Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7238DE691F22F4B22346A27CD52742E6EB16026E.cer
File:                     7238DE691F22F4B22346A27CD52742E6EB16026E.cer (raw, json)
Hash identifier:          AFxuFmI6Z2QwuBr+53JE2GEenSCiEH3bOruLu94Y+gA=
Subject key identifier:   72:38:DE:69:1F:22:F4:B2:23:46:A2:7C:D5:27:42:E6:EB:16:02:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3454B02939D0D88205CE8046B889EC539666AD6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/7238DE691F22F4B22346A27CD52742E6EB16026E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Nov 2023 14:38:28 +0000
Certificate not after:    Mon 11 Nov 2024 14:43:28 +0000
Subordinate resources:    AS: 262901
                          IP: 177.22.192.0/20
                          IP: 191.240.176.0/20
                          IP: 2804:1110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:54:b0:29:39:d0:d8:82:05:ce:80:46:b8:89:ec:53:96:66:ad:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 13 14:38:28 2023 GMT
            Not After : Nov 11 14:43:28 2024 GMT
        Subject: CN=7238DE691F22F4B22346A27CD52742E6EB16026E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:36:b1:ad:f3:8b:a6:d3:b6:bc:08:e2:ca:
                    e8:77:bc:b3:68:62:6d:0f:c6:fb:f2:f4:9a:8c:c7:
                    1b:ef:1d:07:34:32:6f:74:0e:a0:3f:49:26:a4:f9:
                    ce:fc:5b:3f:fc:8a:e4:41:1a:00:1f:5f:1f:e2:ec:
                    96:e3:43:43:1c:82:be:ee:12:b3:a9:3e:15:f0:f9:
                    55:a3:b9:6c:41:0a:00:dd:37:63:92:27:b0:db:09:
                    ab:06:a3:88:5b:c1:38:a1:5e:35:7b:42:5f:bf:8b:
                    34:b1:e1:ec:8c:73:12:6b:5e:49:6e:ec:2b:aa:44:
                    97:47:bc:7b:5b:cf:fa:b6:ab:d5:1f:e8:7e:d3:50:
                    67:ff:73:bb:f9:ee:6a:7f:f9:06:63:45:23:67:06:
                    b7:d5:79:02:3b:01:0c:81:0e:d0:5b:38:36:13:47:
                    9a:ed:42:32:df:98:e0:52:f7:f1:90:9f:f6:29:1b:
                    cc:a4:ec:4d:27:b6:3c:89:4f:6b:79:4f:4d:ba:be:
                    1b:0a:bd:13:a5:20:7d:10:ce:e3:26:8c:91:68:1a:
                    29:48:1e:54:69:e3:6f:65:ab:27:0a:cc:41:b1:3a:
                    74:0e:a7:6e:6e:ee:3d:5a:5e:e0:6e:11:61:19:0e:
                    50:85:72:04:1d:a5:60:c4:3c:0f:36:14:9b:32:15:
                    a3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                72:38:DE:69:1F:22:F4:B2:23:46:A2:7C:D5:27:42:E6:EB:16:02:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5Es261YjqWbPGUu6zHG7g8voXciw9C55LKm5mJv5AGpj/0/7238DE691F22F4B22346A27CD52742E6EB16026E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.192.0/20
                  191.240.176.0/20
                IPv6:
                  2804:1110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262901

    Signature Algorithm: sha256WithRSAEncryption
         9c:b7:f8:26:b1:a6:80:52:2b:f4:c8:76:32:30:91:86:bb:05:
         06:74:fc:e2:a2:b5:ea:36:32:9a:77:cb:af:ac:2e:12:5e:6f:
         b8:e0:95:3c:fa:cc:d2:2d:52:99:b1:6f:85:c2:68:52:11:1e:
         fb:2c:d3:10:16:fa:73:bb:5e:6e:be:71:60:f1:97:ca:3c:64:
         f6:6d:84:7b:6f:a3:1a:2e:d0:a6:01:42:e5:d1:9a:fe:b6:a8:
         a8:0c:b4:09:c3:5e:b7:f8:41:49:9d:c5:ce:ba:4b:da:26:b8:
         8a:43:fb:79:12:57:16:bc:83:02:da:f6:17:93:25:15:eb:c1:
         6c:61:33:94:0c:91:1e:1c:ee:d7:60:ce:17:4c:ee:5a:58:ae:
         0b:b6:e8:1a:9d:a1:ba:8c:16:6b:f6:f7:52:d4:1b:38:f5:a3:
         40:5d:f8:fb:85:7b:75:a6:29:ed:a1:5a:19:80:ac:3b:d5:de:
         48:33:a9:8b:bd:1d:87:a4:02:a7:0c:17:f0:8c:07:ff:46:7c:
         6d:5e:c2:d5:11:b7:c0:25:17:dc:33:f2:da:f0:8a:7b:76:ee:
         38:72:2e:2d:64:c5:44:dd:1f:34:a5:91:b9:18:4e:e1:ba:4d:
         51:07:61:a2:12:0e:40:31:e2:65:c5:ce:7a:eb:c5:42:c5:33:
         9e:57:a7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org