.17.112.0 -- 200.17.159.255
                          IP: 200.17.176.0/20
                          IP: 200.18.20.0 -- 200.18.31.255
                          IP: 200.18.80.0/20
                          IP: 200.18.128.0 -- 200.18.239.255
                          IP: 200.19.8.0 -- 200.19.47.255
                          IP: 200.19.112.0 -- 200.19.191.255
                          IP: 200.128.128.0 -- 200.128.239.255
                          IP: 200.129.0.0 -- 200.131.255.255
                          IP: 200.133.0.0 -- 200.133.223.255
                          IP: 200.133.240.0/20
                          IP: 200.137.0.0/16
                          IP: 200.139.0.0/18
                          IP: 200.143.192.0/18
                          IP: 200.159.240.0/20
                          IP: 200.235.0.0/17
                          IP: 200.237.0.0/18
                          IP: 200.239.128.0/18
                          IP: 2001:12f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c9:9e:46:12:c0:4a:ee:11:02:67:c7:28:c7:b2:1c:d6:10:94:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  6 18:23:22 2023 GMT
            Not After : Dec  4 18:28:22 2024 GMT
        Subject: CN=337F0355B2973828836736A5986B11322B9C530B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bb:a8:59:ef:d2:9f:21:9f:24:f2:f2:8f:12:
                    5c:5e:de:08:9b:6d:7d:8c:70:c3:4c:3c:a0:80:2f:
                    39:6b:84:9d:e0:44:08:8e:f7:66:75:5e:65:38:db:
                    da:d0:95:9f:63:4c:ee:b6:75:92:36:02:67:ee:ad:
                    cc:05:d1:0e:6d:35:eb:09:ab:a6:c9:64:b4:a6:a0:
                    f0:ef:0d:e7:ed:03:f3:74:39:ab:61:9e:75:31:fa:
                    19:80:23:e1:6a:8d:d3:f0:46:17:33:f8:b1:c9:82:
                    dc:d1:73:34:58:4d:11:39:08:77:98:99:f0:49:50:
                    ee:21:f0:49:d3:60:8d:86:44:f7:cb:91:60:d8:cc:
                    81:aa:e0:c7:d8:56:9b:e9:39:a3:72:0f:84:94:b4:
                    fd:b1:8d:69:49:80:3f:0c:29:8d:43:2b:e8:0d:4a:
                    bf:da:bc:48:ed:67:97:af:23:af:f5:e7:19:c6:36:
                    53:e2:4c:56:ae:e0:c6:92:3b:6e:ed:7b:89:f1:0b:
                    48:0a:4f:f1:39:30:5e:0c:02:02:6c:5e:3d:a6:ea:
                    10:d3:be:48:b5:70:e2:ec:18:9c:1c:d5:5c:c4:16:
                    06:a3:07:97:a5:dc:73:b3:96:22:4b:8a:bc:8a:31:
                    0a:6c:b2:98:e4:16:96:fa:22:3a:0e:ff:21:b0:6f:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.96.0/22
                  138.121.68.0/22
                  150.165.0.0/16
                  170.79.212.0/22
                  200.17.0.0/20
                  200.17.32.0-200.17.79.255
                  200.17.112.0-200.17.159.255
                  200.17.176.0/20
                  200.18.20.0-200.18.31.255
                  200.18.80.0/20
                  200.18.128.0-200.18.239.255
                  200.19.8.0-200.19.47.255
                  200.19.112.0-200.19.191.255
                  200.128.128.0-200.128.239.255
                  200.129.0.0-200.131.255.255
                  200.133.0.0-200.133.223.255
                  200.133.240.0/20
                  200.137.0.0/16
                  200.139.0.0/18
                  200.143.192.0/18
                  200.159.240.0/20
                  200.235.0.0/17
                  200.237.0.0/18
                  200.239.128.0/18
                IPv6:
                  2001:12f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  1916
                  6125

    Signature Algorithm: sha256WithRSAEncryption
         94:2e:ec:f4:95:30:80:7a:f2:9e:17:72:22:61:9f:37:4d:16:
         e4:e1:fd:77:ab:52:8d:a9:01:3e:41:5a:c6:80:b7:15:cc:a6:
         bc:9f:bd:0c:8a:23:05:b3:03:eb:95:93:e7:ef:4a:49:bb:72:
         7c:f3:14:7e:96:c7:14:67:3a:17:25:d3:9d:ee:e4:f9:2b:3e:
         c6:d2:0f:ac:39:1c:4d:18:22:57:d9:22:0b:17:6f:98:7d:0c:
         bd:c8:6e:5c:71:7c:67:d3:04:9b:9d:26:72:de:26:06:ff:46:
         df:92:23:3d:8c:1e:cd:c6:32:77:ff:c9:2b:77:40:c2:4e:8c:
         fb:0c:12:64:70:7d:85:cb:30:68:b0:6f:9c:71:29:e6:f1:7f:
         9e:b3:a0:8f:be:04:83:e3:2c:09:0c:1a:04:ac:08:46:94:81:
         eb:9c:2e:ff:26:56:0f:1d:c4:71:f4:c4:b5:86:a2:e5:77:7f:
         16:bd:58:6d:a6:c6:61:28:c3:b9:27:ef:6a:63:ad:f6:a8:e5:
         dd:1a:7d:57:65:6a:b9:90:b5:09:03:8d:5f:05:a2:5e:97:57:
         98:e0:07:fa:6e:2c:23:da:c0:ab:f6:3a:b1:d1:69:a9:01:60:
         31:2d:7e:09:e4:69:4f:38:1e:86:fd:f5:ef:f0:e0:95:bc:03:
         fc:37:d3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org