Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.cer
File:                     6288A572C089CF7DE0C87770C42EAC2ADABF153F.cer (raw, json)
Hash identifier:          qOVpzhsbpBUq3WRhhN++J5SQNk+NJ/JHmWVdyADX6kw=
Subject key identifier:   62:88:A5:72:C0:89:CF:7D:E0:C8:77:70:C4:2E:AC:2A:DA:BF:15:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       302BEBAEBD1E85741B25C8502542BBF923361A1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 14:04:58 +0000
Certificate not after:    Thu 07 Nov 2024 14:09:58 +0000
Subordinate resources:    AS: 264086
                          IP: 143.208.24.0/22
                          IP: 2804:2aa4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2b:eb:ae:bd:1e:85:74:1b:25:c8:50:25:42:bb:f9:23:36:1a:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  9 14:04:58 2023 GMT
            Not After : Nov  7 14:09:58 2024 GMT
        Subject: CN=6288A572C089CF7DE0C87770C42EAC2ADABF153F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:33:2f:3d:a9:b5:e9:a7:d2:87:ae:90:ee:59:
                    60:2a:04:92:bc:65:ab:07:a9:cd:a6:53:67:27:6a:
                    31:49:47:cd:fe:0a:7f:dc:93:f7:51:c9:7f:23:a8:
                    34:5a:56:e6:b4:63:2d:12:b0:8b:87:0a:2b:10:af:
                    40:5a:1f:75:fb:49:59:6e:df:ce:8d:d0:79:0b:f2:
                    09:d0:e5:9b:98:92:17:78:3e:cc:f4:3a:cc:55:1b:
                    45:de:ae:cf:e8:d5:fa:d3:fa:3e:02:1f:ed:dc:47:
                    81:f5:82:10:2d:74:56:d2:ad:98:4f:dd:a6:8a:9e:
                    cc:04:09:64:b5:8f:f6:e3:f4:90:63:96:35:fc:7f:
                    1d:91:69:fe:5c:a1:b0:50:6e:86:a7:9b:98:ae:5d:
                    da:ac:34:56:8b:ff:aa:53:ae:b3:97:c6:cf:4d:7c:
                    08:66:a3:f4:c2:f8:e9:71:85:48:90:74:26:16:9e:
                    24:9b:94:b4:a9:c8:02:36:57:c6:89:52:57:23:95:
                    97:97:c6:3c:d7:88:70:eb:aa:80:8b:78:3c:03:61:
                    a7:47:58:1f:44:3a:0d:30:1f:9c:30:e4:e3:67:55:
                    91:e0:e9:05:79:b6:a1:89:95:a1:17:06:21:d6:da:
                    4d:44:df:8e:14:1f:84:f6:9d:be:82:73:9e:ea:92:
                    68:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                62:88:A5:72:C0:89:CF:7D:E0:C8:77:70:C4:2E:AC:2A:DA:BF:15:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6SUgZFnkUkfBPHSeUGZng7HkNLYVpBu7wkVm4xuNTsie/0/6288A572C089CF7DE0C87770C42EAC2ADABF153F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.24.0/22
                IPv6:
                  2804:2aa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264086

    Signature Algorithm: sha256WithRSAEncryption
         88:8c:74:66:ac:ef:2b:f0:34:ab:60:7c:de:c3:18:76:0e:b9:
         f7:50:68:ef:15:21:00:a1:8b:68:07:31:e5:bb:50:96:34:8c:
         78:b1:b2:1f:ad:61:5b:f3:7f:bf:f3:40:84:43:b4:1b:86:14:
         28:34:79:b9:7b:9f:a3:4e:52:2d:e6:54:07:e6:5b:54:f4:f4:
         06:41:f4:c9:f6:b2:d1:cb:3f:b7:fd:52:78:18:99:0f:03:cd:
         a2:1d:37:bc:cc:b9:03:7e:84:f6:53:7c:18:d7:81:66:a3:c3:
         90:3b:c3:6f:3f:0c:35:ef:e1:2a:d4:b1:41:c7:f8:cc:c2:33:
         38:f3:6a:cd:13:cb:ee:d3:d7:cf:c5:0e:55:a2:6b:f9:55:11:
         ca:f8:51:37:dc:50:34:99:cb:08:63:e0:97:b4:33:4f:93:b0:
         03:4e:79:e5:7a:7d:e0:23:04:3b:52:0e:19:7a:c2:63:be:6e:
         f6:e9:aa:2a:7a:b8:e4:b8:ac:c1:49:81:86:3e:1d:db:26:d1:
         9d:3f:01:97:2c:12:9e:8b:90:8e:92:cf:0f:9f:e3:03:99:32:
         87:8a:36:8b:e1:3b:18:4e:4b:68:6f:d0:b7:c2:9b:45:2d:0f:
         92:18:ad:6d:92:18:32:4d:1e:7a:22:66:2e:7c:30:2d:66:ef:
         2b:44:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org