Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.cer
File:                     5C908AE2A50DFF743C0A2B041FD20DD3BC047668.cer (raw, json)
Hash identifier:          jSCI0j8JCjp9I8k0XETvpzijOyq0TDfLvacpeCdMhMw=
Subject key identifier:   5C:90:8A:E2:A5:0D:FF:74:3C:0A:2B:04:1F:D2:0D:D3:BC:04:76:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1196CF91E24C74361C243685AE143027DF002149
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 17:00:52 +0000
Certificate not after:    Thu 25 Jul 2024 17:05:52 +0000
Subordinate resources:    AS: 263623
                          IP: 143.255.44.0/22
                          IP: 177.185.240.0/20
                          IP: 2804:102c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:96:cf:91:e2:4c:74:36:1c:24:36:85:ae:14:30:27:df:00:21:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 27 17:00:52 2023 GMT
            Not After : Jul 25 17:05:52 2024 GMT
        Subject: CN=5C908AE2A50DFF743C0A2B041FD20DD3BC047668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3a:5a:76:a0:8d:75:4c:03:c7:0a:2f:0c:9b:
                    1f:59:90:63:ae:fc:77:db:2d:73:06:f0:79:0b:9f:
                    1b:0c:f8:20:92:9a:e2:92:68:fd:61:41:89:b8:9c:
                    e0:d7:1b:26:31:17:7c:8e:69:f8:68:b0:3b:75:2a:
                    b2:2d:97:01:3e:14:ba:45:45:ba:a1:4b:f5:42:f0:
                    c6:42:68:e6:3f:f4:ec:70:e1:d5:b7:81:c9:dc:c1:
                    af:27:55:d9:3c:7f:d3:27:8f:29:50:63:22:ed:54:
                    af:ed:de:44:85:e6:45:94:a8:35:4c:98:7a:5d:f0:
                    e2:44:2f:a6:83:65:f2:42:5b:1a:be:f9:ca:e6:65:
                    37:4f:26:00:ac:24:f8:05:17:c4:b7:4d:2a:9e:7b:
                    f2:e5:d4:6f:d9:19:66:f9:e8:5b:1b:6d:a2:69:80:
                    c4:12:2e:78:c8:8f:2a:30:d0:d8:2b:28:5e:0c:5b:
                    91:dd:07:fc:8b:33:41:ba:ac:f4:14:d9:2a:82:95:
                    09:5a:eb:da:c0:96:86:12:76:59:d1:31:6d:0a:f1:
                    1e:cd:42:5d:a0:5f:8d:65:5e:02:84:6e:53:95:7e:
                    f9:19:ed:9d:be:c1:1b:a7:95:61:d1:5f:a4:8b:a3:
                    46:93:b0:3d:00:9b:eb:14:e2:ab:97:13:0c:67:4b:
                    f7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                5C:90:8A:E2:A5:0D:FF:74:3C:0A:2B:04:1F:D2:0D:D3:BC:04:76:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7KtJRYiAJwFKxaDZQTQgPN1dwkbkjxRWynozFerU7aMH/0/5C908AE2A50DFF743C0A2B041FD20DD3BC047668.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.44.0/22
                  177.185.240.0/20
                IPv6:
                  2804:102c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263623

    Signature Algorithm: sha256WithRSAEncryption
         43:d9:4b:e7:5c:35:4c:5d:8a:49:7f:ad:fa:3d:71:8e:56:db:
         c7:6b:84:38:fa:75:15:48:a2:2d:59:c3:2b:5e:9e:76:81:1c:
         85:9c:64:26:35:09:6e:0c:8e:36:84:e3:cb:5c:8e:dc:19:64:
         12:0c:81:0d:4f:3b:ba:2b:75:7e:46:50:d1:b2:c9:1a:e1:d2:
         49:02:f5:1f:eb:6f:39:42:a5:bc:35:39:e1:be:48:9b:a1:ba:
         6d:01:1b:42:67:88:3f:b3:7a:4f:77:60:53:c3:9f:9d:08:24:
         b7:0a:06:3d:9c:92:09:b6:2c:21:62:57:38:e3:c0:cd:f8:b8:
         13:bf:1b:bb:32:72:d0:34:90:cb:73:bf:47:28:a2:de:09:86:
         ad:ea:04:83:60:5b:04:88:2e:48:7e:23:0b:ad:14:80:57:77:
         e8:b3:56:d3:76:1a:c0:22:40:04:21:73:f2:3a:69:7b:60:79:
         ee:9d:27:fe:61:cb:7d:86:c1:57:e2:f0:e8:53:ef:be:3a:96:
         5c:58:da:5c:d0:65:cd:aa:b1:4a:f0:4c:a6:55:39:7f:7b:dc:
         b0:db:50:09:4c:01:80:a2:43:14:1e:66:26:41:08:b3:88:2b:
         2f:ac:40:9d:c3:8c:3d:be:d6:2e:ae:ac:bd:57:20:df:7e:5d:
         00:a1:c3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org