Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/794ABB590E08053920E07BE29B54C6B3636F3107.cer
File:                     794ABB590E08053920E07BE29B54C6B3636F3107.cer (raw, json)
Hash identifier:          2qJR8MTMjbNj7uOprPsFF6VonQPCdjdobgGVw5CjG6w=
Subject key identifier:   79:4A:BB:59:0E:08:05:39:20:E0:7B:E2:9B:54:C6:B3:63:6F:31:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       769D3BF2013292D002029A0DB88E2874E1526FC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/794ABB590E08053920E07BE29B54C6B3636F3107.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:06:21 +0000
Certificate not after:    Tue 05 Nov 2024 19:11:21 +0000
Subordinate resources:    AS: 268874
                          IP: 45.175.12.0/22
                          IP: 2804:5be0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:9d:3b:f2:01:32:92:d0:02:02:9a:0d:b8:8e:28:74:e1:52:6f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  7 19:06:21 2023 GMT
            Not After : Nov  5 19:11:21 2024 GMT
        Subject: CN=794ABB590E08053920E07BE29B54C6B3636F3107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c3:bd:86:44:60:d1:f2:8c:e3:43:6c:3e:0c:
                    20:01:55:94:5a:f7:73:75:ee:a5:e2:58:a4:ec:4c:
                    ad:5d:be:78:02:90:7d:42:e7:24:9a:87:df:11:70:
                    a2:dd:ac:bc:dc:df:91:22:97:c2:7d:51:86:0b:47:
                    0d:bd:f9:b6:37:4b:9f:9d:77:e6:21:31:db:a4:f2:
                    10:1b:2d:94:ba:8a:61:1d:54:d8:33:00:52:cc:72:
                    8b:3d:fc:5d:f9:25:b2:0c:c8:d5:f6:1c:7c:dd:0e:
                    4b:d4:0c:04:13:f3:c2:62:73:ae:d7:bc:42:46:0b:
                    17:37:b5:1b:79:6b:e6:75:fd:57:cf:1d:f7:93:97:
                    49:93:cf:d3:c0:a8:4a:c0:23:67:05:f9:6d:13:33:
                    25:03:0f:a7:24:6b:72:55:4d:c8:28:43:92:72:cc:
                    f5:20:58:fb:d3:8f:91:a4:d3:19:76:67:8a:d0:a7:
                    22:ec:aa:e7:bc:c0:5b:06:97:a8:60:2c:00:66:c9:
                    f4:b5:9d:25:65:5a:f1:23:24:5b:2c:2d:db:10:9f:
                    ea:81:e3:0c:b2:a3:b1:59:9f:37:45:85:71:d1:ec:
                    3d:e1:74:b6:e8:c2:0d:49:fb:68:8d:93:e1:c8:5d:
                    31:dd:a9:63:b3:2b:34:6e:9a:7d:93:fa:bd:71:80:
                    7f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:4A:BB:59:0E:08:05:39:20:E0:7B:E2:9B:54:C6:B3:63:6F:31:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/794ABB590E08053920E07BE29B54C6B3636F3107.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.12.0/22
                IPv6:
                  2804:5be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268874

    Signature Algorithm: sha256WithRSAEncryption
         29:a8:3b:eb:df:eb:12:0b:d7:d1:10:47:b4:5f:3d:91:d0:34:
         d3:ae:88:6b:3d:76:ab:c9:fe:e8:a6:8b:ab:6b:b1:21:4f:54:
         cf:1e:02:88:0c:4a:6d:8b:52:23:fb:09:39:4a:f6:5d:ed:3b:
         25:3e:42:b4:34:fc:05:91:3c:d5:c0:be:ec:0b:8d:2a:0d:b5:
         c3:2a:a6:88:5c:0a:92:48:79:6e:8b:67:54:3c:de:95:e9:9c:
         17:c5:66:3d:70:df:a5:84:22:b9:bf:f9:a9:7e:4f:fc:14:7d:
         5a:fd:04:85:d1:a1:25:62:28:9d:e5:a2:8d:2a:ec:e1:1c:c4:
         8e:06:34:62:d4:53:62:e3:1f:a7:7c:c7:2c:5b:c6:f1:a6:1e:
         4f:4d:2c:b4:c4:17:6f:e9:84:f2:4c:dd:03:5a:38:8d:cc:40:
         84:fb:09:33:0c:3f:00:c9:a2:b2:4c:98:cd:43:c0:6d:16:6d:
         54:2c:f3:a7:b1:f2:bf:ca:e2:a7:24:0e:bc:b6:8d:81:eb:48:
         75:25:2c:ef:9a:7e:07:db:1c:5d:eb:d6:28:94:68:40:7a:2a:
         5e:f5:f6:05:03:d9:bd:36:a9:29:77:d2:a8:82:dd:95:45:b3:
         cf:fd:a4:ba:e0:4c:00:c8:b8:b0:c4:44:53:dd:31:9c:1d:26:
         88:af:e8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:36 2024 by rpki-client on console-ams.rpki-client.org