Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/698EF7DEA063C9305D5A1B8E455F8E094896B04D.cer
File:                     698EF7DEA063C9305D5A1B8E455F8E094896B04D.cer (raw, json)
Hash identifier:          QcLM8eab53Y6rjhIzTZbBPu+z2mNBk4iaE386RIRCMM=
Subject key identifier:   69:8E:F7:DE:A0:63:C9:30:5D:5A:1B:8E:45:5F:8E:09:48:96:B0:4D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       342E0E8304B36D02A47D744B3881D22EFF5A6625
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/698EF7DEA063C9305D5A1B8E455F8E094896B04D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 11:15:17 +0000
Certificate not after:    Thu 18 Jul 2024 11:20:17 +0000
Subordinate resources:    AS: 28359
                          IP: 177.70.192.0/20
                          IP: 179.97.192.0/19
                          IP: 187.94.128.0/19
                          IP: 189.76.176.0 -- 189.76.207.255
                          IP: 2804:15fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2e:0e:83:04:b3:6d:02:a4:7d:74:4b:38:81:d2:2e:ff:5a:66:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 20 11:15:17 2023 GMT
            Not After : Jul 18 11:20:17 2024 GMT
        Subject: CN=698EF7DEA063C9305D5A1B8E455F8E094896B04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4b:a4:71:d1:cd:56:00:eb:21:f3:6d:ee:3e:
                    57:9f:77:ef:82:c0:6a:2e:ff:02:9e:0f:15:4b:ed:
                    c9:98:dc:cd:3a:e2:41:6c:53:0b:b1:ec:f1:b5:43:
                    fc:1b:b7:d5:fc:86:fd:7c:8d:db:6a:6d:44:a3:b2:
                    12:06:d1:51:93:92:75:e2:a3:79:5e:b9:56:2c:e0:
                    a7:81:e0:9c:bf:56:80:59:60:99:a3:fc:ab:26:63:
                    47:f1:3c:2d:ae:7b:ce:30:e0:31:30:9a:0d:11:17:
                    09:09:6e:cf:56:24:05:3d:b0:0e:95:35:e4:7a:c8:
                    3e:71:03:3d:0e:b9:07:32:8d:f1:9d:90:3a:b0:e7:
                    88:96:a6:52:0d:73:43:db:f2:8e:4b:8a:18:9a:83:
                    70:59:2f:2f:ac:9b:ff:57:82:45:32:59:68:ea:86:
                    9e:d8:8a:33:3f:82:d5:14:ae:5d:58:78:27:36:9f:
                    7d:bf:c5:49:9a:38:67:d9:5c:17:dc:4e:f8:f4:1b:
                    4d:cf:65:eb:71:63:77:d7:8e:a4:de:35:55:19:f8:
                    8c:dd:4b:b7:b5:f7:7b:5c:45:46:57:87:2d:0f:09:
                    90:49:5b:e4:b5:b9:f7:92:57:ca:35:70:06:69:50:
                    57:e7:44:3d:06:d8:5e:38:86:68:a9:08:0f:3d:ac:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                69:8E:F7:DE:A0:63:C9:30:5D:5A:1B:8E:45:5F:8E:09:48:96:B0:4D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7vMveJacj6g3mHkoJcjYMQbaLEaFjhrBQwokeLwshQj1/0/698EF7DEA063C9305D5A1B8E455F8E094896B04D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.70.192.0/20
                  179.97.192.0/19
                  187.94.128.0/19
                  189.76.176.0-189.76.207.255
                IPv6:
                  2804:15fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28359

    Signature Algorithm: sha256WithRSAEncryption
         37:09:c7:3a:b6:f2:1f:8a:c7:2b:78:d0:8f:04:71:50:f2:55:
         d0:58:de:ab:5e:ed:e4:8e:dd:3d:0b:4d:a6:d6:8a:b6:ba:00:
         69:36:3c:d3:6d:c8:23:b3:72:8c:4c:00:a2:f9:a8:51:8e:0a:
         c7:ab:43:40:50:99:ea:57:fc:8d:3e:84:b5:46:be:7e:68:2d:
         4c:68:6c:aa:dd:33:1c:32:88:9b:79:e4:fe:e6:c6:77:5e:1f:
         b1:8b:90:2e:1d:f7:0c:9b:bb:dc:ca:6a:6a:71:bb:80:8c:10:
         d3:60:c5:5c:e6:ea:b9:86:81:ee:53:c7:f0:01:50:80:de:be:
         be:e9:32:9d:70:91:1b:e3:cb:f6:e2:fa:b9:28:af:67:da:ba:
         6e:f8:19:0c:9e:e1:59:dd:8b:70:c6:53:46:ff:cb:9a:3f:f6:
         43:00:0f:e9:32:8d:16:b4:20:e3:e3:8a:c6:d1:c6:1d:5e:54:
         10:58:ee:56:35:59:9f:02:3a:b7:61:a2:e6:fa:f2:ab:3a:34:
         17:d7:70:c4:9b:ff:93:fc:87:1d:ba:f9:df:0b:28:52:6a:21:
         f1:07:64:e6:56:b3:26:5d:ad:2b:35:31:5f:62:7b:02:92:1c:
         d5:c9:83:eb:e7:23:a1:d6:c6:42:1a:42:45:b8:91:2f:23:d9:
         8b:69:93:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:22 2024 by rpki-client on console-fra.rpki-client.org