Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/678F46772FCBBCB74F32E1F308389D268F55A45F.cer
File:                     678F46772FCBBCB74F32E1F308389D268F55A45F.cer (raw, json)
Hash identifier:          oB9VVXJEPqu6fsJA466fiLVvMY3SJKP0nhjsff6xW7c=
Subject key identifier:   67:8F:46:77:2F:CB:BC:B7:4F:32:E1:F3:08:38:9D:26:8F:55:A4:5F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       487A00D00C7F37A81F106485E8CED6D1381EDD1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/678F46772FCBBCB74F32E1F308389D268F55A45F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 13:11:10 +0000
Certificate not after:    Wed 26 Feb 2025 13:16:10 +0000
Subordinate resources:    AS: 262441
                          IP: 177.44.240.0/20
                          IP: 179.106.128.0/20
                          IP: 179.190.64.0/19
                          IP: 2801:80:2800::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7a:00:d0:0c:7f:37:a8:1f:10:64:85:e8:ce:d6:d1:38:1e:dd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 28 13:11:10 2024 GMT
            Not After : Feb 26 13:16:10 2025 GMT
        Subject: CN=678F46772FCBBCB74F32E1F308389D268F55A45F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f8:87:67:df:e1:38:d5:f1:cc:7a:79:d6:d3:
                    e1:28:be:77:85:5c:e2:3e:3b:e1:a7:1a:33:1e:01:
                    49:5f:05:5d:63:0c:a9:79:42:25:48:47:f4:7a:d7:
                    05:69:b8:b1:a0:b1:b1:16:b3:3c:d2:e6:c2:8f:14:
                    cc:8f:44:d3:f3:ab:14:32:22:1f:e4:7f:49:e7:1a:
                    8c:dc:ea:57:14:5c:ee:7b:09:3e:71:b8:b4:27:2d:
                    bd:3d:58:1a:fb:7f:06:cd:c7:c0:c4:1a:ad:86:7d:
                    36:f7:16:12:d0:ca:d3:f1:f4:c2:05:2e:dd:60:9e:
                    74:66:f8:63:35:ee:48:a8:c0:35:ab:d2:6c:94:75:
                    e5:86:16:0c:b2:81:d1:36:48:41:ed:a6:18:3d:51:
                    38:ab:20:5a:5a:4e:33:b9:c1:59:2b:be:d8:ce:b2:
                    4b:6b:2d:1b:29:1d:4a:f7:bd:33:02:77:2b:95:30:
                    a8:e4:c9:20:68:30:e3:ec:f2:a3:34:df:a8:ba:5d:
                    be:e6:c2:8e:40:22:71:c6:4f:1f:21:81:8b:12:0e:
                    37:38:f9:2c:ee:0e:fa:cf:58:08:9b:78:97:e4:ee:
                    19:f6:b9:9a:98:65:ed:be:9a:7a:4f:00:79:a6:f7:
                    67:8e:d6:15:97:d2:ad:b7:22:33:74:df:c4:2d:ab:
                    fb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                67:8F:46:77:2F:CB:BC:B7:4F:32:E1:F3:08:38:9D:26:8F:55:A4:5F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3uHre7EwMxLg7NZUe7oHgysCawof2Wo8KsfBN1CU4AVw/0/678F46772FCBBCB74F32E1F308389D268F55A45F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.44.240.0/20
                  179.106.128.0/20
                  179.190.64.0/19
                IPv6:
                  2801:80:2800::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262441

    Signature Algorithm: sha256WithRSAEncryption
         88:8e:60:78:75:1f:19:99:ce:e2:b0:79:56:78:ef:40:48:dd:
         19:17:2a:1d:24:85:6d:08:4e:cc:c4:67:8a:16:51:70:ad:32:
         70:cc:1a:8a:86:f8:fd:22:84:fe:0d:ca:c8:be:7f:55:b0:a2:
         38:a7:70:48:f8:19:78:e8:50:b2:ae:07:c0:cd:79:e5:4a:31:
         54:db:b8:e7:a4:39:0a:8c:07:6f:10:b5:78:a2:01:98:90:ca:
         bd:5c:da:8d:21:81:36:09:10:2b:f2:e4:b9:fc:b0:d2:db:a8:
         ad:57:e9:86:d6:47:0c:1a:31:b4:30:83:22:0a:02:eb:f7:98:
         83:de:62:67:5e:92:0c:83:78:96:ab:23:a9:21:d8:df:ef:83:
         8f:79:06:79:32:b4:e4:28:2d:11:76:8d:63:aa:56:29:d1:6d:
         bb:78:b6:19:2d:cc:10:d2:9a:2d:73:20:29:57:f5:72:62:b8:
         53:d0:6a:c8:42:ce:25:2f:10:c8:b8:b6:8b:51:90:de:e1:7e:
         45:2d:9e:ae:4d:b8:56:0e:68:ec:66:eb:77:28:d9:c1:ed:c5:
         4a:70:a0:df:4e:39:2e:29:fc:a6:b6:50:80:47:fc:70:f1:ee:
         bc:70:a6:39:e1:11:f8:17:91:67:55:32:8e:ff:f3:94:a4:cc:
         ce:4e:16:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org