Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/515BB17ED715783B244F820C94B6317C3A1D8A21.cer
File:                     515BB17ED715783B244F820C94B6317C3A1D8A21.cer (raw, json)
Hash identifier:          C8H+Fgj/Ob2Omt+tBDUFBJjvlKHuJ7xyHOmHQ9Toc2M=
Subject key identifier:   51:5B:B1:7E:D7:15:78:3B:24:4F:82:0C:94:B6:31:7C:3A:1D:8A:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6BF31E9E42DAEB801C7031C2DD5B37C98C782888
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/1/515BB17ED715783B244F820C94B6317C3A1D8A21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 06 Mar 2023 17:08:02 +0000
Certificate not after:    Mon 04 Mar 2024 17:13:02 +0000
Subordinate resources:    AS: 268622
                          IP: 45.164.36.0/22
                          IP: 2804:5400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f3:1e:9e:42:da:eb:80:1c:70:31:c2:dd:5b:37:c9:8c:78:28:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  6 17:08:02 2023 GMT
            Not After : Mar  4 17:13:02 2024 GMT
        Subject: CN=515BB17ED715783B244F820C94B6317C3A1D8A21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b1:0a:1b:0c:bb:77:92:63:0a:91:c7:71:30:
                    c4:28:41:57:d3:1d:0c:a3:88:9d:f7:ab:e2:90:7f:
                    b9:f8:b3:06:57:7d:f7:df:dd:db:ad:01:a0:1f:4e:
                    a2:3b:56:3c:1c:0a:26:c6:c9:cc:a9:80:a2:3a:5e:
                    2f:f5:a0:72:53:91:e7:3c:a4:14:a0:b8:d7:e0:ac:
                    9b:e2:01:9c:9b:67:19:f1:df:4c:35:7d:c9:ec:a3:
                    e5:e3:e3:98:ed:a5:49:75:1a:b2:95:c4:02:d2:61:
                    dd:fd:58:6d:a7:79:4e:f5:47:16:f8:04:67:1b:45:
                    db:a2:cf:ae:f5:c3:4d:b3:6c:2a:18:59:3e:c4:0f:
                    78:b7:b0:e3:8d:3d:64:57:48:e6:d6:ed:de:50:04:
                    17:93:5f:2b:99:bf:22:07:a2:c9:25:6c:64:94:c3:
                    fa:85:11:66:63:1d:bd:5e:41:4c:06:16:3b:04:73:
                    7d:97:a1:5b:bf:7c:93:e7:df:95:ca:05:a0:23:0c:
                    92:41:b0:24:bf:b1:cf:2a:84:3c:43:aa:af:0c:c9:
                    64:04:99:11:3e:bd:f3:4e:2d:38:2c:32:86:83:84:
                    e6:a3:ca:a7:06:58:f1:6f:f1:b6:78:60:90:c9:3e:
                    b3:3a:78:64:d2:37:5a:8c:41:c9:6e:0a:ed:58:aa:
                    0a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                51:5B:B1:7E:D7:15:78:3B:24:4F:82:0C:94:B6:31:7C:3A:1D:8A:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/1/515BB17ED715783B244F820C94B6317C3A1D8A21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.36.0/22
                IPv6:
                  2804:5400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268622

    Signature Algorithm: sha256WithRSAEncryption
         42:43:a5:b1:2f:ab:fa:f5:5a:57:55:06:d1:bd:01:24:9f:cd:
         0b:41:dc:ac:6d:cf:96:29:03:68:10:43:af:2c:ab:e3:8a:b7:
         ac:8c:a7:ad:ce:bb:a1:62:38:96:17:46:75:a1:7d:89:57:62:
         03:9e:9c:a3:ed:a5:2b:fe:e5:3b:2a:6c:72:68:6a:10:7d:d3:
         40:95:35:57:f2:29:21:10:20:bf:25:88:42:08:df:09:f0:17:
         2d:2e:3f:d4:e0:fd:3a:26:00:32:8d:77:f7:62:bf:53:73:fe:
         74:53:24:41:92:e8:82:f5:2e:a5:30:72:2c:19:eb:4e:3d:d5:
         c2:0e:26:97:fb:0f:88:8f:32:a7:bd:07:48:f7:be:45:1e:16:
         a2:08:2b:4c:81:ce:4c:27:4c:26:5a:25:ff:6f:15:5c:59:0f:
         2d:44:62:79:8a:f3:b4:35:ff:c6:b9:56:b1:86:7d:28:27:57:
         91:ae:fa:fe:bc:49:7d:a9:04:ad:f6:7c:89:9f:e1:e0:e4:47:
         13:60:2b:a8:64:bf:67:dd:c2:31:59:76:dd:a4:67:45:37:50:
         72:5f:9a:8a:55:30:03:0a:2f:e7:75:90:cb:a5:bf:f8:28:2f:
         d0:5c:2f:14:62:d2:30:29:85:96:4a:b6:27:1d:fb:7b:2e:7b:
         32:5b:15:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org