Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/76A98DCE3044413110B31F3B267B5F050111F9FD.cer
File:                     76A98DCE3044413110B31F3B267B5F050111F9FD.cer (raw, json)
Hash identifier:          FVSZKSrB4S3TTuJWDYN3BiH9JF8fbQJYS+eWS9ECAg4=
Subject key identifier:   76:A9:8D:CE:30:44:41:31:10:B3:1F:3B:26:7B:5F:05:01:11:F9:FD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E75548619E4E932E5B53239D2B2E4BB1B6C2E62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/76A98DCE3044413110B31F3B267B5F050111F9FD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Mar 2024 13:35:41 +0000
Certificate not after:    Mon 10 Mar 2025 13:40:41 +0000
Subordinate resources:    AS: 266247
                          IP: 45.6.216.0/22
                          IP: 2804:3d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:75:54:86:19:e4:e9:32:e5:b5:32:39:d2:b2:e4:bb:1b:6c:2e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 11 13:35:41 2024 GMT
            Not After : Mar 10 13:40:41 2025 GMT
        Subject: CN=76A98DCE3044413110B31F3B267B5F050111F9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:2d:4a:8e:22:b2:e6:86:25:0f:44:82:35:
                    06:f7:a7:6a:f2:24:e9:c2:07:ff:4e:29:df:c3:bc:
                    af:26:24:0e:62:f8:c4:2b:b8:16:6e:cb:28:93:4b:
                    a2:d7:42:ab:7d:f1:11:3d:bc:e6:3e:33:5e:5b:c8:
                    3a:2a:ef:13:89:bc:e5:dc:36:eb:45:c2:32:85:0d:
                    f5:ed:b6:84:bf:9a:96:11:d4:8e:db:6f:88:5d:ad:
                    f2:86:8d:c5:7a:15:a6:9b:75:ea:57:a8:47:43:6c:
                    46:bd:05:a5:12:2b:02:43:13:cb:e4:1d:e4:a2:d0:
                    27:e9:16:bd:42:a9:19:6b:95:d4:af:8b:cf:50:8e:
                    7a:44:b3:d6:e9:7a:34:a2:f7:16:4d:e6:90:98:81:
                    79:80:0f:00:1d:19:24:75:11:3e:39:db:7b:01:66:
                    35:7f:33:d1:fe:dd:c7:c2:f7:3b:23:f3:52:63:04:
                    ff:88:db:f7:39:d7:d8:f7:e2:13:e8:96:c6:42:e6:
                    aa:45:b1:50:c8:e3:b2:6f:fd:21:ac:c1:ff:e0:c1:
                    8e:e6:2d:e4:01:21:b1:7c:f7:f7:81:d9:fd:aa:dd:
                    0d:f4:c4:5b:75:aa:aa:53:4b:dd:68:e8:c2:6c:73:
                    01:37:66:fb:a0:16:08:02:7c:b1:04:a1:eb:55:8b:
                    d1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                76:A9:8D:CE:30:44:41:31:10:B3:1F:3B:26:7B:5F:05:01:11:F9:FD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/76A98DCE3044413110B31F3B267B5F050111F9FD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.216.0/22
                IPv6:
                  2804:3d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266247

    Signature Algorithm: sha256WithRSAEncryption
         24:26:92:1b:16:4c:c8:e8:74:65:70:55:ab:48:5e:4d:1e:d5:
         96:3e:84:f7:26:d4:4d:15:0a:f0:e3:ec:48:ea:b8:4f:f8:dd:
         40:70:13:a2:60:88:ae:be:ad:8b:b8:15:90:89:b5:e1:b3:eb:
         0e:48:a7:98:2f:25:78:9a:d1:85:fa:7c:c6:33:39:85:66:a2:
         4b:1e:9e:02:1e:49:28:7f:86:a6:5a:6f:30:e6:cb:33:b0:dc:
         84:7d:73:62:47:e7:df:2b:3f:c8:c3:f0:04:cf:cc:3c:f0:9b:
         c0:90:76:ff:85:80:6c:b4:31:68:81:4e:33:41:55:58:25:4b:
         55:61:1e:e2:80:23:d3:1c:07:dd:03:f5:40:f6:de:7c:f4:02:
         1e:77:2a:b9:3d:89:59:87:c2:e8:b2:c4:36:0d:53:07:7c:73:
         cc:04:24:6c:ec:c3:58:1f:bd:e0:a0:19:6f:00:0a:af:16:ef:
         3c:fe:26:f6:d6:eb:8e:03:68:cd:30:cc:e0:91:e3:be:71:aa:
         71:b8:20:0a:44:f8:6f:1a:84:9a:ff:03:f1:11:0b:da:dd:76:
         98:52:6b:02:be:ae:14:57:37:92:d9:13:03:f7:cb:a4:bb:22:
         7f:a6:2f:70:68:87:7e:7c:39:ce:81:55:6e:fe:0c:ac:f0:c8:
         55:33:ef:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org