Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41AD713056EF90799ED2D9BA9835DC1D07AFE5C4.cer
File:                     41AD713056EF90799ED2D9BA9835DC1D07AFE5C4.cer (raw, json)
Hash identifier:          Y5ZRzGJK68+TX4CbHadYXbulsXtPlSWRtPh/nlxWpEc=
Subject key identifier:   41:AD:71:30:56:EF:90:79:9E:D2:D9:BA:98:35:DC:1D:07:AF:E5:C4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15530C384C9002C84BCEC51F1ED6A96F9793BB23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/41AD713056EF90799ED2D9BA9835DC1D07AFE5C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 31 Aug 2023 14:06:48 +0000
Certificate not after:    Thu 29 Aug 2024 14:11:48 +0000
Subordinate resources:    AS: 263085
                          IP: 143.202.188.0/22
                          IP: 186.233.216.0/22
                          IP: 2804:96c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:53:0c:38:4c:90:02:c8:4b:ce:c5:1f:1e:d6:a9:6f:97:93:bb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 31 14:06:48 2023 GMT
            Not After : Aug 29 14:11:48 2024 GMT
        Subject: CN=41AD713056EF90799ED2D9BA9835DC1D07AFE5C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:87:e8:7c:50:f0:1c:73:8b:37:3d:4f:92:cf:
                    50:84:5c:7c:c3:75:f8:7f:f0:f1:c6:78:91:a3:a5:
                    25:4b:af:94:c0:7d:ab:84:2f:6a:b6:95:f9:b9:11:
                    6c:87:19:11:d7:33:4a:0b:bb:85:2f:34:82:0c:65:
                    a9:55:b1:f3:71:f3:b6:d3:51:a5:9c:62:e5:0a:29:
                    09:97:6b:19:c8:17:99:67:bd:ac:88:89:5c:b3:57:
                    2f:a0:e4:6a:89:83:1a:36:5e:f8:12:e5:fe:06:f1:
                    d9:ca:72:76:f2:89:cc:8a:27:83:fb:73:b0:ee:0e:
                    7f:89:90:86:8d:e7:3d:0d:74:f3:1c:b6:ae:0b:e3:
                    56:eb:f4:cd:4a:f3:72:b6:f1:87:f7:be:81:b3:c1:
                    59:dc:f0:3c:42:21:ef:b4:55:05:14:05:62:c6:37:
                    61:fc:42:da:5b:c2:fb:cc:59:f3:cb:7d:34:46:66:
                    f3:ac:95:ba:59:8c:39:9c:29:e6:e2:d1:53:b1:57:
                    1e:84:53:ec:2b:42:84:bb:07:99:81:b3:cc:88:b7:
                    9d:e2:fe:0f:2b:b9:d3:d1:a5:fe:63:b6:d8:f3:8a:
                    07:dc:18:e5:65:0e:e3:42:5c:47:aa:ba:4d:c0:72:
                    40:c4:ed:a5:98:2a:a0:a6:9a:95:92:cc:e2:bf:fb:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:AD:71:30:56:EF:90:79:9E:D2:D9:BA:98:35:DC:1D:07:AF:E5:C4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/41AD713056EF90799ED2D9BA9835DC1D07AFE5C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.188.0/22
                  186.233.216.0/22
                IPv6:
                  2804:96c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263085

    Signature Algorithm: sha256WithRSAEncryption
         65:c1:73:d8:76:a9:c7:80:83:0a:59:f1:7d:53:4f:1f:ee:69:
         9e:47:bd:bf:72:fd:1a:50:2f:bd:d0:6d:77:73:d3:c6:9b:1e:
         e7:c1:86:06:7c:74:bf:af:83:e7:00:41:b0:c0:11:3f:cd:b0:
         b9:ae:18:70:ca:04:f2:67:cb:c2:61:eb:07:47:00:f5:32:6a:
         32:ab:01:33:d2:77:8d:8a:68:00:66:d6:d5:29:1e:f5:93:d7:
         c6:1b:c2:57:6f:d1:80:01:28:b1:eb:ec:46:0e:d2:26:ff:ec:
         ba:12:7c:f8:ed:dc:0c:12:96:7f:e4:94:b1:39:bc:65:2b:5d:
         3b:82:89:fb:42:db:aa:6b:a0:eb:0c:e7:04:9c:c5:b3:cf:0f:
         5f:ba:47:ed:14:12:81:e2:a2:f7:18:57:ff:d3:f2:6d:45:8c:
         de:04:85:94:ed:27:fb:4e:e8:fd:14:c4:29:36:42:79:8d:3a:
         d3:0f:a7:21:14:17:07:48:4d:8a:2c:58:97:27:74:49:96:91:
         56:56:24:f0:66:5e:b4:93:a7:a5:55:dc:b5:3c:85:6c:30:5a:
         4b:83:af:08:d8:19:c3:b9:24:9f:6c:9c:5a:9d:9f:de:1b:1b:
         ae:6e:73:27:2a:1e:88:0e:84:ec:0e:a1:91:bc:d1:57:05:8e:
         66:9e:37:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org