Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/421EE33132DD53E8DF90819B95151864C3D1A7A7.cer
File:                     421EE33132DD53E8DF90819B95151864C3D1A7A7.cer (raw, json)
Hash identifier:          18XTojR7U0p+MkTNK7tDXsJY3pZ5iDwG88NMKtHka/c=
Subject key identifier:   42:1E:E3:31:32:DD:53:E8:DF:90:81:9B:95:15:18:64:C3:D1:A7:A7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       254E4F914F1E796847E1BBBAF79725C69F35275F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/421EE33132DD53E8DF90819B95151864C3D1A7A7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Nov 2023 22:33:23 +0000
Certificate not after:    Fri 22 Nov 2024 22:38:23 +0000
Subordinate resources:    AS: 262656
                          IP: 138.121.208.0/22
                          IP: 2804:25d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:4e:4f:91:4f:1e:79:68:47:e1:bb:ba:f7:97:25:c6:9f:35:27:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 22:33:23 2023 GMT
            Not After : Nov 22 22:38:23 2024 GMT
        Subject: CN=421EE33132DD53E8DF90819B95151864C3D1A7A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2d:c1:66:bd:ee:b9:3d:e0:82:f4:77:c6:bc:
                    ea:3d:ef:0e:b6:3a:24:ce:44:a0:03:58:fb:55:5a:
                    82:66:94:26:49:44:81:62:37:3a:d4:1e:80:0b:cb:
                    02:fa:c4:cd:de:3b:9c:95:04:de:c4:ab:66:b4:6a:
                    0e:75:76:31:06:13:eb:c0:32:2d:48:14:ba:62:62:
                    40:04:2e:78:c3:b3:89:bf:c7:0f:29:fc:82:51:ef:
                    a6:3e:51:e7:b1:34:d4:72:d6:85:5d:54:a1:29:d3:
                    4f:c4:d4:89:26:21:df:3a:d4:ee:4b:0a:ba:fd:21:
                    6f:50:db:fa:6e:eb:63:2d:01:02:57:b4:21:6a:a9:
                    c6:b4:ac:29:48:cf:35:5d:5d:ab:46:36:12:16:5b:
                    40:1b:d6:e8:c6:17:d0:9d:bd:d5:8c:5a:32:d3:6c:
                    fe:88:90:6c:bb:6b:5b:83:ba:ed:69:d4:6c:e8:64:
                    f5:bc:e3:14:e6:da:44:c3:8e:03:a3:a9:18:83:d9:
                    ab:e9:89:0b:1c:92:2e:09:97:d3:56:b2:96:54:90:
                    fa:74:2a:b7:74:75:3b:8e:0b:64:15:e3:ea:ca:f7:
                    ee:7a:ba:17:da:03:d0:a4:6e:a4:ba:09:a4:66:b4:
                    ff:2d:64:c4:e6:2d:4a:41:07:fa:25:67:e0:eb:d6:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:1E:E3:31:32:DD:53:E8:DF:90:81:9B:95:15:18:64:C3:D1:A7:A7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BL162iNifSvA3jkcWBrXtvnaFNRPFMCN4iRQvpTEHP6g/0/421EE33132DD53E8DF90819B95151864C3D1A7A7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.208.0/22
                IPv6:
                  2804:25d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262656

    Signature Algorithm: sha256WithRSAEncryption
         3f:fc:f2:a0:08:5a:3f:3f:9e:6b:68:2d:ec:ad:35:ec:03:df:
         5a:ff:c3:c1:39:f8:fa:02:37:66:b8:72:e0:fa:d5:b7:72:ec:
         de:60:7b:5f:75:76:ab:f6:05:50:14:74:fe:21:ba:e5:79:ee:
         1e:37:62:40:03:0d:44:27:5e:16:76:30:6b:cc:8f:a9:f5:8e:
         b8:2b:0f:1f:dc:e4:f5:46:5f:c3:33:6e:45:94:5a:02:80:f8:
         14:2a:6d:99:ef:4a:0c:e5:be:bc:b6:a5:7d:3d:c5:8f:67:4a:
         f3:37:22:76:99:83:9d:fd:65:ef:80:e1:35:01:24:66:9b:15:
         6d:cf:9e:49:ac:d1:a8:66:ab:d1:f7:68:a2:7a:68:d2:9e:c6:
         21:e3:48:b5:96:68:75:29:4d:27:40:78:00:e5:fb:56:f5:8c:
         c0:bf:b5:c8:09:ca:09:52:2c:0c:75:82:cb:6a:98:a8:48:d7:
         d5:50:2f:46:96:a5:89:71:54:28:46:f5:30:3a:4c:82:a6:3a:
         9b:8b:b0:4a:ba:4b:0e:f1:52:24:c4:d3:89:a1:01:ea:d9:cc:
         53:42:88:36:46:dd:92:95:04:cc:08:fd:24:7a:23:63:df:cd:
         0d:46:30:fa:5c:35:b0:21:53:89:53:04:a8:ae:dd:3d:21:c1:
         1a:6d:89:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org