Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer
File:                     414FA748DA84D421B71DC3765DBDDDF7039CA686.cer (raw, json)
Hash identifier:          wLIAjL9ZQ53atb5O9Q4qeLnVR/BeBjWV6P8CBeYxesk=
Subject key identifier:   41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5D5C13585739E114B9C8D0F2249E29E35405C695
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Sep 2023 06:15:08 +0000
Certificate not after:    Fri 13 Sep 2024 06:20:08 +0000
Subordinate resources:    AS: 266535
                          IP: 160.238.160.0/22
                          IP: 2804:3d80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:5c:13:58:57:39:e1:14:b9:c8:d0:f2:24:9e:29:e3:54:05:c6:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 15 06:15:08 2023 GMT
            Not After : Sep 13 06:20:08 2024 GMT
        Subject: CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0c:fb:68:c6:3b:78:a1:b4:75:7a:0e:96:5c:
                    68:0f:c9:ca:98:03:7d:71:6a:ac:56:3b:ce:ff:8e:
                    7d:7b:35:30:7d:6d:74:fe:90:17:fd:5d:20:e5:ce:
                    96:37:51:b4:da:18:3f:dd:ba:0c:e3:d0:e7:aa:8f:
                    9b:0a:0d:6e:d5:66:dd:57:11:cb:58:df:46:cb:20:
                    eb:45:fe:47:27:dc:1b:db:d1:63:ea:4e:79:21:bf:
                    17:46:e7:10:f5:31:d5:0d:71:7d:e8:82:01:d8:32:
                    a1:a5:1d:ed:2d:d4:b2:1a:b8:86:3b:49:3b:4b:ab:
                    5a:5f:ed:89:16:2d:22:83:11:c9:7f:87:a2:76:dc:
                    48:5f:78:57:18:4c:b2:ea:c2:38:56:e6:24:44:3a:
                    86:26:03:2b:c1:c6:b7:47:e7:76:61:06:4f:13:f1:
                    9e:84:fd:4f:c1:6a:e4:7c:69:54:b2:5f:69:c6:6d:
                    ea:83:8f:68:21:f5:a0:75:ad:5f:72:e9:3a:16:4c:
                    4b:57:7f:ca:80:85:d4:23:7f:27:27:a3:d5:72:75:
                    16:41:0a:4d:ad:db:b9:f1:71:0a:ec:cf:7d:e1:3e:
                    0c:b1:14:c5:52:a6:d2:4a:47:db:d7:85:b0:1d:4f:
                    72:90:23:e7:e8:86:ed:10:86:0b:17:2d:3b:34:fc:
                    29:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.160.0/22
                IPv6:
                  2804:3d80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266535

    Signature Algorithm: sha256WithRSAEncryption
         7c:c2:2f:0d:db:90:0d:5e:fd:a5:db:32:c2:f8:57:48:72:dc:
         b6:09:af:44:40:52:5e:1b:32:57:85:74:b0:0d:3c:a5:5f:65:
         02:d1:18:26:00:0a:f3:87:74:fc:54:3e:a2:af:79:ce:2f:68:
         26:60:16:25:8a:3e:65:f6:86:24:5a:4f:77:2c:fc:7b:d3:ce:
         7b:d5:6b:29:c5:d2:1e:f1:7b:c4:81:b8:65:3f:d0:19:93:0b:
         21:e6:34:4a:03:ee:5e:88:e1:89:fb:8b:6a:86:09:02:0b:d8:
         1e:a5:68:69:36:09:e2:9b:4a:66:ad:61:f2:de:48:9b:6d:e1:
         08:f2:bb:f3:1f:1c:a3:e0:e5:71:57:72:88:c2:c3:8d:2f:57:
         5f:82:f1:b3:07:fc:ee:fb:e5:b7:12:6e:30:07:1c:2e:64:35:
         52:2f:e5:ee:8b:8c:c2:70:86:8e:3b:4a:98:b3:ed:ea:d7:d0:
         bc:36:54:1a:f4:61:4f:c1:c8:ac:6c:69:d8:1d:2a:92:06:d2:
         d2:ed:24:20:8a:d1:50:b7:11:6c:69:9e:09:4d:c5:22:b7:49:
         a8:7a:c4:86:da:fe:90:43:be:19:dc:07:e2:70:9b:f6:0f:0f:
         23:db:a4:19:21:c8:85:43:d6:50:cc:86:59:d5:9e:f1:b1:10:
         30:40:b6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org