Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/78C362024931EABCD22430437714D086537F64FD.cer
File:                     78C362024931EABCD22430437714D086537F64FD.cer (raw, json)
Hash identifier:          Zh4n84VJ7FOZwLYhz+sU23fj/LZgur36En0Ay4Pk4+o=
Subject key identifier:   78:C3:62:02:49:31:EA:BC:D2:24:30:43:77:14:D0:86:53:7F:64:FD
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       453B8204872BDA559DF608CF347DF2F0EE1763EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/78C362024931EABCD22430437714D086537F64FD.mft
caRepository:             rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 03 Nov 2023 07:55:43 +0000
Certificate not after:    Fri 01 Nov 2024 08:00:43 +0000
Subordinate resources:    AS: 266433
                          IP: 45.226.120.0/22
                          IP: 170.82.4.0/22
                          IP: 2804:37bc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:3b:82:04:87:2b:da:55:9d:f6:08:cf:34:7d:f2:f0:ee:17:63:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 07:55:43 2023 GMT
            Not After : Nov  1 08:00:43 2024 GMT
        Subject: CN=78C362024931EABCD22430437714D086537F64FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:1f:02:b2:97:be:97:48:f1:29:34:3d:a7:
                    6f:20:a4:0e:a2:40:ff:83:5e:a0:76:f1:b7:5b:76:
                    e4:a3:ad:38:a2:2a:ca:2e:73:f2:8d:ee:8c:2d:38:
                    e2:97:80:ef:1e:e4:81:59:43:5b:7c:91:a7:60:26:
                    e8:ad:b0:6f:7a:8f:4f:c4:bc:ef:58:2a:dc:cb:7a:
                    e2:8f:68:58:42:b5:39:14:72:a1:e7:79:10:4f:ed:
                    a7:73:b9:ce:c4:d9:52:14:9b:3b:73:e0:ae:de:42:
                    93:47:9e:1b:09:b6:c6:4f:24:8f:0e:56:40:c8:91:
                    62:5c:ad:68:8f:d7:19:e4:01:88:c5:c6:a7:33:b4:
                    3e:18:25:f1:57:8a:7a:46:00:31:20:41:e5:5e:15:
                    3a:a2:38:b6:fd:05:ec:75:be:9e:e9:e0:74:cd:a7:
                    9d:ff:3b:18:81:0d:a4:ea:a6:a4:19:06:d8:0b:74:
                    82:1d:ab:53:7a:96:a9:75:9c:d0:97:65:02:98:d7:
                    5f:ca:46:00:f9:be:73:04:b8:5c:a7:91:60:55:b9:
                    15:ad:5b:5e:bc:88:4c:f2:3c:29:b4:76:50:24:39:
                    08:ad:10:62:ef:23:96:08:16:4b:91:12:fc:3c:6a:
                    24:71:ad:72:61:38:b5:56:c1:d0:aa:34:c8:40:ec:
                    5f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                78:C3:62:02:49:31:EA:BC:D2:24:30:43:77:14:D0:86:53:7F:64:FD
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/C8b1tGNorjL4JdCG33g3GoqWGTnBU7bA7yTTBMxeh9Uf/0/78C362024931EABCD22430437714D086537F64FD.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.120.0/22
                  170.82.4.0/22
                IPv6:
                  2804:37bc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266433

    Signature Algorithm: sha256WithRSAEncryption
         46:00:f8:f8:2f:de:7c:55:ee:14:33:2d:60:54:aa:5a:cc:53:
         f8:dc:a8:f5:84:fe:3a:e5:16:d5:3a:d4:3b:a7:72:35:4c:99:
         78:99:1f:8c:bc:95:91:73:f1:44:a8:ea:74:de:98:cc:77:7d:
         15:33:30:24:cf:d2:cd:15:bb:a1:d7:75:7d:d4:dc:1f:39:c4:
         5e:70:e2:e8:29:e7:dd:fe:8f:b6:53:73:d9:a3:db:9c:11:9b:
         11:ae:85:7d:67:a3:5c:4a:43:a2:0f:e7:01:5f:55:63:3a:2c:
         76:b8:e8:f0:e3:70:2d:68:e0:2d:e7:6d:af:a1:dc:77:e7:db:
         3f:2c:84:ee:31:69:8c:8f:66:13:24:d6:33:b9:5c:60:51:b8:
         ca:08:3c:9d:e1:c6:f1:f3:0c:7d:af:1d:30:02:ce:e1:4e:9e:
         28:8e:64:b6:0a:b5:08:a5:dc:fb:4e:80:21:4b:76:2d:d8:01:
         66:64:44:b9:26:83:2c:f0:97:c6:58:86:a0:71:9b:9a:10:c3:
         be:e4:6e:05:a9:0a:c7:01:6a:8d:e2:65:98:da:1b:dd:21:c9:
         20:50:b0:97:c6:62:a1:b9:35:4e:3d:fa:1d:3d:4c:97:ad:3a:
         ed:ed:78:37:b6:40:23:76:19:6c:ad:ff:72:be:03:e3:36:8a:
         2d:86:ba:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:39 2024 by rpki-client on console-ams.rpki-client.org