Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.cer
File:                     5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.cer (raw, json)
Hash identifier:          UKNLEx7GY/CqUAv6BAbDtQ67EW2H1Bil83iPp4q6Ta4=
Subject key identifier:   58:05:D2:FD:3F:B9:0C:DD:18:10:8D:3B:7B:75:98:5B:2F:9D:8A:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       279C6325CF0DF389DF601817D87D335E68279E68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 10:54:33 +0000
Certificate not after:    Fri 28 Feb 2025 10:59:33 +0000
Subordinate resources:    AS: 264117
                          IP: 138.97.28.0/22
                          IP: 143.255.4.0/22
                          IP: 177.66.76.0/22
                          IP: 2804:22b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:9c:63:25:cf:0d:f3:89:df:60:18:17:d8:7d:33:5e:68:27:9e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  1 10:54:33 2024 GMT
            Not After : Feb 28 10:59:33 2025 GMT
        Subject: CN=5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:02:05:80:e7:96:f3:9b:63:6d:9a:f0:61:
                    a4:6d:25:d1:7d:95:d1:b9:02:4b:3b:d1:16:54:00:
                    0e:81:ee:4d:72:99:80:71:28:a3:c9:ad:7b:19:df:
                    3a:fd:fa:b3:31:36:f3:d9:71:f0:67:df:ce:e9:ce:
                    fb:60:07:f6:3c:66:dc:22:9e:23:a9:7e:38:0f:7a:
                    dc:e1:dc:60:38:6e:ea:e7:40:71:c2:86:96:1c:c4:
                    51:cd:ae:b9:7a:ad:57:c2:93:85:8d:ed:64:30:3f:
                    9c:bf:32:92:1c:4d:ba:ca:b3:46:d2:e8:7a:3f:e9:
                    51:91:bf:20:7c:4b:c1:21:42:20:f0:60:b0:cf:2b:
                    e3:57:54:18:12:61:b0:82:b4:c7:e3:08:1e:9e:24:
                    f4:ae:dd:54:67:b9:3b:50:89:a1:4c:86:5e:98:a6:
                    52:9c:18:9d:e0:e7:e5:69:2b:c7:4e:87:e0:20:20:
                    a3:70:dd:05:d1:5b:be:3f:dc:6b:b8:91:d3:3c:a1:
                    40:62:ae:e3:40:40:86:b9:c1:fe:b5:c2:a2:23:0a:
                    a1:f7:85:b3:ce:bc:82:f6:40:9c:c9:9a:92:22:04:
                    fa:96:8c:3d:c6:b5:35:81:fe:71:cc:17:5f:8f:e1:
                    56:5e:27:fa:76:dc:90:d6:ba:bd:ae:c2:ab:1c:67:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                58:05:D2:FD:3F:B9:0C:DD:18:10:8D:3B:7B:75:98:5B:2F:9D:8A:18
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4BbHUHUuKBN6ZfxGERJtCGtooGkfLKFBS1hQs29ZUWoH/0/5805D2FD3FB90CDD18108D3B7B75985B2F9D8A18.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.28.0/22
                  143.255.4.0/22
                  177.66.76.0/22
                IPv6:
                  2804:22b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264117

    Signature Algorithm: sha256WithRSAEncryption
         08:e1:3c:e5:88:80:15:79:4e:10:7c:39:9d:ba:80:77:f3:49:
         a6:b1:d6:91:bb:9f:d9:23:fc:7c:af:29:28:90:54:43:c2:e9:
         d1:bf:ff:ea:ad:6c:38:d6:c5:dd:09:cb:44:24:19:ec:2a:01:
         f1:ff:34:b1:f1:c4:72:97:c1:bf:cd:23:e2:fa:0a:54:56:7d:
         fb:a9:d2:84:d9:3e:bb:1b:57:fa:16:f7:6d:f9:e2:d4:6c:f1:
         5c:ee:82:b5:1f:63:7d:f1:85:a8:d2:8f:85:02:67:1c:6e:cb:
         86:3f:01:ba:93:70:47:7f:40:7e:cf:f7:89:af:d0:72:1c:ba:
         5f:44:03:33:e3:52:ef:e5:d8:5f:b0:71:c2:9d:c2:e0:49:1c:
         ad:eb:c6:d2:65:4e:71:73:f7:6e:e6:de:e5:72:6f:13:4f:6c:
         b0:52:4a:69:f3:20:5a:a2:92:7f:56:9b:08:3f:80:7d:a7:d1:
         a0:3f:39:c2:ee:ee:b5:59:61:e9:cf:8d:6f:a6:5b:98:37:5b:
         d5:ac:60:b4:5d:e0:ea:d3:3d:a3:57:b4:ad:20:aa:9a:13:76:
         54:98:97:6d:18:5f:04:73:4b:12:ab:8d:14:d8:32:8f:d8:16:
         4d:a4:36:a1:bc:c1:d8:b9:f8:9a:5c:3a:ac:ee:c2:3e:dc:6e:
         b9:25:89:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org