Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/354F8E89ACE9927EDA377ADB56AC6A09E2124044.cer
File:                     354F8E89ACE9927EDA377ADB56AC6A09E2124044.cer (raw, json)
Hash identifier:          xldln3SEUY8mvDcpwFBhyRLJY7KdPbLJ5GPG0Zspy58=
Subject key identifier:   35:4F:8E:89:AC:E9:92:7E:DA:37:7A:DB:56:AC:6A:09:E2:12:40:44
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       32B99BCD99AC3EAB0476A9422788641DF933D95C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/354F8E89ACE9927EDA377ADB56AC6A09E2124044.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jan 2022 18:44:59 +0000
Certificate not after:    Tue 17 Jan 2023 18:49:59 +0000
Subordinate resources:    AS: 271137
                          IP: 201.54.188.0/22
                          IP: 2804:76d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b9:9b:cd:99:ac:3e:ab:04:76:a9:42:27:88:64:1d:f9:33:d9:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 18:44:59 2022 GMT
            Not After : Jan 17 18:49:59 2023 GMT
        Subject: CN=354F8E89ACE9927EDA377ADB56AC6A09E2124044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:34:c2:53:9c:8e:fc:66:90:68:6c:a2:35:0b:
                    13:13:14:b3:a4:bb:7e:b4:14:c4:7c:40:c1:22:10:
                    8f:fb:e1:ce:7d:75:60:a0:e6:f3:98:7c:84:83:73:
                    bf:b8:ce:82:cb:43:7e:01:7c:8d:9c:d6:21:82:4b:
                    08:36:3b:56:07:4e:39:ad:2f:c5:bc:9d:e4:34:2f:
                    11:5f:05:6e:23:f0:e4:a5:b1:56:05:ea:8e:50:4d:
                    f3:c3:43:6d:d7:c7:93:ad:53:e6:98:46:d3:15:4a:
                    5d:b5:d6:b1:08:6a:2f:f5:2a:b8:45:70:59:60:af:
                    36:a4:6b:92:1f:81:a0:f4:e3:bc:70:02:92:33:d9:
                    81:52:07:27:90:e3:4c:f0:fa:cb:15:05:b6:a0:39:
                    66:9c:eb:dd:97:49:cd:a8:ab:8f:a3:2f:51:a5:23:
                    5f:84:6d:b9:c8:33:86:c8:21:0b:ef:28:4f:de:12:
                    32:0e:8e:34:e7:22:50:42:c6:a6:6d:47:f1:be:9f:
                    a2:aa:34:e5:df:5e:6d:06:a6:7d:e4:6f:f1:d1:fe:
                    37:cc:6b:59:64:97:66:14:15:99:a0:68:13:9c:9a:
                    a4:a7:8b:78:e7:48:b6:52:3c:23:b7:a1:b5:a3:5b:
                    7e:9b:6b:6e:34:89:7f:78:7c:53:cc:7a:8b:46:15:
                    eb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                35:4F:8E:89:AC:E9:92:7E:DA:37:7A:DB:56:AC:6A:09:E2:12:40:44
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DVDouUtADFMT5aJAAqBC4UQYZQYYAFL6EwCZWKWobMZ/0/354F8E89ACE9927EDA377ADB56AC6A09E2124044.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.54.188.0/22
                IPv6:
                  2804:76d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271137

    Signature Algorithm: sha256WithRSAEncryption
         64:a4:85:7b:c8:e2:5c:2b:9f:4d:f6:5d:71:95:d1:ad:fa:8e:
         c4:b8:a8:81:bf:f5:bd:0a:fc:e5:7f:53:29:2a:3b:ad:94:d9:
         94:57:af:1a:02:a9:d8:11:92:c5:69:a0:cf:fb:3b:7f:e4:bf:
         a8:cb:30:21:9a:99:0b:56:8b:65:d0:80:e3:49:6f:27:0a:e8:
         85:1a:54:25:2a:72:b7:17:50:ac:da:8b:ee:da:64:d5:8f:e5:
         61:86:a2:2d:c7:67:7b:90:cc:62:2a:a1:f3:c7:31:b2:96:63:
         54:77:b0:67:c0:72:ff:64:56:00:ba:0e:a4:f7:65:8c:b3:2b:
         c0:82:58:23:36:66:37:d7:bc:0c:bd:a2:62:26:20:58:92:14:
         ef:0f:37:d2:2e:3c:0a:84:1b:3e:05:76:ef:9e:a1:d4:42:9c:
         50:c7:65:8f:9b:af:4e:1d:6c:17:af:d7:0b:ab:e7:d9:22:8b:
         7b:bc:ef:e6:35:fb:66:ac:2d:66:63:bb:5f:8f:50:47:06:e0:
         9a:b0:8b:83:67:21:83:b1:96:c0:19:99:99:33:21:05:a2:aa:
         57:00:1c:e2:be:55:56:78:d2:64:12:e0:6c:20:c0:20:8d:d5:
         75:0e:49:b9:fa:ae:cf:9f:79:43:9c:1b:b4:01:39:ba:1e:30:
         1a:01:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:22 2024 by rpki-client on console-ams.rpki-client.org