Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/37834545A38892C3FF1B7141126084730A12B7AC.cer
File:                     37834545A38892C3FF1B7141126084730A12B7AC.cer (raw, json)
Hash identifier:          TbSSimj+SaicfkSw1KGtAQeV15rQZvr+PdtIrWoQ+wo=
Subject key identifier:   37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7C9A75688B435D423A2A739E4F3A2B0A48BAF047
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/37834545A38892C3FF1B7141126084730A12B7AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 22 Aug 2023 23:55:49 +0000
Certificate not after:    Wed 21 Aug 2024 00:00:49 +0000
Subordinate resources:    AS: 265041
                          IP: 170.150.136.0/22
                          IP: 2804:31dc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:9a:75:68:8b:43:5d:42:3a:2a:73:9e:4f:3a:2b:0a:48:ba:f0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 22 23:55:49 2023 GMT
            Not After : Aug 21 00:00:49 2024 GMT
        Subject: CN=37834545A38892C3FF1B7141126084730A12B7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:60:34:41:b5:a0:c2:4e:53:e1:23:e6:54:45:
                    4a:9f:9b:aa:63:90:c8:59:f2:72:f0:79:24:1a:80:
                    86:68:b0:f5:c5:cf:74:ad:af:7b:b1:de:50:a4:e7:
                    f7:01:68:a4:ab:2f:8d:44:ad:cb:5e:a2:05:e3:cd:
                    a2:46:cf:8b:6f:bb:b9:cb:3a:04:fe:56:dc:9c:80:
                    52:7f:2a:05:15:34:21:c2:1c:4f:e6:4d:6a:50:be:
                    14:d8:79:b9:9a:1d:0e:5e:bc:ac:93:3e:ee:a9:06:
                    62:a7:cc:31:d4:40:ee:19:29:26:46:9b:b6:a2:eb:
                    78:25:2c:bc:5e:fd:62:f7:10:18:dd:bf:4c:8c:ee:
                    76:9a:c1:4c:95:82:bf:21:37:a4:0a:c9:1d:04:1e:
                    cb:37:45:9a:07:39:d8:bf:1d:b3:61:50:db:4a:c9:
                    9b:61:eb:05:5e:b9:30:76:9e:f6:41:0c:e4:a8:83:
                    28:8b:bf:3a:18:05:99:6d:0a:9d:b4:1e:be:8b:3e:
                    2f:46:d0:9b:cc:45:ff:9f:ff:f1:65:6d:10:ba:92:
                    ee:da:2e:83:34:fe:ff:c5:66:a1:28:61:99:1f:97:
                    8e:93:60:3a:cd:94:7b:51:41:bb:31:6a:36:ae:77:
                    0b:00:bd:9a:8a:44:5c:f9:f6:eb:8f:81:ea:4c:28:
                    30:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                37:83:45:45:A3:88:92:C3:FF:1B:71:41:12:60:84:73:0A:12:B7:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8BSpKFdDs59rRBXdeJxaWDsC73yZpPfcseczZSeiRAbN/0/37834545A38892C3FF1B7141126084730A12B7AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.136.0/22
                IPv6:
                  2804:31dc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265041

    Signature Algorithm: sha256WithRSAEncryption
         7a:a4:b7:49:31:72:44:43:ae:38:1b:df:09:3e:c5:60:c3:f8:
         a9:49:8e:5d:9e:b6:c6:60:f9:cb:ae:8f:f2:6e:aa:96:72:98:
         02:87:a4:a4:b7:47:99:e3:cc:b2:21:61:23:52:26:4c:99:8b:
         4f:3e:c6:e0:45:54:ab:82:52:77:e5:d0:8a:f5:35:f8:bc:c2:
         5e:71:5e:f1:6d:f3:4a:63:5e:47:3e:63:ab:63:b9:73:df:18:
         86:2a:a7:75:a6:fb:49:51:a6:0e:80:6d:f1:eb:04:83:3d:70:
         66:85:85:d4:65:73:92:26:d1:3b:2b:e3:54:46:51:bc:62:32:
         91:53:c2:33:2d:30:6b:78:3d:e5:78:4f:f4:5b:1a:2f:72:6a:
         95:b1:c9:b3:31:28:e8:22:08:1a:eb:29:f2:82:e9:a4:06:fe:
         a9:4e:65:ce:12:cf:2b:f1:ee:b9:da:ff:95:2d:5b:bf:8e:fd:
         dc:6d:54:df:83:b5:78:84:d7:34:9c:8e:9b:98:2e:b4:e2:ef:
         d9:d1:8f:1a:17:f8:04:c3:a4:1b:ff:c6:49:e0:5a:d4:71:e8:
         26:f6:66:6b:30:c3:49:83:4c:c9:a7:ba:66:7a:8c:f1:f6:f9:
         75:a8:14:04:5e:f9:ea:a5:f7:47:dd:80:61:8c:ea:aa:fd:d3:
         2c:fb:fc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org