Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/80E3A3B152CAAE5EF9A4BF135D95342709013716.cer
File:                     80E3A3B152CAAE5EF9A4BF135D95342709013716.cer (raw, json)
Hash identifier:          mtUrytMyauVx7WqynkuAlbKB7m80VtUkjbQn99tGMhU=
Subject key identifier:   80:E3:A3:B1:52:CA:AE:5E:F9:A4:BF:13:5D:95:34:27:09:01:37:16
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       536F491B23A36F7AE62B12DFC3EB862CDD42F19F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/80E3A3B152CAAE5EF9A4BF135D95342709013716.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 27 Jan 2024 16:17:46 +0000
Certificate not after:    Sat 25 Jan 2025 16:22:46 +0000
Subordinate resources:    AS: 271694
                          IP: 187.111.124.0/22
                          IP: 2804:7f88::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:6f:49:1b:23:a3:6f:7a:e6:2b:12:df:c3:eb:86:2c:dd:42:f1:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 27 16:17:46 2024 GMT
            Not After : Jan 25 16:22:46 2025 GMT
        Subject: CN=80E3A3B152CAAE5EF9A4BF135D95342709013716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:25:fa:5b:66:52:9f:47:57:f1:f0:dc:40:
                    72:3f:23:e8:7b:58:fd:0c:56:75:07:40:08:ab:ee:
                    dc:91:38:75:7b:20:25:54:27:2d:cd:54:a8:f5:1c:
                    c1:f9:20:2d:19:32:50:2e:f0:d1:e7:9a:1d:c3:85:
                    71:f5:74:e7:67:ba:33:65:6d:36:30:34:6d:0c:2a:
                    f1:ac:97:28:3a:02:bc:6b:e9:05:4f:12:31:51:c0:
                    fa:9f:f0:78:a0:4c:fc:c0:3a:d5:5b:bd:6a:00:1f:
                    0f:11:2b:db:42:c2:85:78:d5:e0:be:5b:dc:55:cd:
                    a0:01:4a:d1:38:7b:40:72:31:60:60:ce:9c:4b:4d:
                    b9:fb:34:86:f8:c3:ba:f8:b9:e6:1b:e0:07:bd:ff:
                    ba:22:4f:8e:67:00:42:b2:9f:01:f6:d3:8f:93:d5:
                    34:fc:69:c5:40:26:21:04:58:8d:c7:c8:f7:28:38:
                    93:5d:5b:e0:06:55:3f:03:a1:ea:84:96:b9:db:99:
                    1a:a0:77:a8:76:b5:d1:ea:d7:6a:d1:86:90:ee:16:
                    99:54:12:30:a1:22:a0:d1:63:3f:49:58:2b:a9:2d:
                    f1:51:ad:f1:13:90:1c:ba:50:16:99:de:c2:23:ca:
                    83:96:c8:e8:b9:49:82:23:bc:bc:33:e2:ef:73:d5:
                    e8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                80:E3:A3:B1:52:CA:AE:5E:F9:A4:BF:13:5D:95:34:27:09:01:37:16
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BkGM1bLZTjQFGVD1qHiaVP7hy2y1wLtopmCNxeCsRfy4/0/80E3A3B152CAAE5EF9A4BF135D95342709013716.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.124.0/22
                IPv6:
                  2804:7f88::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271694

    Signature Algorithm: sha256WithRSAEncryption
         41:7d:72:b5:7a:03:3c:2e:f5:00:00:b7:a4:77:ea:1f:c8:5a:
         97:b9:ba:9b:d6:6b:6c:07:45:14:72:28:22:fe:e6:21:16:d2:
         de:c7:6d:b2:10:a3:f5:9e:fa:cb:34:1d:dd:31:ef:e8:83:c4:
         5e:cd:ea:f0:5a:d6:d5:10:89:61:ea:76:f6:83:81:6e:36:f1:
         5e:de:a3:0d:8c:11:bc:ed:ec:74:68:a6:fc:02:ef:c8:f7:e7:
         8a:79:97:1c:f3:63:9d:8c:67:af:f9:95:98:d8:81:05:e0:09:
         38:20:f5:99:aa:c7:2d:29:44:11:8c:cf:63:ad:a7:2e:37:0f:
         18:25:41:37:ed:65:c5:c6:30:37:bf:b9:c6:99:18:62:92:97:
         99:83:1e:7f:52:6a:d5:37:c1:db:75:5b:43:1f:51:42:87:7f:
         f9:5b:b9:ba:fe:31:2c:e8:ca:75:1f:02:fc:0c:a4:d2:15:b4:
         e3:eb:5d:62:b3:0a:95:b1:61:77:7c:e1:b7:27:7f:3d:4f:06:
         5b:15:a5:86:9e:fb:c9:de:35:8c:bd:66:ae:af:f0:e3:73:57:
         05:a2:43:d1:8c:80:bb:a3:56:2d:5d:9f:46:38:22:1d:de:b7:
         4c:31:29:19:a2:27:de:f1:1a:f2:d9:ac:30:3b:86:22:8b:ea:
         46:14:aa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org