Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/381F618A2DEFF7E4818873F1010A17F54ED40B01.cer
File:                     381F618A2DEFF7E4818873F1010A17F54ED40B01.cer (raw, json)
Hash identifier:          Fg49c1ymVoCgkopZZblLENACPcbSM2mqru0kYlwtC+Q=
Subject key identifier:   38:1F:61:8A:2D:EF:F7:E4:81:88:73:F1:01:0A:17:F5:4E:D4:0B:01
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7E2EEDA62333D5E24F523CF66A804AAF7C53E631
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FQxZfJWDSUCzj8f37gD3Z7vhvPZFTeEgo2mEGNf9STbi/0/381F618A2DEFF7E4818873F1010A17F54ED40B01.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FQxZfJWDSUCzj8f37gD3Z7vhvPZFTeEgo2mEGNf9STbi/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 02 Sep 2022 02:31:34 +0000
Certificate not after:    Fri 01 Sep 2023 02:36:34 +0000
Subordinate resources:    AS: 264978
                          IP: 170.0.164.0/22
                          IP: 2804:30e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2e:ed:a6:23:33:d5:e2:4f:52:3c:f6:6a:80:4a:af:7c:53:e6:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  2 02:31:34 2022 GMT
            Not After : Sep  1 02:36:34 2023 GMT
        Subject: CN=381F618A2DEFF7E4818873F1010A17F54ED40B01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:82:b0:5f:f1:d9:aa:5a:8c:db:5c:a4:19:
                    12:3f:17:73:f9:98:63:b2:48:b0:bf:fc:5c:b0:e0:
                    78:b2:27:66:91:26:32:be:01:e6:75:2e:37:95:1b:
                    cc:81:19:f2:9c:a8:d4:99:ec:21:4f:73:0a:e8:98:
                    f4:b4:07:68:3b:07:b8:a6:01:5e:b9:08:fa:f7:4d:
                    f3:18:b9:c5:94:2f:f5:b6:0e:46:24:86:20:19:6b:
                    7a:fa:6b:1c:23:d7:4b:5a:5b:af:ee:6d:3f:de:13:
                    65:ba:48:bd:ea:a8:d4:fe:31:3a:56:30:a9:af:bf:
                    4b:45:01:50:6e:55:9b:87:63:80:2b:44:32:3c:df:
                    a0:e4:f1:b2:ec:b3:0c:f5:99:38:08:f9:e5:05:f9:
                    d6:b5:d6:ff:93:23:d9:77:c5:ea:26:ab:56:52:4e:
                    01:1e:2a:58:6b:5e:1d:b3:13:01:f9:45:37:4e:3b:
                    13:ce:6f:c1:49:79:6f:e6:f6:b2:1a:a9:21:c0:43:
                    aa:96:ec:93:fa:68:15:83:3d:e1:57:e8:8a:f8:51:
                    ce:ec:5c:3f:e5:ef:8c:1a:19:c0:3b:8c:79:e4:86:
                    94:ee:1f:39:a2:fb:cf:08:79:eb:c5:da:a3:a5:7d:
                    fa:f8:36:e6:ea:3b:68:dd:4e:6c:7a:aa:65:7b:d5:
                    57:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                38:1F:61:8A:2D:EF:F7:E4:81:88:73:F1:01:0A:17:F5:4E:D4:0B:01
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FQxZfJWDSUCzj8f37gD3Z7vhvPZFTeEgo2mEGNf9STbi/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FQxZfJWDSUCzj8f37gD3Z7vhvPZFTeEgo2mEGNf9STbi/0/381F618A2DEFF7E4818873F1010A17F54ED40B01.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.164.0/22
                IPv6:
                  2804:30e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264978

    Signature Algorithm: sha256WithRSAEncryption
         ae:96:d3:e2:05:7a:d0:c3:fe:9a:f4:43:60:14:bc:d0:ac:c3:
         5c:bb:85:6f:ef:fa:e6:dc:75:1e:9b:63:a0:c1:df:7c:08:28:
         9a:22:14:49:93:48:96:7a:12:52:95:13:aa:f6:00:eb:5b:58:
         23:71:4c:8b:2d:d7:ec:0a:17:fd:65:45:2e:c8:ea:72:c7:48:
         ea:17:ba:c3:fd:f9:ff:39:e4:45:f6:85:12:e3:80:da:93:e4:
         43:9d:c6:b0:bf:ff:85:ab:4d:82:27:09:4b:ce:c8:db:8d:e0:
         0c:1d:f5:bb:98:b3:db:bd:d9:ea:b0:35:e8:c8:03:4a:cb:84:
         b2:46:d7:27:97:d3:54:60:27:1c:51:69:e6:11:17:54:4a:59:
         ad:80:4d:90:4b:73:99:f0:86:57:49:93:d2:8d:62:3d:c9:33:
         96:77:94:2d:4e:e1:b2:1b:a5:78:0a:68:f3:9f:bf:22:73:6b:
         40:6a:2f:48:a4:a3:75:10:74:ae:49:3e:7f:cd:a2:83:95:b4:
         32:9b:84:f6:2f:61:70:54:05:19:55:c4:be:b7:2d:41:81:da:
         de:8e:40:ff:9b:5a:19:42:fb:c6:39:13:18:a4:07:14:8e:75:
         47:64:bd:ef:59:d8:a7:1d:16:a7:f2:32:1e:c9:3b:67:1b:e7:
         86:8c:8c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:23 2024 by rpki-client on console-ams.rpki-client.org