Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/42009413094777E86D462A87543681113F5E42E8.cer
File:                     42009413094777E86D462A87543681113F5E42E8.cer (raw, json)
Hash identifier:          JAlVUrBAkjAXkhFinl2ZKH1W+zMB9h1HWFZqDVXHmeE=
Subject key identifier:   42:00:94:13:09:47:77:E8:6D:46:2A:87:54:36:81:11:3F:5E:42:E8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       45C3DA0D6851BAB56D61E9B39656853F0B683E0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/42009413094777E86D462A87543681113F5E42E8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Mar 2024 11:15:08 +0000
Certificate not after:    Mon 17 Mar 2025 11:20:08 +0000
Subordinate resources:    AS: 270770
                          IP: 189.127.138.0/23
                          IP: 2801:80:3980::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c3:da:0d:68:51:ba:b5:6d:61:e9:b3:96:56:85:3f:0b:68:3e:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 18 11:15:08 2024 GMT
            Not After : Mar 17 11:20:08 2025 GMT
        Subject: CN=42009413094777E86D462A87543681113F5E42E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:67:b9:77:80:5e:d1:ea:81:3b:82:51:e2:
                    1e:8a:f1:63:29:19:3f:95:26:ba:89:20:c0:14:e7:
                    9c:5b:9f:06:7e:4e:65:00:e8:b9:6f:37:03:a3:4a:
                    64:e1:d0:28:ae:01:b4:3d:66:45:22:7c:ab:5a:f2:
                    0c:f2:83:3c:61:b8:5e:39:a9:dd:aa:58:64:b8:d7:
                    92:7d:eb:0d:24:ad:0f:22:6d:47:a2:f7:9f:03:4d:
                    93:5a:fd:28:8c:de:25:d6:e1:ca:93:87:55:1e:82:
                    1f:ac:03:d3:29:da:af:db:df:68:05:78:5d:79:1a:
                    fb:47:b3:08:9b:2a:96:d8:18:5b:9e:60:14:50:e9:
                    b6:48:d9:53:2a:39:aa:a2:b0:9e:c8:68:36:8c:e9:
                    f7:5e:7b:06:0f:45:38:41:22:cd:75:2c:21:7a:44:
                    b2:af:76:f0:bf:51:f6:b3:43:84:ef:24:6b:20:ef:
                    cc:44:a2:bd:b2:c4:1b:98:7d:49:ec:06:9c:a8:6e:
                    3a:3a:cb:24:33:35:f0:7b:0c:3f:39:78:d3:1e:bc:
                    71:9f:e3:b4:ca:25:3e:57:25:68:83:1e:1c:1e:47:
                    fb:2b:2d:2c:89:30:53:7c:6d:44:b2:bb:67:45:32:
                    15:fe:ee:98:b3:bd:69:27:e2:9f:c2:ea:21:46:59:
                    2d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:00:94:13:09:47:77:E8:6D:46:2A:87:54:36:81:11:3F:5E:42:E8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8nFDcpQBHMMfez2vyu3BjTHMiJDya3gKuSppxeLtG5TX/0/42009413094777E86D462A87543681113F5E42E8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.138.0/23
                IPv6:
                  2801:80:3980::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270770

    Signature Algorithm: sha256WithRSAEncryption
         27:4b:12:52:c0:20:f8:d6:4c:cb:1b:bd:49:61:f3:ae:10:73:
         e6:bf:7d:22:18:d7:4f:5d:94:a7:5a:ac:10:72:30:51:e1:dd:
         c6:e8:21:20:d4:99:4a:ab:c8:73:01:e1:24:30:8d:fd:44:50:
         3b:cc:3b:7b:0f:f5:a5:e0:18:ca:41:ff:18:7c:d6:2c:3e:69:
         1a:05:85:c4:76:19:fc:b0:09:98:5b:ea:1e:59:80:ba:be:bc:
         68:ee:2d:23:e8:b1:0c:9c:19:55:1f:ff:0e:51:e5:38:ff:e9:
         19:2f:10:96:c4:09:b3:7a:8d:b5:db:37:bc:f5:d8:c0:5b:fa:
         6f:ee:97:27:af:4c:b1:fa:42:9e:06:df:c5:96:0f:ae:e6:fe:
         2a:6c:3b:75:ae:b8:96:b0:5e:d3:1b:e2:f7:c0:8c:05:de:c5:
         06:cc:5e:ff:99:98:ec:71:9f:07:6c:e0:bf:b6:21:39:4e:52:
         69:bd:b5:9f:12:3d:4c:73:90:50:81:ab:82:55:6d:4f:2d:8d:
         db:a4:0a:15:62:40:30:6b:d5:44:d5:f0:46:47:6a:45:fe:f8:
         17:9d:40:39:27:db:4a:a7:e4:67:26:49:23:19:f0:9c:c4:8d:
         65:e6:fe:ee:ab:23:bd:45:bc:e4:df:ba:f6:6d:23:e4:bc:ce:
         b1:74:50:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org