Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/79CBF269438B5C4C5D8301EAF8BCE0DB63987301.cer
File:                     79CBF269438B5C4C5D8301EAF8BCE0DB63987301.cer (raw, json)
Hash identifier:          D0U7LMLIQtSZOFIYsX4TXBai1gIY1EnQqKPmomtoYpM=
Subject key identifier:   79:CB:F2:69:43:8B:5C:4C:5D:83:01:EA:F8:BC:E0:DB:63:98:73:01
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2732D4E83B81E41172A23074EAFF9EE881A73FCD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7puFsVY7zRYcpJ4cPyKkCa9kFs4G1xcJ93mZteW1Rr6e/0/79CBF269438B5C4C5D8301EAF8BCE0DB63987301.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7puFsVY7zRYcpJ4cPyKkCa9kFs4G1xcJ93mZteW1Rr6e/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 13:43:14 +0000
Certificate not after:    Mon 23 Sep 2024 13:48:14 +0000
Subordinate resources:    AS: 28131
                          IP: 138.0.192.0/22
                          IP: 167.249.112.0/22
                          IP: 170.0.240.0/22
                          IP: 170.81.176.0/22
                          IP: 186.208.224.0/20
                          IP: 2804:170::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:32:d4:e8:3b:81:e4:11:72:a2:30:74:ea:ff:9e:e8:81:a7:3f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 13:43:14 2023 GMT
            Not After : Sep 23 13:48:14 2024 GMT
        Subject: CN=79CBF269438B5C4C5D8301EAF8BCE0DB63987301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:48:38:a1:74:4b:ca:81:e8:ce:ea:b4:95:c0:
                    5a:13:e5:a0:0f:80:d4:29:2c:6d:1a:82:7a:6d:97:
                    35:28:cd:7b:f5:4e:22:52:97:7a:b4:26:22:fd:e2:
                    6f:3e:77:73:bf:10:9c:a6:db:83:2c:6d:7b:46:be:
                    f6:45:8b:50:4d:54:07:0f:81:56:dd:a3:70:5f:71:
                    d4:54:c1:06:54:88:a8:bb:83:f1:7a:61:9e:10:fe:
                    59:7c:45:ae:ea:72:5d:75:29:cc:42:4d:64:c8:e6:
                    41:d3:67:18:d4:2b:f6:15:14:19:39:2e:2f:ff:78:
                    d5:d4:23:62:c6:c7:9e:29:9b:e4:a3:dd:cd:04:02:
                    a0:15:a0:c0:e0:08:e9:c4:c7:c4:73:12:3c:d2:d4:
                    2a:0a:a4:c3:11:fa:e7:5b:2a:b7:81:25:68:5a:83:
                    69:7b:5c:65:db:53:69:38:b8:48:9e:b7:41:d2:da:
                    c9:4e:8d:a2:f9:32:9d:8f:44:69:c4:ed:a4:e8:84:
                    f3:5d:28:e2:65:28:ca:16:f0:2f:4a:25:1d:54:cf:
                    d5:b3:d0:27:73:2c:d5:66:de:4e:28:8a:80:63:98:
                    f8:f6:e5:3b:e2:8e:b1:fe:1c:72:7d:35:dc:c4:b6:
                    b0:89:80:88:78:fe:6e:6f:ac:d7:78:74:70:42:69:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                79:CB:F2:69:43:8B:5C:4C:5D:83:01:EA:F8:BC:E0:DB:63:98:73:01
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7puFsVY7zRYcpJ4cPyKkCa9kFs4G1xcJ93mZteW1Rr6e/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7puFsVY7zRYcpJ4cPyKkCa9kFs4G1xcJ93mZteW1Rr6e/0/79CBF269438B5C4C5D8301EAF8BCE0DB63987301.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.192.0/22
                  167.249.112.0/22
                  170.0.240.0/22
                  170.81.176.0/22
                  186.208.224.0/20
                IPv6:
                  2804:170::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28131

    Signature Algorithm: sha256WithRSAEncryption
         3a:10:1c:9a:b9:87:00:19:f3:49:36:5d:6b:18:3a:f4:57:56:
         30:45:0c:6b:21:59:5e:e3:89:20:ce:ca:05:86:7c:be:9e:c9:
         f4:4f:cd:be:18:39:ea:c4:a7:d8:55:dc:5a:52:3e:b4:be:61:
         7f:f0:16:70:9e:1e:48:60:9c:52:3d:91:7e:21:42:b2:50:aa:
         c9:21:d9:f0:65:22:96:58:cc:45:4e:9d:d1:41:b7:d2:b7:54:
         39:c3:18:18:f1:d9:2c:f9:e9:e0:57:ec:38:35:2f:45:14:ac:
         e9:7f:f1:79:fb:d7:ef:e1:2c:e3:82:c6:ec:bd:89:c6:a6:fb:
         15:2e:75:f2:c0:48:d1:16:cd:15:b3:07:d2:33:82:e3:0f:13:
         81:9d:1c:66:f6:e6:61:2d:8a:15:36:87:e2:b1:0e:4d:a1:f5:
         d4:20:ed:b3:b8:db:5a:e6:fb:eb:9f:13:01:50:fa:da:03:50:
         0a:93:da:25:84:f3:1a:27:e0:2a:58:3b:32:38:2f:85:33:90:
         24:5b:96:8b:cf:66:a2:6c:06:87:81:4d:84:e2:c7:02:a6:a1:
         66:86:76:9c:88:1a:57:ac:cd:bc:2d:5b:d7:ed:4d:df:01:06:
         f3:96:78:12:53:5d:22:94:63:00:4e:c8:c6:c4:ef:53:f9:c6:
         12:cd:d8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:23 2024 by rpki-client on console-fra.rpki-client.org