Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/374F51C9ED54F1414625E1F43A042A23F1C7C299.cer
File:                     374F51C9ED54F1414625E1F43A042A23F1C7C299.cer (raw, json)
Hash identifier:          QpoArBl8hUn6iwcOwDpsPJOlBu/QzYBhgnI/nPaDX80=
Subject key identifier:   37:4F:51:C9:ED:54:F1:41:46:25:E1:F4:3A:04:2A:23:F1:C7:C2:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3C8D6FE374A22B8326062F6744D0722353CE983B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/374F51C9ED54F1414625E1F43A042A23F1C7C299.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Nov 2023 04:09:52 +0000
Certificate not after:    Wed 06 Nov 2024 04:14:52 +0000
Subordinate resources:    AS: 264025
                          IP: 143.137.32.0/22
                          IP: 168.197.56.0/22
                          IP: 2804:299c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:8d:6f:e3:74:a2:2b:83:26:06:2f:67:44:d0:72:23:53:ce:98:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 04:09:52 2023 GMT
            Not After : Nov  6 04:14:52 2024 GMT
        Subject: CN=374F51C9ED54F1414625E1F43A042A23F1C7C299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:01:90:30:14:4c:84:dd:22:1e:c2:8b:1f:b2:
                    38:78:97:fb:75:25:8e:a1:93:8a:a5:d6:e4:70:c6:
                    48:cc:e7:08:c0:d6:f6:19:a7:f6:7d:5c:6d:b8:cc:
                    70:fa:44:5c:da:cd:52:3e:e6:25:e0:97:2b:19:42:
                    8c:1c:45:78:d9:87:6e:37:64:21:25:00:20:a9:a2:
                    aa:ba:4e:a7:fe:1b:2d:4c:ed:b3:5b:51:c4:c2:42:
                    2a:79:b9:77:ba:f5:d2:3b:19:72:ee:e8:98:a0:a4:
                    9c:94:df:6b:69:35:6b:37:26:89:d6:8f:53:dd:8f:
                    f9:28:17:c9:b3:10:8d:7a:7d:88:4e:e4:3f:2e:39:
                    58:ca:eb:23:75:7a:02:36:b1:ac:2c:7b:42:84:5b:
                    fd:5e:4e:9d:96:d9:82:d5:dc:94:25:bc:ac:d5:63:
                    21:c5:e8:af:77:b5:e3:1a:01:31:e8:6d:08:2c:01:
                    33:70:a6:e6:b1:6b:8d:99:48:ec:15:64:0d:d4:56:
                    20:45:96:5f:74:63:33:db:5e:6c:2a:f4:48:d7:c0:
                    17:ad:53:d1:01:27:34:e9:47:96:fd:f2:5b:d6:2f:
                    7a:ea:75:09:43:2d:92:02:db:82:1b:b1:a1:96:2d:
                    3b:39:9b:be:8f:6e:87:b4:83:fe:47:c6:b2:f2:56:
                    32:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:4F:51:C9:ED:54:F1:41:46:25:E1:F4:3A:04:2A:23:F1:C7:C2:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/374F51C9ED54F1414625E1F43A042A23F1C7C299.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.32.0/22
                  168.197.56.0/22
                IPv6:
                  2804:299c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264025

    Signature Algorithm: sha256WithRSAEncryption
         95:ea:94:98:d9:5a:47:57:1c:c7:4d:7c:50:ff:1e:e3:59:cf:
         20:98:b4:24:50:53:26:ac:d8:6e:c1:a2:0c:36:5b:6b:eb:e2:
         6d:b3:82:44:cf:5c:01:b9:8f:72:06:97:60:6c:59:fe:1c:1a:
         a5:b9:b4:a5:49:7b:06:60:6c:2a:6e:e4:32:ae:5c:00:63:4a:
         bc:7d:03:11:3d:5d:98:d6:f9:0e:40:61:8d:73:2c:45:c9:5e:
         0b:5b:5d:60:1e:f9:c5:4e:62:be:47:21:bf:d5:bc:28:4e:34:
         2a:09:ac:a9:49:6d:b3:48:3f:7d:2e:09:51:96:eb:e3:3e:13:
         ba:b3:6e:15:27:c9:74:7a:d7:8e:37:67:6e:4d:e7:e4:06:e3:
         2b:93:b3:fe:6c:9e:70:e1:28:4e:99:03:58:1b:2d:42:6d:0f:
         e9:8f:61:e4:10:79:68:11:46:88:aa:fe:8a:62:4c:f8:ce:5d:
         39:05:b3:4e:86:75:1e:45:31:8b:88:49:ef:39:f9:02:25:f0:
         a9:b3:50:22:7e:28:e2:42:6c:7f:63:fd:01:5e:c4:f3:9e:0d:
         19:ff:8b:76:38:7b:4e:6e:ba:39:7b:64:dc:63:4f:f4:63:f2:
         9f:27:08:ae:d5:89:ef:ab:a1:25:32:83:e7:43:2c:f1:20:13:
         be:e4:0f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org