Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
File:                     429B621150ADA0B8AA46D054F1ADE32F298361E0.cer (raw, json)
Hash identifier:          xNvZCHtUQuK9uz23LBT7OYwXNDG9QPit2GnBVMopV9A=
Subject key identifier:   42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0220FE2D445534D5CFCAE29B52E4D41A0F490E92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 14:52:01 +0000
Certificate not after:    Thu 12 Dec 2024 14:57:01 +0000
Subordinate resources:    AS: 28246
                          IP: 187.1.32.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:20:fe:2d:44:55:34:d5:cf:ca:e2:9b:52:e4:d4:1a:0f:49:0e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 14:52:01 2023 GMT
            Not After : Dec 12 14:57:01 2024 GMT
        Subject: CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:bc:12:0a:b6:55:ae:85:55:c5:23:dc:6d:
                    86:45:ae:58:2c:4e:af:8b:37:a9:8c:bd:05:4d:0c:
                    68:b2:f6:43:68:58:1c:08:1d:f5:ac:f9:ce:d6:fa:
                    c7:53:90:d7:6d:50:03:2a:b5:ad:00:a4:85:ef:a5:
                    69:71:8e:e5:84:81:19:f5:ef:2b:97:49:c4:b1:f5:
                    ff:06:77:bb:a0:75:91:d3:f4:4b:56:4b:f6:83:3f:
                    3e:59:87:40:94:1f:d6:dd:93:d7:ed:89:d1:ec:2a:
                    99:be:28:ac:2c:07:cb:46:07:f8:bc:79:d0:75:9c:
                    4f:66:a2:b5:cb:01:77:da:91:45:a7:9a:ee:fe:b8:
                    69:11:7e:6d:c2:79:ee:41:32:56:42:1d:c8:2e:3d:
                    fc:ff:fa:28:c9:60:31:ef:92:32:03:aa:19:6e:f6:
                    08:64:b4:35:ad:eb:97:48:6b:3e:11:28:0c:8e:a3:
                    75:d7:a0:e9:54:88:55:6d:3a:d9:d3:7b:b9:32:c5:
                    cd:b9:96:23:fa:cc:1e:32:b7:c0:f9:7d:f7:5d:d2:
                    8e:01:b0:0d:81:7f:bb:8e:40:1d:f3:8e:17:de:51:
                    35:e0:bf:47:94:5b:a2:cf:ea:42:8a:9b:35:3b:e3:
                    b3:b7:98:4a:6a:8a:a2:cd:dc:01:91:6b:17:70:df:
                    c7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.1.32.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28246

    Signature Algorithm: sha256WithRSAEncryption
         79:96:90:e0:e7:40:24:ef:c4:55:bb:ed:c2:ef:b2:92:e9:e2:
         e9:25:91:33:ed:fd:59:ff:fb:ff:1d:ec:f2:70:c1:04:07:1e:
         b0:35:0d:32:08:0f:7e:e6:ef:e2:ac:1f:c6:09:aa:a9:97:c0:
         87:2d:d7:0d:4b:e1:91:22:95:38:5e:3f:c3:b3:35:dd:74:41:
         9e:5f:9f:b9:4c:a1:f6:6e:89:30:1e:f4:7e:10:e1:cb:8d:ef:
         70:80:73:d8:07:37:ac:65:30:d1:de:28:fd:85:2e:ff:20:14:
         ec:e5:8f:c5:34:99:75:d3:4a:85:9b:78:a4:5f:42:40:40:37:
         52:85:34:cf:44:83:b8:4e:63:bf:b6:03:aa:39:73:55:64:68:
         96:b7:ec:05:77:37:be:98:42:5f:97:eb:a9:7e:3b:af:dd:d8:
         a1:6d:d3:71:16:c0:c2:39:1d:fd:37:73:2e:ea:2c:dd:0a:73:
         76:36:2e:61:ac:18:35:d1:81:4b:fb:b1:f3:e7:59:c5:a0:2b:
         10:bc:e8:dc:ed:bf:14:16:bb:ee:1b:81:29:b3:e2:66:5f:8d:
         50:a5:97:69:03:55:90:e6:ef:90:f7:27:a8:70:14:6f:db:c5:
         de:3a:aa:44:0a:4a:b5:ed:82:a0:6c:37:f3:03:05:06:3a:66:
         12:bb:ca:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org