Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/655FCA94DD95B4D522C66B2E706ADEF44EC9D77E.cer
File:                     655FCA94DD95B4D522C66B2E706ADEF44EC9D77E.cer (raw, json)
Hash identifier:          rGfFKDbpRWP8DHb1MIBv6Dii0qSPUqDf2+DY8f2lrAU=
Subject key identifier:   65:5F:CA:94:DD:95:B4:D5:22:C6:6B:2E:70:6A:DE:F4:4E:C9:D7:7E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1864737EC46092FE2AC0A5ACF2D178B049E9CAAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/0/655FCA94DD95B4D522C66B2E706ADEF44EC9D77E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 Jan 2024 19:39:27 +0000
Certificate not after:    Sun 26 Jan 2025 19:44:27 +0000
Subordinate resources:    AS: 268479
                          IP: 45.161.240.0/22
                          IP: 2804:51d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:64:73:7e:c4:60:92:fe:2a:c0:a5:ac:f2:d1:78:b0:49:e9:ca:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 28 19:39:27 2024 GMT
            Not After : Jan 26 19:44:27 2025 GMT
        Subject: CN=655FCA94DD95B4D522C66B2E706ADEF44EC9D77E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ce:d7:19:99:5e:49:54:64:91:b9:18:26:ac:
                    83:8e:15:32:85:aa:1f:e2:e0:54:15:db:cd:12:be:
                    1f:94:ff:11:f9:c4:9c:66:9b:e8:41:63:56:14:d0:
                    44:7a:89:4c:ce:1a:25:a5:29:ea:b4:94:2c:7c:2d:
                    f1:30:7c:36:8f:ad:1b:f5:e2:65:b3:89:e6:a0:3d:
                    c2:3c:9d:05:ff:9a:98:71:2c:9f:b2:25:3f:4d:e4:
                    fb:f7:53:2d:bd:3b:2f:b8:64:62:ec:95:80:29:5d:
                    e5:1a:03:29:d9:5b:bb:5c:55:d7:26:92:21:34:1d:
                    94:50:2b:23:a7:b5:f7:7a:38:37:14:f9:fa:73:51:
                    62:11:fd:81:d3:2d:8b:19:c4:a3:5a:14:fa:a5:55:
                    84:01:0a:81:5e:5c:0b:26:13:6b:2e:7f:08:f8:5f:
                    70:78:9e:21:f6:28:b3:d1:d4:3a:41:ff:39:36:00:
                    2c:db:7e:f0:ab:b0:60:3f:64:4e:89:fd:8b:58:92:
                    4b:a7:f0:a7:42:32:6f:7c:29:36:b9:e8:96:8d:dd:
                    50:10:11:6e:38:0d:2c:b5:e0:fd:66:a9:48:cf:e8:
                    b9:44:49:90:d0:83:51:e2:c5:5e:bf:f1:7f:4f:4c:
                    e3:e1:11:37:6f:c8:0c:e7:6d:65:d5:90:cf:2f:8b:
                    a4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                65:5F:CA:94:DD:95:B4:D5:22:C6:6B:2E:70:6A:DE:F4:4E:C9:D7:7E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/0/655FCA94DD95B4D522C66B2E706ADEF44EC9D77E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.240.0/22
                IPv6:
                  2804:51d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268479

    Signature Algorithm: sha256WithRSAEncryption
         83:64:e0:6f:9b:3e:85:6b:9f:a0:c2:68:bc:ea:4a:d5:0e:88:
         1a:4f:58:b9:c5:96:63:b0:d8:5d:54:e9:49:c3:3d:09:ae:cc:
         82:e9:a0:5c:95:2a:02:b5:7a:9a:9d:45:7f:f7:6b:c9:1d:68:
         4d:b9:bc:be:0f:36:59:8e:cb:4b:15:94:3b:d4:29:c2:35:2f:
         2c:78:63:fe:0b:8c:73:3d:b2:d1:fd:da:2c:f1:be:61:27:30:
         67:d2:26:35:f5:8c:10:ef:01:37:15:de:48:a5:e9:72:87:9f:
         2f:cb:ab:8b:2b:1c:ba:0b:06:ee:27:b8:d2:61:fa:18:5d:32:
         f4:4e:02:46:57:67:39:1b:e4:6f:44:d2:ee:e9:d2:3a:52:19:
         bb:c3:35:65:55:c5:c7:1c:35:72:4b:cb:f5:a8:3d:e9:d4:62:
         a7:37:5d:d8:25:52:86:66:62:6c:51:c3:34:87:9e:e3:37:35:
         ce:4c:26:6b:71:16:8b:d9:a1:ad:21:b2:d4:6c:5b:8d:52:63:
         27:9f:c7:0f:45:7c:28:28:21:81:2b:f3:64:63:f9:04:84:9c:
         5f:ca:39:d8:e8:8d:37:c5:8a:60:5f:78:1e:49:27:7d:1d:d7:
         b3:b9:5c:33:ad:d2:78:67:44:00:4f:fa:e2:9c:00:0c:88:cf:
         a5:62:cc:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org