Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/7617BBE87B9B35DD5DF338D496453252933052CA.cer
File:                     7617BBE87B9B35DD5DF338D496453252933052CA.cer (raw, json)
Hash identifier:          QF4YGk7yPcuD9GqIjdUi36KIVL4kx7x/gtS3/iv0dYg=
Subject key identifier:   76:17:BB:E8:7B:9B:35:DD:5D:F3:38:D4:96:45:32:52:93:30:52:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       34009663B85CD20B956BAFBDBCBD19A737D9C4FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/7617BBE87B9B35DD5DF338D496453252933052CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 21:01:32 +0000
Certificate not after:    Mon 10 Mar 2025 21:06:32 +0000
Subordinate resources:    AS: 267552
                          IP: 45.70.60.0/22
                          IP: 2804:4328::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:00:96:63:b8:5c:d2:0b:95:6b:af:bd:bc:bd:19:a7:37:d9:c4:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 21:01:32 2024 GMT
            Not After : Mar 10 21:06:32 2025 GMT
        Subject: CN=7617BBE87B9B35DD5DF338D496453252933052CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:88:bc:e0:f4:d7:6d:90:5b:fd:55:0f:85:be:
                    7b:98:62:a0:01:b5:e8:12:b7:61:d5:0c:c4:82:7e:
                    60:6b:ca:cc:c2:e4:e8:9c:34:4a:90:e3:4f:6b:5b:
                    47:c1:5b:a4:e0:75:83:bf:20:a2:e9:26:9e:65:0d:
                    7d:31:d1:2c:77:6a:ec:a5:30:8c:a2:79:4e:ab:75:
                    ef:08:19:92:c7:56:b4:9e:b9:da:81:b7:7c:23:6b:
                    6f:56:74:e6:62:d0:59:cc:36:87:ba:5b:5e:79:08:
                    92:39:60:b6:40:6a:57:f8:12:e6:88:57:7b:ac:d0:
                    f2:f7:04:7d:a8:44:0d:6a:e1:4e:a9:db:4c:aa:2d:
                    b5:c7:94:03:02:5c:68:7b:8c:38:45:da:8f:b7:31:
                    6c:fd:0d:b4:e5:af:39:81:08:cb:2f:ee:92:95:3d:
                    39:80:41:69:fe:58:90:af:de:23:0a:96:93:d6:32:
                    ab:d6:82:47:9d:eb:09:c7:0a:0d:06:4c:6a:2a:d5:
                    61:a5:5d:6b:2c:ba:7f:77:b7:be:04:16:64:98:43:
                    84:8d:40:91:e4:1d:5d:0a:e6:a0:9c:65:5d:f6:4e:
                    e0:bf:a9:6f:97:a8:06:76:90:8e:f3:6a:ca:53:b6:
                    6a:bd:7e:ba:d1:88:7d:37:20:bc:c1:e5:03:52:24:
                    c1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:17:BB:E8:7B:9B:35:DD:5D:F3:38:D4:96:45:32:52:93:30:52:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BcsRtS8ks94U2sg1ewBpqARvcmsD8CeHQrz3CqeEnZhp/0/7617BBE87B9B35DD5DF338D496453252933052CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.60.0/22
                IPv6:
                  2804:4328::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267552

    Signature Algorithm: sha256WithRSAEncryption
         96:b6:69:a5:d4:63:ca:00:bc:ba:3a:61:18:f6:53:62:f5:13:
         73:de:71:b5:42:23:bc:de:12:bd:92:5c:03:84:27:c7:7d:14:
         ff:80:fa:79:6f:30:08:53:43:2f:8c:9b:76:a0:43:bc:3d:90:
         e2:f7:a6:bd:f4:bd:fc:1b:5a:cd:a6:99:c5:47:77:20:1f:71:
         24:0f:0c:a6:5d:27:d8:a5:7a:1a:fa:a4:a3:e9:60:cc:1e:f2:
         6c:72:c9:5a:13:d9:3f:7e:4d:ce:4f:e1:9c:60:e7:80:57:61:
         1c:0f:f0:2b:ae:ff:b4:ee:7e:42:74:a7:5e:6f:5a:58:08:a5:
         ec:04:28:c5:30:96:7e:44:b7:65:95:4b:b4:a2:74:51:8c:f0:
         c2:09:c1:af:b1:67:8f:23:97:dd:7d:b5:d3:b6:85:18:e5:71:
         08:97:ea:01:4b:c0:0c:18:75:3f:cb:87:87:8e:ff:8a:e9:71:
         7b:3b:0f:64:56:32:1b:6b:b3:65:05:5a:d5:e8:28:cd:18:d2:
         3d:d9:bf:cc:96:41:65:14:8e:18:67:5d:ce:e1:b8:63:90:6b:
         81:37:74:20:e6:c9:44:26:b5:2d:a1:2c:43:9b:97:55:e6:84:
         61:cc:6b:d3:c7:2b:26:28:dd:75:a9:54:18:a4:30:d0:27:2e:
         3a:bc:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org