Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
File:                     41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer (raw, json)
Hash identifier:          dKcmIw+zEA72zGUjz/rJkg0HNaWgt1+6Q0S8vjCZbso=
Subject key identifier:   41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C62A0FCDDCE9F5D9FEFFEE46FD90A63A7052F6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/41837C1CF0891C60BB3718E09EE5586C0EBC3597.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Jan 2023 21:36:07 +0000
Certificate not after:    Mon 22 Jan 2024 21:41:07 +0000
Subordinate resources:    AS: 271724
                          IP: 131.221.68.0/22
                          IP: 138.117.124.0/22
                          IP: 143.255.112.0/22
                          IP: 170.0.204.0/22
                          IP: 170.245.100.0/22
                          IP: 177.66.64.0/21
                          IP: 177.75.192.0/19
                          IP: 179.191.128.0/19
                          IP: 187.108.96.0/20
                          IP: 187.110.208.0/20
                          IP: 189.50.144.0/20
                          IP: 200.94.240.0/22
                          IP: 2804:8004::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:62:a0:fc:dd:ce:9f:5d:9f:ef:fe:e4:6f:d9:0a:63:a7:05:2f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 21:36:07 2023 GMT
            Not After : Jan 22 21:41:07 2024 GMT
        Subject: CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:89:af:ba:9f:55:68:5e:65:76:5e:56:c5:3c:
                    ec:74:f5:7f:f9:6d:b0:9b:c5:3a:6d:df:74:63:7d:
                    37:55:12:9f:7c:46:7e:d3:15:3e:f1:0b:37:34:1a:
                    e2:17:2f:02:86:93:88:17:3a:75:e7:df:24:89:4f:
                    90:45:29:f9:5e:3b:3a:10:2c:4b:fa:47:61:3b:33:
                    92:eb:ff:bb:b6:cd:be:a3:09:c5:4e:b6:52:4d:62:
                    80:5f:2e:72:03:f3:16:d1:68:6e:7f:9a:30:64:f6:
                    fe:a7:6e:e5:52:a3:c3:ed:5c:79:f0:2a:0f:81:16:
                    a0:19:89:12:a6:d8:17:e6:e5:d3:bc:5c:9e:30:c2:
                    66:4d:48:45:93:ed:35:97:81:cc:61:da:02:08:1c:
                    ea:78:8f:49:75:1a:e2:d4:23:4d:d3:c6:30:ec:90:
                    64:69:d4:8d:f9:e6:7d:8d:a4:02:2b:e8:99:f4:21:
                    fa:10:d1:67:db:41:4d:db:84:63:d5:3a:8a:58:dc:
                    85:f8:4a:06:ca:79:81:ee:53:82:3d:b9:0d:c3:40:
                    0e:14:21:9e:93:bc:69:1f:2c:b0:fc:2b:d6:c1:c9:
                    a7:db:2f:8b:e0:50:3d:c1:3f:38:9b:b1:7a:e0:0e:
                    4a:37:41:72:d8:f2:21:fd:02:73:b5:4e:70:db:29:
                    75:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/41837C1CF0891C60BB3718E09EE5586C0EBC3597.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.68.0/22
                  138.117.124.0/22
                  143.255.112.0/22
                  170.0.204.0/22
                  170.245.100.0/22
                  177.66.64.0/21
                  177.75.192.0/19
                  179.191.128.0/19
                  187.108.96.0/20
                  187.110.208.0/20
                  189.50.144.0/20
                  200.94.240.0/22
                IPv6:
                  2804:8004::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271724

    Signature Algorithm: sha256WithRSAEncryption
         0c:c1:34:eb:f0:90:da:10:c2:eb:cc:c1:06:fa:66:c7:1d:8b:
         a4:31:7b:84:a2:6f:bc:f5:58:ae:88:b2:83:20:73:ec:a5:8c:
         4f:cc:fa:fe:66:04:25:2b:d2:10:1b:77:d1:9b:eb:47:13:b9:
         0d:5c:c7:e0:9a:f3:3b:42:43:9e:17:59:4a:78:76:39:65:b9:
         4d:ea:09:a5:bd:2e:95:36:a7:14:04:8a:74:e0:7e:a7:c7:a8:
         7b:b3:66:40:7e:9d:a2:8e:16:c9:aa:31:42:9f:d6:ed:9e:82:
         d6:e7:11:f2:60:93:28:24:40:0d:c7:9d:28:86:2e:94:68:c3:
         3f:4d:d8:8b:3a:e9:e8:c1:4a:33:fa:71:db:7c:4d:99:e6:ce:
         73:41:c8:6d:cc:ba:fe:73:83:97:fd:8a:f5:4c:05:01:4c:8a:
         38:27:8a:f1:29:e2:7b:87:fb:47:aa:4c:a6:d9:2f:32:f0:45:
         3d:3e:d4:6a:78:25:23:f8:9f:42:6d:7c:bf:95:34:52:d4:14:
         d0:1c:ee:8b:90:2a:d3:db:75:aa:0f:5b:ba:7d:ea:d6:bf:6e:
         cb:2e:5d:a0:e1:75:ac:d4:bc:65:7f:4e:15:11:da:aa:f3:a0:
         33:2d:be:48:d8:c2:30:81:e3:a5:ce:0d:76:91:ae:5f:dc:99:
         2a:e2:5f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org