Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/43835E0ACE75F1184378E8A9B98936B143E8BDF3.cer
File:                     43835E0ACE75F1184378E8A9B98936B143E8BDF3.cer (raw, json)
Hash identifier:          EYe9f0OJIucfITDjrozRGB8jM+Nwldr8PpF4tKEZrAE=
Subject key identifier:   43:83:5E:0A:CE:75:F1:18:43:78:E8:A9:B9:89:36:B1:43:E8:BD:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0BEE6693CB38BD6C3168E07B3B6CD7A66B724D07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/43835E0ACE75F1184378E8A9B98936B143E8BDF3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Oct 2022 11:17:40 +0000
Certificate not after:    Tue 17 Oct 2023 11:22:40 +0000
Subordinate resources:    AS: 262874
                          IP: 177.11.88.0/22
                          IP: 2804:354::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:ee:66:93:cb:38:bd:6c:31:68:e0:7b:3b:6c:d7:a6:6b:72:4d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 18 11:17:40 2022 GMT
            Not After : Oct 17 11:22:40 2023 GMT
        Subject: CN=43835E0ACE75F1184378E8A9B98936B143E8BDF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f2:86:ce:bf:38:93:3e:d0:e5:60:73:2b:cd:
                    bb:14:16:d7:17:f9:d0:fc:54:db:f9:f6:f7:7a:8b:
                    63:38:99:69:10:46:b0:3f:35:99:b2:56:2e:30:73:
                    d4:27:7c:be:02:8a:60:fa:ed:8b:5b:fe:da:b7:4b:
                    6b:11:f9:ea:b9:3d:15:04:90:04:8b:ba:19:de:53:
                    3c:48:d7:a5:4e:5a:ac:d7:33:ab:22:2a:ff:4c:82:
                    fe:69:5d:d7:56:89:96:46:a7:13:56:be:9d:d8:d5:
                    04:10:25:02:be:ff:e6:2d:6b:4f:43:8a:17:ae:95:
                    9a:1a:f2:1f:fc:87:0d:be:c6:b1:37:2c:1c:09:26:
                    69:20:6b:76:81:2b:de:08:cb:be:3b:62:7f:93:aa:
                    57:c8:b0:1f:a9:43:33:bf:d6:03:32:a3:7d:6d:4b:
                    7a:9f:67:91:b8:c2:bb:67:7e:be:d2:4f:36:18:33:
                    31:a1:18:f0:7e:3b:96:bf:ad:44:68:17:2a:1e:52:
                    91:5e:6a:de:63:cc:0c:cd:ef:a9:69:c5:32:a7:d8:
                    c5:da:ea:d6:f2:e2:af:7f:4f:5c:13:59:20:43:b3:
                    fe:09:86:4e:ab:fb:b4:73:f0:6e:4d:56:58:ed:c0:
                    8a:48:0c:d7:cd:5b:e9:8e:f8:e4:15:e5:45:28:bf:
                    79:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                43:83:5E:0A:CE:75:F1:18:43:78:E8:A9:B9:89:36:B1:43:E8:BD:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EGCCBHBEK7VY54WYRZ1pYzXz836B4zPMFzRhBkUUq2BF/0/43835E0ACE75F1184378E8A9B98936B143E8BDF3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.88.0/22
                IPv6:
                  2804:354::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262874

    Signature Algorithm: sha256WithRSAEncryption
         17:a3:ca:01:16:cd:d7:91:b1:80:00:b6:20:f5:65:e9:10:19:
         0b:22:f9:a8:74:74:bb:60:41:5a:2d:1a:1b:37:4d:0a:6f:cb:
         f6:11:d7:32:fa:94:23:d2:81:bb:66:79:de:b3:a2:2d:1d:51:
         76:4c:46:93:45:df:e9:40:63:e4:a0:95:bf:b2:fa:bc:b1:5a:
         89:e2:6e:61:81:38:70:40:ed:d7:36:42:30:21:a4:a6:54:19:
         f4:88:51:db:d9:cd:5e:c7:cb:08:be:c3:f2:78:b3:86:64:a0:
         0b:bb:41:70:0a:08:b8:e4:cf:65:cd:f8:ce:d9:6e:19:60:c8:
         93:86:d5:c6:14:7c:23:ca:c3:f8:d3:08:de:d2:78:1c:89:c4:
         70:0c:4f:75:bb:29:7f:23:46:29:48:0c:d2:50:bd:80:7d:d0:
         4d:2d:62:62:1b:de:e8:a8:fb:3f:76:9f:71:01:0d:4d:96:d7:
         46:f3:51:65:eb:5b:10:50:20:51:5f:dc:6d:f7:0f:b0:a3:97:
         95:1d:5e:36:35:fa:90:19:9d:aa:b5:db:0d:30:63:ca:87:01:
         b6:ec:da:27:e5:83:9b:ca:f1:6b:37:07:d5:d5:f2:a1:8f:dc:
         5e:ac:56:0e:d5:93:97:ed:17:4d:1a:26:e6:0c:09:78:44:be:
         58:2b:38:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org