Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/524903D80649F057B87931C5F6D861489C4593B7.cer
File:                     524903D80649F057B87931C5F6D861489C4593B7.cer (raw, json)
Hash identifier:          aNVzg+M3lhNx5WAGj0GRPc8BIbLagNHnUNbC9L0ETOg=
Subject key identifier:   52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2C760929A24AEC5BC7AF0C5BB82BFEFC22B1D545
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/524903D80649F057B87931C5F6D861489C4593B7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 19 Jan 2022 18:24:38 +0000
Certificate not after:    Wed 18 Jan 2023 18:29:38 +0000
Subordinate resources:    AS: 267012
                          IP: 45.227.120.0/22
                          IP: 2804:46cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:76:09:29:a2:4a:ec:5b:c7:af:0c:5b:b8:2b:fe:fc:22:b1:d5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 19 18:24:38 2022 GMT
            Not After : Jan 18 18:29:38 2023 GMT
        Subject: CN=524903D80649F057B87931C5F6D861489C4593B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9b:9f:fd:bb:82:ae:01:0d:0e:b7:93:e6:f0:
                    b5:f4:3f:87:d7:2b:a6:f8:fc:92:5b:3f:4e:a4:f4:
                    7a:8c:e3:eb:47:13:b9:6d:e4:85:bd:5d:d9:62:7e:
                    17:4a:72:25:63:a0:bf:29:8d:94:ab:50:79:49:a7:
                    3d:29:10:e1:88:8c:a8:5b:c4:49:db:6d:ad:9c:0d:
                    9d:fb:5a:f0:0c:f1:32:7c:b4:9a:26:46:da:7c:ce:
                    29:49:5b:b5:95:78:85:be:3e:1e:5e:db:99:fd:38:
                    ab:c2:81:13:fa:0e:50:37:a3:18:d8:d6:1e:4e:c2:
                    92:dc:c5:fc:59:c0:bd:fa:a3:69:8d:89:75:42:0a:
                    a3:49:4f:99:29:93:92:cf:d8:3b:8e:3d:a5:0a:ab:
                    74:f3:bd:f7:32:a6:bb:f1:cc:26:84:03:7e:63:3b:
                    92:af:73:6d:e9:fd:65:58:47:62:2b:9a:6e:bf:8c:
                    2d:20:e4:30:56:0e:e7:9f:41:1f:e5:ff:ba:60:e4:
                    64:2a:c7:af:c1:83:42:4b:50:b2:cd:64:2f:f7:a8:
                    65:fb:04:0e:aa:49:59:71:5b:3a:1c:5b:5c:44:4b:
                    bf:1d:be:85:a1:58:83:77:f3:ac:0a:f8:8c:b1:03:
                    83:2e:72:c0:d4:18:d4:51:6b:85:26:a3:0f:b4:6b:
                    77:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/524903D80649F057B87931C5F6D861489C4593B7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.120.0/22
                IPv6:
                  2804:46cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267012

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:9e:6c:5f:89:9f:f1:d4:f3:0d:e5:ef:19:0b:a7:47:cd:
         b5:83:f9:ea:89:df:22:c0:dd:7b:43:53:8d:b6:ee:3a:a5:70:
         37:c1:c4:43:45:2b:57:73:27:73:f4:db:67:cf:a2:01:4e:6b:
         be:50:b8:fc:ed:8a:4a:1a:79:79:93:a4:40:74:04:b9:85:d7:
         a8:7e:71:ff:10:fb:4d:4a:9f:49:72:88:e8:99:d3:d5:d3:72:
         7b:81:d2:3c:9e:95:1d:19:09:00:35:ff:4f:17:7c:52:8f:e9:
         84:ab:f7:29:5a:d3:ac:0e:f4:67:48:7b:36:e2:91:63:f1:78:
         b1:81:1d:69:50:45:ee:6f:c9:11:af:71:78:d7:60:b1:47:e4:
         64:d8:aa:30:dc:3b:ab:9d:2a:d0:dd:9a:9a:82:3c:9b:c8:fe:
         63:e7:1c:c2:7d:9b:59:ad:03:c7:64:ba:1c:e8:7f:4a:77:4b:
         91:a9:30:df:c8:bf:90:a2:d3:91:77:6e:74:4d:f8:a1:d4:8b:
         34:2f:d3:5d:43:7e:70:40:6b:a3:c7:06:dd:83:ae:ec:70:8a:
         96:22:85:7d:c4:ca:30:30:7a:a6:0a:52:05:ed:3d:c6:65:2d:
         63:3d:01:8a:71:76:6c:2b:ef:0e:c7:8e:d3:f2:30:ce:d7:ec:
         a0:5c:17:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:29 2024 by rpki-client on console-ams.rpki-client.org