Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/812F40E71D80FE4BFD25317690177877E6E7806D.cer
File:                     812F40E71D80FE4BFD25317690177877E6E7806D.cer (raw, json)
Hash identifier:          /0G2H38B58kUL/hPSVGvRQ7W8m11pZPQAHVb2qObnJs=
Subject key identifier:   81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       53BC74FD01800CBDCDB33EDD22B31D63FCB37654
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 26 Sep 2023 13:35:13 +0000
Certificate not after:    Tue 24 Sep 2024 13:40:13 +0000
Subordinate resources:    AS: 266248
                          IP: 45.6.220.0/22
                          IP: 2804:3d04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:bc:74:fd:01:80:0c:bd:cd:b3:3e:dd:22:b3:1d:63:fc:b3:76:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 26 13:35:13 2023 GMT
            Not After : Sep 24 13:40:13 2024 GMT
        Subject: CN=812F40E71D80FE4BFD25317690177877E6E7806D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:06:60:04:39:8f:26:bc:ef:ec:f3:de:80:04:
                    62:22:db:b1:cd:44:da:9f:89:13:61:fe:c1:7b:dd:
                    94:28:da:35:59:e0:5b:6b:54:da:64:fc:89:5a:4f:
                    1f:df:19:88:8f:37:34:dd:6c:6c:68:e2:e5:b1:40:
                    17:0d:d3:91:5d:71:e5:a8:cc:5e:3f:c4:ba:8b:f6:
                    d1:55:76:91:35:ea:91:6f:1d:bb:12:a9:f9:03:73:
                    d5:5f:94:1b:e0:5b:ff:a8:9e:7c:d8:7a:48:7c:7c:
                    41:78:38:ef:1e:5c:d6:ac:6b:99:6c:89:18:8f:8b:
                    ad:90:43:0d:5f:59:4c:a9:cb:6f:d2:01:ca:50:c0:
                    99:ef:b0:bf:a4:6d:db:05:a6:86:0e:fc:9d:30:30:
                    10:ca:19:aa:4b:3c:7c:dc:b5:4f:12:b7:d5:e1:41:
                    24:ec:f0:69:e4:61:15:72:4b:2b:d4:d7:02:2a:84:
                    ef:3b:7e:b2:6d:64:0d:7c:99:8c:cf:06:54:c2:8a:
                    e2:6a:35:60:81:fb:54:91:10:45:89:8a:f6:0d:f9:
                    f5:ee:c4:7a:37:45:6e:11:0c:6d:a5:0c:c3:ef:fd:
                    9c:23:32:07:fc:0b:64:b1:d0:88:b1:22:5b:b6:8e:
                    07:5a:60:d1:95:30:00:01:21:4d:29:e4:c2:24:b7:
                    fe:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:2F:40:E7:1D:80:FE:4B:FD:25:31:76:90:17:78:77:E6:E7:80:6D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2kpJu3JMAbG1B4Rmsvt2CgVaW2dS6EL9gGxD2Zewmr5J/0/812F40E71D80FE4BFD25317690177877E6E7806D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.220.0/22
                IPv6:
                  2804:3d04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266248

    Signature Algorithm: sha256WithRSAEncryption
         b3:6c:84:c6:a3:e4:b1:85:55:b9:59:25:f7:10:92:3f:d3:5a:
         4a:d3:ab:d1:3e:7d:70:c7:bc:43:fc:fa:cb:8d:f2:08:99:5d:
         1d:7c:d6:81:c5:25:b2:ab:b1:84:7e:c1:56:32:57:78:a5:25:
         6a:22:a6:c1:86:43:3e:82:64:ce:d6:61:51:f0:fe:48:ae:98:
         c6:4c:71:58:3d:2a:cd:f6:29:da:6d:d2:18:0f:94:f8:98:e6:
         59:db:cd:e4:cd:4b:5c:7e:c6:b2:c8:18:f2:9e:7c:b3:e1:9f:
         41:58:6d:50:46:5b:f8:fc:8a:a4:ee:90:0b:f2:27:96:26:a2:
         6c:da:d2:f5:0f:c0:ee:6c:54:62:38:a4:fd:80:25:ce:1a:34:
         22:a8:ef:61:09:5e:a0:13:95:dc:c8:ef:1a:7b:e4:53:6e:ac:
         33:8c:d2:ac:44:44:c8:7c:fb:32:78:21:4d:61:9d:f0:ab:c0:
         41:eb:75:b9:77:16:fe:2d:c1:01:97:45:35:52:45:de:c8:73:
         c7:a7:36:7d:49:59:d6:51:40:77:df:a9:a9:c7:18:50:ce:29:
         71:c8:11:06:ee:89:a2:5f:b9:c3:bb:e9:7a:71:dc:74:86:7d:
         85:4e:4d:16:c9:30:6c:bc:72:6c:96:cd:19:00:df:1c:7d:d9:
         cc:96:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org