Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/79061C2B526054D2168C0FEDE234A36980C7D6BC.cer
File:                     79061C2B526054D2168C0FEDE234A36980C7D6BC.cer (raw, json)
Hash identifier:          Ca6kxoqbBGNw4/Lv5XufD1ierx8ybLaLz7zUCccsOEU=
Subject key identifier:   79:06:1C:2B:52:60:54:D2:16:8C:0F:ED:E2:34:A3:69:80:C7:D6:BC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       36D4795324F287F83B1A7E58909D9F498A4A80A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6HYwrnQXFtVvULowc1Ddtfm4ig8d3FNvq74CggnsLQQ1/0/79061C2B526054D2168C0FEDE234A36980C7D6BC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6HYwrnQXFtVvULowc1Ddtfm4ig8d3FNvq74CggnsLQQ1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 19 Sep 2022 18:51:57 +0000
Certificate not after:    Mon 18 Sep 2023 18:56:57 +0000
Subordinate resources:    AS: 53135
                          IP: 131.221.92.0/22
                          IP: 138.219.152.0/22
                          IP: 168.227.232.0/22
                          IP: 170.79.184.0/22
                          IP: 177.39.240.0/20
                          IP: 186.192.176.0/20
                          IP: 186.193.48.0/20
                          IP: 191.243.112.0/20
                          IP: 2804:1054::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:d4:79:53:24:f2:87:f8:3b:1a:7e:58:90:9d:9f:49:8a:4a:80:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 19 18:51:57 2022 GMT
            Not After : Sep 18 18:56:57 2023 GMT
        Subject: CN=79061C2B526054D2168C0FEDE234A36980C7D6BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:74:0a:71:7f:b8:50:02:54:af:13:a6:8b:58:
                    bf:72:aa:76:88:54:d6:ee:a4:98:b2:33:54:30:60:
                    02:05:fd:5e:05:ea:df:6b:29:13:84:96:dd:e0:7d:
                    f5:55:22:81:fa:0e:d6:29:51:f5:7a:0e:fc:4c:e0:
                    8c:04:ea:52:c9:bb:d7:77:bf:8d:11:c2:ef:fd:3f:
                    31:b5:31:2b:a1:b6:29:aa:13:a4:d8:32:75:78:fb:
                    78:43:2e:81:26:23:2a:dc:ed:78:7d:44:5d:ca:ed:
                    50:a4:6c:b1:97:84:d0:4a:95:2b:31:26:08:3a:2f:
                    28:31:6a:88:be:b0:cf:f4:69:41:91:17:e8:74:bf:
                    5e:51:a4:39:72:cf:47:31:84:07:0b:4d:c1:bc:9f:
                    d6:f1:d3:43:de:b3:3c:2b:fd:54:d9:53:a8:c7:17:
                    73:67:fa:eb:77:2d:5f:77:c7:c2:ff:13:ef:23:07:
                    e5:f2:d9:8a:1a:b3:95:fe:c4:e0:22:eb:5b:03:6c:
                    d7:36:00:a2:ed:a5:2f:65:4b:2b:9c:e8:8c:54:f9:
                    78:93:67:1e:95:54:39:26:ad:f7:0c:9b:0e:40:89:
                    eb:48:ea:62:21:63:2a:f9:a6:49:8f:78:ed:cd:ca:
                    74:11:ae:75:f0:ff:db:84:ef:cc:35:ef:5c:54:33:
                    81:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:06:1C:2B:52:60:54:D2:16:8C:0F:ED:E2:34:A3:69:80:C7:D6:BC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HYwrnQXFtVvULowc1Ddtfm4ig8d3FNvq74CggnsLQQ1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HYwrnQXFtVvULowc1Ddtfm4ig8d3FNvq74CggnsLQQ1/0/79061C2B526054D2168C0FEDE234A36980C7D6BC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.92.0/22
                  138.219.152.0/22
                  168.227.232.0/22
                  170.79.184.0/22
                  177.39.240.0/20
                  186.192.176.0/20
                  186.193.48.0/20
                  191.243.112.0/20
                IPv6:
                  2804:1054::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53135

    Signature Algorithm: sha256WithRSAEncryption
         02:bd:6d:55:c4:43:38:43:62:b3:3a:b6:a6:89:db:45:c0:07:
         04:8d:d6:fe:c1:a9:96:7b:58:08:9c:04:28:9c:6a:62:cd:41:
         44:b8:96:da:40:10:a9:e0:3a:e3:ef:68:66:ea:6b:5b:a7:a5:
         2f:e5:8c:ef:e3:f8:d3:da:3a:7b:2e:b1:2e:15:e3:d8:a2:04:
         05:31:c4:90:75:02:8d:ca:4f:a6:b8:8f:21:54:08:c8:7f:89:
         51:b0:f1:b5:1f:6f:86:32:dc:0d:c9:bf:00:48:5b:02:36:87:
         0b:f4:ed:00:d4:66:08:6e:72:31:a4:23:19:2b:8c:73:83:31:
         e2:54:45:99:61:20:1d:7b:76:dc:de:08:7e:fe:1b:ea:b7:82:
         48:f2:1b:00:c2:a6:a8:a5:4f:9e:bc:a7:f6:9c:8a:4c:5a:fc:
         44:58:7a:cc:4b:ed:d4:d4:7e:ca:b5:46:7d:cd:a5:00:ed:a8:
         07:3d:71:ce:35:3a:d0:9c:1a:ba:2b:37:80:fc:06:bf:cb:48:
         b5:a3:da:54:f0:d6:08:4d:5e:41:30:d8:71:b2:f4:e6:8c:58:
         d7:3f:b0:de:d1:d2:95:bb:e6:e1:47:17:4e:3e:42:ab:9c:39:
         4e:0b:b3:6a:03:43:59:c1:a6:91:be:f0:a8:3e:8b:45:d9:12:
         84:4b:06:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org