Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/45CE16AA7939EB17050D2F7FB4EE87F4A355D81D.cer
File:                     45CE16AA7939EB17050D2F7FB4EE87F4A355D81D.cer (raw, json)
Hash identifier:          8/Y5CJZdgPzBPC+TS/LSB3iM4iK8xM1PDjAFP6fqe8g=
Subject key identifier:   45:CE:16:AA:79:39:EB:17:05:0D:2F:7F:B4:EE:87:F4:A3:55:D8:1D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       67B563A3FB20170B0146FDDFB7E8EBAC4805127B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/45CE16AA7939EB17050D2F7FB4EE87F4A355D81D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Aug 2022 18:05:13 +0000
Certificate not after:    Tue 15 Aug 2023 18:10:13 +0000
Subordinate resources:    AS: 264117
                          IP: 138.97.28.0/22
                          IP: 143.255.4.0/22
                          IP: 177.66.76.0/22
                          IP: 2804:22b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:b5:63:a3:fb:20:17:0b:01:46:fd:df:b7:e8:eb:ac:48:05:12:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 16 18:05:13 2022 GMT
            Not After : Aug 15 18:10:13 2023 GMT
        Subject: CN=45CE16AA7939EB17050D2F7FB4EE87F4A355D81D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:a4:4a:26:27:52:bc:89:aa:ba:74:3d:3c:
                    3d:34:36:8a:79:76:99:30:50:78:47:f1:5a:96:f1:
                    ad:89:1c:b0:8b:a8:29:d2:73:ef:34:8b:b7:15:82:
                    bb:24:eb:8b:f1:98:9c:2a:ba:85:ba:aa:45:d0:6f:
                    3a:c6:1f:eb:88:0c:53:d5:39:ad:41:36:1f:76:db:
                    0e:30:0e:e7:b7:43:6b:14:9f:3a:97:41:d4:f0:f0:
                    56:c0:3a:eb:57:c7:23:03:2e:ed:9f:dd:36:14:d1:
                    5e:c3:0d:03:d7:e9:1c:c6:66:70:39:8b:5b:42:94:
                    e8:9f:9e:a9:ad:fb:95:3d:12:d5:a9:20:c5:82:4b:
                    de:d5:df:e2:aa:ab:12:a4:56:37:46:14:43:0c:dc:
                    e3:8e:7d:fc:d0:06:b9:84:9f:39:9e:b6:d9:e4:2d:
                    89:6d:18:c4:fb:f9:4a:d8:ce:cd:a7:a2:db:ee:eb:
                    c1:55:b6:38:6f:bf:f6:9c:dd:5d:8c:5c:28:2e:76:
                    a2:ba:3a:27:23:3b:ff:84:e3:d2:26:23:c6:4e:d6:
                    52:70:18:6c:13:c7:0c:e7:62:a4:f6:19:ad:3b:2b:
                    cc:cd:47:67:ad:a7:2f:87:5c:98:3c:af:ce:61:42:
                    28:2d:b6:d1:e4:6f:1f:ad:c0:35:1b:b4:9e:7d:10:
                    72:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:CE:16:AA:79:39:EB:17:05:0D:2F:7F:B4:EE:87:F4:A3:55:D8:1D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/45CE16AA7939EB17050D2F7FB4EE87F4A355D81D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.28.0/22
                  143.255.4.0/22
                  177.66.76.0/22
                IPv6:
                  2804:22b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264117

    Signature Algorithm: sha256WithRSAEncryption
         0b:71:5e:06:c1:d0:fa:04:9b:03:95:59:cf:c7:de:c0:ba:80:
         b9:8d:d7:de:25:3d:43:4a:2c:c9:18:f7:92:d3:c4:4f:62:de:
         5f:0b:6a:54:03:a5:ae:88:ee:6c:30:bc:25:c9:47:c3:5e:cd:
         1a:98:9e:08:b0:5c:1a:bf:c5:3b:48:0a:74:92:64:7b:5d:dc:
         bf:f4:18:b6:f7:7f:09:6d:11:b9:ac:6f:ce:62:51:35:f3:c2:
         a8:a2:d0:74:7e:f1:8c:7a:f1:0c:ec:36:e6:bc:11:c0:e2:29:
         17:21:c8:6b:0d:b5:2a:c4:eb:19:ae:bf:36:46:e9:d7:25:88:
         14:4d:12:2b:59:84:d2:eb:8b:9e:36:59:7c:f5:c7:51:66:b6:
         12:46:3d:35:49:48:fb:21:de:0e:99:db:95:17:d9:6e:72:58:
         12:41:98:dc:da:c5:d3:90:98:e5:17:09:81:4f:88:b7:4a:c4:
         13:fd:d8:c3:ae:61:c8:97:05:a2:93:80:ae:08:13:7a:6b:ba:
         00:62:7d:8d:80:ae:1f:b5:1a:a8:29:f6:86:88:1f:90:0b:68:
         4e:79:59:42:5b:4a:fa:00:e4:41:75:28:51:7d:68:d9:19:8b:
         05:8d:f7:ce:f3:6d:6f:ec:7e:9f:0e:89:35:29:0d:a9:ec:fe:
         6b:7a:4e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org