Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/6412782E54CC80849912277A375A0261FBBD2F8D.cer
File:                     6412782E54CC80849912277A375A0261FBBD2F8D.cer (raw, json)
Hash identifier:          JLdujebKbQtl974s0ZD3XwQwTGqJ5fOAEpHvLcUZG1s=
Subject key identifier:   64:12:78:2E:54:CC:80:84:99:12:27:7A:37:5A:02:61:FB:BD:2F:8D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1B4BF3864ACCBD3A941A3898A5CC5D17818A7A51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/0/6412782E54CC80849912277A375A0261FBBD2F8D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Dec 2023 22:45:20 +0000
Certificate not after:    Fri 13 Dec 2024 22:50:20 +0000
Subordinate resources:    AS: 263951
                          IP: 138.255.20.0/22
                          IP: 2804:2844::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:4b:f3:86:4a:cc:bd:3a:94:1a:38:98:a5:cc:5d:17:81:8a:7a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 22:45:20 2023 GMT
            Not After : Dec 13 22:50:20 2024 GMT
        Subject: CN=6412782E54CC80849912277A375A0261FBBD2F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0a:43:f2:26:5e:bc:28:88:91:e3:e3:8a:b2:
                    2b:64:13:dd:76:3b:8b:a9:3e:e5:42:8b:26:3f:9c:
                    73:54:c4:e6:da:85:1a:a1:28:3b:87:ac:d3:57:eb:
                    c8:ca:b7:22:77:48:84:92:3b:2e:16:f2:7a:55:56:
                    1a:33:58:e1:d4:75:65:0b:45:cb:29:01:05:7f:ab:
                    63:ca:54:3d:c8:29:6f:3a:4d:ca:90:05:b0:24:77:
                    00:e5:dc:0b:5a:64:27:3e:e5:14:5a:0c:7f:38:d5:
                    9c:a5:c0:1c:f0:da:c3:f1:e0:e9:d7:c8:c0:0d:94:
                    32:9c:59:82:ae:87:18:21:c7:84:91:21:be:b8:2e:
                    ad:17:03:a6:da:a8:47:3f:51:c0:b9:45:f5:df:16:
                    4a:15:d5:bc:9f:c2:ba:e5:47:7d:2b:5b:da:64:14:
                    c7:4b:10:de:21:9d:7d:9a:35:cf:70:4f:54:7b:f6:
                    54:4e:88:d4:ec:46:34:71:18:c1:83:a2:bb:a7:a4:
                    53:97:2f:85:13:98:b5:87:ee:49:7b:ab:66:67:fd:
                    59:9d:f7:d2:73:8e:ee:bd:fa:f0:de:8a:6f:20:d2:
                    6d:d0:98:ce:c6:e5:5c:c2:c2:7d:1f:3f:a4:f8:8d:
                    1c:18:1e:53:4c:78:73:f1:0f:9f:81:ca:f9:6f:13:
                    64:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                64:12:78:2E:54:CC:80:84:99:12:27:7A:37:5A:02:61:FB:BD:2F:8D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BThyfVhd3jeAjnkyQ9UCkDSm4CE83NYRgTBddTPQhMzS/0/6412782E54CC80849912277A375A0261FBBD2F8D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.20.0/22
                IPv6:
                  2804:2844::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263951

    Signature Algorithm: sha256WithRSAEncryption
         5b:ac:41:07:ec:ee:6f:94:9d:41:93:ba:82:77:d3:be:a1:45:
         28:58:cf:0f:06:81:b8:46:a2:64:57:84:9a:9d:c4:c2:e6:0a:
         c8:7f:dc:cd:6e:fb:40:f0:d4:25:82:da:43:d5:15:35:f1:b3:
         03:70:32:f1:fe:16:0a:09:10:f7:a7:1b:cb:90:7b:79:b4:eb:
         a4:a7:fb:68:60:7d:ab:67:0c:18:e1:60:94:0d:8b:24:40:a4:
         ae:9c:25:8c:53:c7:5c:e6:8e:47:5e:c8:c8:a4:bf:3e:89:07:
         49:0b:67:d6:a7:60:06:76:23:21:82:33:0c:f2:a9:e6:25:72:
         ae:fc:91:af:60:36:c6:91:d3:27:ae:d8:a4:c1:b4:9c:96:35:
         94:a2:b3:4d:26:6a:92:92:90:db:f8:d6:6b:1b:08:e8:46:e3:
         2c:d6:ad:8c:b3:2b:b1:b9:12:12:a2:5b:b2:b8:c8:f7:0b:54:
         ef:f9:27:81:3b:fb:18:56:12:72:c1:71:bb:ae:db:a9:e8:4b:
         9a:00:eb:d9:24:cd:5f:b8:f9:46:d4:d7:dc:a5:71:0c:00:ff:
         70:e5:e0:f8:6b:4f:75:d5:bc:42:92:50:61:8e:09:d6:31:d8:
         e1:b5:6e:0c:a8:71:69:e1:b0:2d:34:2e:dd:fb:d9:d5:71:35:
         c7:d3:73:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org