Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5929470213BAFF684FBF82D56F8228968AA3EADA.cer
File:                     5929470213BAFF684FBF82D56F8228968AA3EADA.cer (raw, json)
Hash identifier:          0e+TzACfQPRLBSSElCZ4G/OV23mZFJNS514coLbjPYw=
Subject key identifier:   59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E237B5F30B3DA72D2430C2FAABC54D6DC7391BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 Oct 2023 21:45:06 +0000
Certificate not after:    Tue 29 Oct 2024 21:50:06 +0000
Subordinate resources:    AS: 28234
                          IP: 189.127.192.0/20
                          IP: 2804:6f34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:23:7b:5f:30:b3:da:72:d2:43:0c:2f:aa:bc:54:d6:dc:73:91:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 31 21:45:06 2023 GMT
            Not After : Oct 29 21:50:06 2024 GMT
        Subject: CN=5929470213BAFF684FBF82D56F8228968AA3EADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:25:92:91:fc:1d:f3:9d:8a:86:68:8a:0c:
                    6a:54:f5:90:bf:7e:93:b4:25:6a:28:7b:52:77:01:
                    66:a6:b9:4d:b3:e3:16:7a:e9:22:79:54:1d:62:2f:
                    22:58:6b:86:7a:d4:b4:28:38:c2:b5:fc:49:1e:f4:
                    48:d1:da:6a:53:b0:01:84:e8:cf:e8:5e:c8:03:14:
                    3b:fc:c4:ce:60:51:17:91:0b:c1:97:db:72:ba:84:
                    db:ae:71:4d:33:fe:5a:87:94:7c:96:c8:26:01:ba:
                    f5:5f:bb:04:56:67:0d:51:38:7f:bc:e2:34:46:f7:
                    4d:1e:fb:2e:d5:07:31:8b:d6:dd:86:ce:99:c4:0b:
                    7e:76:e4:16:83:1f:1e:0e:84:8b:ce:09:ef:53:7d:
                    89:cb:77:8a:82:e5:83:a2:55:a6:7a:5f:21:54:91:
                    b5:23:15:b3:d0:09:3c:d1:8c:5b:4c:ec:70:4b:3c:
                    d3:a5:33:74:91:54:52:52:c9:3a:b6:c6:8f:0d:a7:
                    72:dd:80:82:71:f1:79:2c:f8:78:8c:5c:a1:c4:3c:
                    3f:27:d7:44:9b:89:cb:de:0b:14:bd:c7:75:99:2f:
                    aa:76:78:37:08:1d:8b:9d:17:0e:87:4a:82:3a:e9:
                    3f:0e:be:3f:f0:02:32:89:35:4f:a8:21:3f:67:c0:
                    36:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                59:29:47:02:13:BA:FF:68:4F:BF:82:D5:6F:82:28:96:8A:A3:EA:DA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HF1En1Hb6qAUFhCVeBwon4fmE5f4Y2aQmnm256Kry2J9/0/5929470213BAFF684FBF82D56F8228968AA3EADA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.192.0/20
                IPv6:
                  2804:6f34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28234

    Signature Algorithm: sha256WithRSAEncryption
         17:9e:8f:95:f9:af:f9:a6:27:e6:d6:00:0c:c7:23:1b:b8:6c:
         24:6c:41:2a:45:a0:c2:69:e0:50:6a:05:49:75:fb:ed:f4:50:
         fd:b3:7b:d2:83:6b:00:93:92:d0:5c:5c:a0:24:c8:56:ef:89:
         cf:96:2c:8f:ed:fd:d6:d1:91:20:8a:38:8d:a4:be:c6:2b:d5:
         16:ba:ec:bd:5e:fa:89:e7:20:a7:a8:d7:69:e2:99:db:d6:15:
         66:18:21:6c:18:12:d5:5f:5c:a2:4d:00:1b:d4:2e:82:b2:9c:
         6c:23:24:98:40:86:d1:ca:03:3b:db:a9:41:aa:0b:9c:64:71:
         1e:e6:b9:2e:1b:56:d5:b7:94:c7:0f:f8:d0:85:04:12:54:29:
         c8:dc:bd:57:9e:e4:d6:e4:6a:f3:1f:eb:a2:e7:50:55:1e:04:
         41:cc:23:cc:f6:25:ba:02:f0:7b:23:81:b2:7e:c0:30:12:4e:
         fd:84:99:b3:e4:00:79:71:e2:c7:7a:09:0d:05:40:dd:ab:0d:
         1a:a5:2e:6d:27:11:ef:47:e1:e4:2e:a2:c6:1a:b0:52:2c:7d:
         43:3e:db:19:11:fd:1a:7b:84:7f:d5:48:cb:14:b1:37:c6:d6:
         7f:00:bf:02:f4:cb:97:0c:cc:bd:54:39:d9:49:61:7a:5f:8a:
         45:79:66:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org