Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/817FDD720A91C442D681C927F5AB6D6E78081250.cer
File:                     817FDD720A91C442D681C927F5AB6D6E78081250.cer (raw, json)
Hash identifier:          AtUpYq7T1qFwLKIranOV039IbHbxR61UmpV2+cfXgTI=
Subject key identifier:   81:7F:DD:72:0A:91:C4:42:D6:81:C9:27:F5:AB:6D:6E:78:08:12:50
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E69B82C1FD550B5010F531C674064ED32C51373
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/817FDD720A91C442D681C927F5AB6D6E78081250.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 04 Aug 2023 13:08:15 +0000
Certificate not after:    Fri 02 Aug 2024 13:13:15 +0000
Subordinate resources:    AS: 28267
                          IP: 187.17.224.0/20
                          IP: 187.108.0.0/20
                          IP: 2804:20d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:69:b8:2c:1f:d5:50:b5:01:0f:53:1c:67:40:64:ed:32:c5:13:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug  4 13:08:15 2023 GMT
            Not After : Aug  2 13:13:15 2024 GMT
        Subject: CN=817FDD720A91C442D681C927F5AB6D6E78081250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:63:54:6e:6e:0d:59:17:95:77:a7:fb:c9:
                    a6:15:44:0c:68:c7:b6:1b:a1:bb:74:b6:da:26:69:
                    33:2b:99:39:88:bc:b1:ce:c3:7f:fa:f9:dd:6e:92:
                    75:2f:fd:00:9d:65:28:95:3d:43:aa:61:c2:f6:fe:
                    bd:f0:f0:95:03:5c:26:e2:97:15:dd:86:11:d5:53:
                    96:b0:09:97:99:48:79:85:92:ba:40:95:88:ba:d0:
                    81:79:04:88:9d:2e:ad:e1:e5:7f:38:77:a3:bc:d9:
                    9f:35:84:be:51:fe:85:0e:23:26:5e:57:e8:6c:3d:
                    48:41:30:43:d2:bb:03:e4:36:f9:98:0c:d6:4b:56:
                    1f:b3:16:03:07:10:88:2a:21:79:9c:65:45:73:9c:
                    00:8e:68:51:8d:a1:02:34:ee:d2:7e:87:f6:e2:95:
                    03:1f:54:5b:7f:d4:75:a2:56:57:8a:eb:f0:02:3c:
                    3b:66:c9:c6:08:17:4e:fb:28:0a:b1:3b:fa:e0:76:
                    49:a0:ac:3c:49:40:01:5d:73:74:62:e6:02:90:29:
                    5d:5b:0a:2e:a9:8b:2a:e9:33:cd:8e:16:ea:53:76:
                    cc:d1:e4:c4:bb:9a:8c:af:63:1b:e9:09:d3:80:20:
                    57:8b:f5:c6:3f:ab:00:c7:bb:6c:c5:25:a0:4d:95:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                81:7F:DD:72:0A:91:C4:42:D6:81:C9:27:F5:AB:6D:6E:78:08:12:50
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6WHmGdQfPFEFPbQf5fH1NrAeh8SoNyHEGbxSSwqdvgYP/0/817FDD720A91C442D681C927F5AB6D6E78081250.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.224.0/20
                  187.108.0.0/20
                IPv6:
                  2804:20d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28267

    Signature Algorithm: sha256WithRSAEncryption
         74:27:09:b6:0d:07:44:3f:28:dc:09:f6:d0:cb:bd:21:92:64:
         d8:f5:52:ee:20:bd:80:27:4a:7f:55:c9:4e:5a:db:c4:09:83:
         41:46:7f:e8:59:64:06:ad:d9:37:98:72:38:bf:10:14:b5:a5:
         c5:93:8f:ee:88:06:c4:a3:4c:25:04:8c:5b:f9:bd:45:5b:47:
         71:ec:f3:8a:40:c9:bc:73:69:d8:6f:44:68:6b:d8:2b:a5:3b:
         99:23:b7:e3:56:f7:b0:bd:3b:3f:28:4f:42:ab:d4:ef:77:54:
         52:8e:a0:96:05:30:cb:4d:1d:c5:88:3d:39:1f:87:80:d1:fa:
         ce:44:be:9b:66:e8:62:1f:93:83:f3:bb:af:8d:8d:8b:c3:16:
         2c:65:30:cb:78:59:60:2b:d4:fd:e9:89:23:94:b2:6d:c5:36:
         7a:16:d4:8b:13:be:c3:6d:e0:69:03:3e:14:43:c0:a5:1d:32:
         d7:d8:df:37:f2:bb:77:47:61:76:42:3e:d5:16:24:3e:1d:20:
         12:a1:a4:3f:bf:b9:e9:cd:56:d5:03:b8:90:83:cb:c1:50:41:
         b1:5a:74:14:27:bc:21:7d:76:f4:91:c2:20:01:03:a0:41:a0:
         32:44:cc:73:48:4f:a2:26:85:f4:9d:77:35:05:8c:c1:de:09:
         a8:8d:3c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org