Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41BC6FEA40F58F61DD81236BE0F6C43D9D807D15.cer
File:                     41BC6FEA40F58F61DD81236BE0F6C43D9D807D15.cer (raw, json)
Hash identifier:          YSHed4C2/MMa7stQOzKw1LVnz3zRM4F0iEic4Rcvi4k=
Subject key identifier:   41:BC:6F:EA:40:F5:8F:61:DD:81:23:6B:E0:F6:C4:3D:9D:80:7D:15
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6F07E7E3B39908A8199436B017BF3DBDD3CFFE66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/41BC6FEA40F58F61DD81236BE0F6C43D9D807D15.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 21 Mar 2023 23:31:44 +0000
Certificate not after:    Tue 19 Mar 2024 23:36:44 +0000
Subordinate resources:    AS: 53005
                          IP: 45.188.120.0/22
                          IP: 170.238.164.0/22
                          IP: 177.66.240.0/21
                          IP: 2804:548::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:07:e7:e3:b3:99:08:a8:19:94:36:b0:17:bf:3d:bd:d3:cf:fe:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 21 23:31:44 2023 GMT
            Not After : Mar 19 23:36:44 2024 GMT
        Subject: CN=41BC6FEA40F58F61DD81236BE0F6C43D9D807D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:87:a1:f7:2f:59:d3:fd:28:ad:c7:17:b6:
                    bf:60:47:94:8b:36:dc:54:03:0d:32:4b:8f:79:29:
                    3b:e6:1a:9d:f8:61:86:15:45:a2:db:dc:5e:18:b1:
                    c6:a9:f7:61:15:0b:7f:0c:7c:81:a0:3b:f1:bf:c8:
                    c6:44:8f:94:12:62:54:a3:f3:32:43:ba:b7:b8:7e:
                    1f:16:78:6b:0b:0c:51:88:db:ed:40:b3:eb:cd:5b:
                    a0:90:80:39:93:7d:bd:0a:39:a2:12:40:02:4d:65:
                    d1:a5:15:58:61:9f:f6:11:5f:29:1e:7a:9d:9f:df:
                    a1:cb:34:42:2b:5f:b0:92:25:b0:4f:a0:a9:94:a8:
                    91:c7:c4:11:b9:ac:62:72:d4:e0:c1:82:06:cf:44:
                    7c:1e:7c:ff:98:10:a5:17:5a:84:e3:2d:a2:5f:3a:
                    a6:f6:1b:46:bf:81:58:82:14:5e:04:6e:a1:c6:cc:
                    30:d8:67:14:c9:b2:9b:cb:7c:02:55:c0:0b:e6:60:
                    55:9a:58:c0:99:05:16:eb:57:68:07:35:21:bc:42:
                    f3:b9:6c:22:39:80:20:b8:6d:5f:ce:cd:a8:fa:c4:
                    3a:47:76:d6:4f:27:4d:92:da:28:29:6c:a4:cc:5f:
                    86:99:89:48:64:44:47:bf:e0:8b:25:da:e9:2a:29:
                    08:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:BC:6F:EA:40:F5:8F:61:DD:81:23:6B:E0:F6:C4:3D:9D:80:7D:15
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HoUJRVyveN99V1tAEjiagXn1hk1WVFSKn3ZW61oSxY7C/0/41BC6FEA40F58F61DD81236BE0F6C43D9D807D15.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.120.0/22
                  170.238.164.0/22
                  177.66.240.0/21
                IPv6:
                  2804:548::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53005

    Signature Algorithm: sha256WithRSAEncryption
         b7:0d:fe:59:12:29:9c:42:9a:35:73:5a:c1:ee:c5:d3:96:b8:
         0d:7c:f8:8b:e1:e4:ac:6c:36:09:d4:1a:b5:ce:d6:b2:2e:d3:
         5d:27:31:44:7f:a5:f6:5e:93:01:18:f0:c4:a4:d4:68:8f:b4:
         ea:cc:52:18:ce:20:d1:82:80:d5:22:64:ce:14:c5:76:6d:ce:
         e7:ef:e4:2b:c3:a4:f5:ed:92:37:73:1c:76:38:37:30:63:69:
         2f:f1:ba:9f:60:7a:7c:7c:3d:39:f2:da:d1:f6:bf:3e:94:9d:
         42:f7:9a:ca:34:b1:fb:f8:98:0a:74:9e:18:ad:2e:4e:92:3a:
         3d:55:6a:d8:b7:e4:7c:d7:98:f6:07:6c:07:fb:91:f5:4b:8a:
         88:e0:b3:c7:04:5f:ba:5c:9d:72:ce:ab:aa:c7:7a:91:f2:59:
         84:d7:ea:09:94:03:52:92:f8:b5:0e:2a:1a:4b:cd:25:f3:4f:
         43:e7:75:04:75:9e:bb:34:5c:e7:9e:5a:f9:c7:08:b5:b4:5e:
         0d:10:17:b6:2c:0d:66:d6:e3:59:e5:9c:6f:89:a1:7f:78:a1:
         b6:1f:58:da:64:c9:b0:12:78:6f:ab:57:b7:ac:af:9a:be:9c:
         8d:da:d1:1b:2e:62:f6:80:79:d5:b3:e3:95:1f:02:c2:be:01:
         da:6a:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org