Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/81322C566E24B41E61B4AD67166BF432862840AC.cer
File:                     81322C566E24B41E61B4AD67166BF432862840AC.cer (raw, json)
Hash identifier:          F6CfACUi9rmHgpbiMFo4Usa0vWo/SNhK0JTwwPrRv6c=
Subject key identifier:   81:32:2C:56:6E:24:B4:1E:61:B4:AD:67:16:6B:F4:32:86:28:40:AC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       40628DC64865539791B1FC6564484AD09910F9B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/81322C566E24B41E61B4AD67166BF432862840AC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Feb 2024 18:05:37 +0000
Certificate not after:    Fri 21 Feb 2025 18:10:37 +0000
Subordinate resources:    AS: 265152
                          IP: 143.255.132.0/22
                          IP: 2804:2b68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:62:8d:c6:48:65:53:97:91:b1:fc:65:64:48:4a:d0:99:10:f9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 23 18:05:37 2024 GMT
            Not After : Feb 21 18:10:37 2025 GMT
        Subject: CN=81322C566E24B41E61B4AD67166BF432862840AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:d7:ca:e2:53:2d:1b:99:0d:58:d1:cf:93:
                    b4:9b:30:90:90:76:7c:45:46:da:fc:d9:d4:04:32:
                    a1:da:53:b7:03:aa:66:96:bf:71:16:94:6d:10:1c:
                    5d:6c:58:2c:db:ba:ef:02:2e:85:40:a0:35:2e:27:
                    6a:72:42:44:f5:b1:f8:f2:9c:b4:45:97:1b:33:f8:
                    54:08:03:65:0c:d5:a2:c6:52:78:d0:91:3b:70:a0:
                    14:66:d4:34:71:d8:e6:69:b9:60:21:df:d7:68:f4:
                    7b:f9:ac:45:d4:9b:9e:6a:f1:77:26:70:8b:ed:e8:
                    8b:3c:69:e9:a4:86:82:53:87:ef:46:93:ef:c3:4c:
                    06:69:94:d9:ef:37:2e:2e:7c:ac:99:00:ea:5c:7f:
                    e1:2d:59:f5:f6:10:11:ee:a4:f7:77:0b:0d:76:27:
                    cf:54:8f:0f:2e:99:23:66:75:83:a9:43:4c:4d:01:
                    f8:fc:a8:f0:34:16:ff:1d:72:51:a5:d2:5a:eb:72:
                    9d:25:3e:09:97:d2:e3:e2:5e:8f:89:93:60:17:e3:
                    48:e9:a6:9d:78:b3:ca:18:2f:a7:92:d9:09:59:bd:
                    64:e6:03:61:38:a4:fa:a9:fd:52:c3:36:78:17:7e:
                    67:89:e9:94:0f:94:2a:7f:80:7e:96:6e:86:ad:75:
                    74:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:32:2C:56:6E:24:B4:1E:61:B4:AD:67:16:6B:F4:32:86:28:40:AC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GHybki8mAnFUPzYCMqetHreXM2Yfqeyo58qPsYQCUPtB/0/81322C566E24B41E61B4AD67166BF432862840AC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.132.0/22
                IPv6:
                  2804:2b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265152

    Signature Algorithm: sha256WithRSAEncryption
         60:8c:fa:1f:54:09:93:29:90:a7:06:5f:2f:38:5b:b8:32:ae:
         c6:1a:50:31:14:bc:47:f2:47:3a:b5:ab:23:65:95:47:94:89:
         57:10:ae:74:ab:3b:4f:70:f7:c6:78:52:83:b7:8e:50:42:6a:
         53:96:7e:2c:3c:a8:91:16:a3:9a:bb:48:cc:21:31:56:6c:d6:
         4a:e3:39:9e:a7:26:71:d6:ce:2f:ba:ac:5b:aa:a0:d6:ec:1e:
         1a:ad:73:7a:8e:a9:7d:a2:39:23:79:0b:0d:e7:06:b1:d4:9a:
         93:bf:9c:b6:17:4e:c1:dd:d4:54:36:91:48:48:06:fe:d7:32:
         a2:22:6c:c8:b1:a3:a3:2e:b4:a2:4c:63:bb:b3:2b:df:55:d8:
         88:e3:5b:76:f0:4e:8a:f8:79:60:56:94:5f:fc:5d:16:5d:29:
         02:05:be:54:2a:e3:66:5a:2c:d1:20:4b:75:86:6f:5c:7a:4e:
         52:06:43:01:65:82:52:80:47:39:a3:e7:65:2c:df:d2:ea:2a:
         68:ca:84:67:a9:06:b9:4e:06:3b:0a:76:79:8f:56:20:ec:03:
         cb:17:f1:48:d3:b4:b4:d4:80:2c:b1:3e:d0:64:4b:c9:79:74:
         83:c5:5f:57:a9:de:e8:d1:1d:a7:8a:e3:9d:cd:14:cd:98:1a:
         f5:4c:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org