Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/837E2E8FB82243CE82340C637E2D78CD89539A12.cer
File:                     837E2E8FB82243CE82340C637E2D78CD89539A12.cer (raw, json)
Hash identifier:          IuQwUY77OHNF04ukaKTU+HqaDedg64/miOsoo693o0A=
Subject key identifier:   83:7E:2E:8F:B8:22:43:CE:82:34:0C:63:7E:2D:78:CD:89:53:9A:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       219EFCCEC8B41B8468985BF3D171D011D45A0C03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/837E2E8FB82243CE82340C637E2D78CD89539A12.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 18:49:37 +0000
Certificate not after:    Wed 15 Jan 2025 18:54:37 +0000
Subordinate resources:    AS: 262972
                          IP: 179.124.248.0/21
                          IP: 186.227.152.0/22
                          IP: 2804:ec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9e:fc:ce:c8:b4:1b:84:68:98:5b:f3:d1:71:d0:11:d4:5a:0c:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 17 18:49:37 2024 GMT
            Not After : Jan 15 18:54:37 2025 GMT
        Subject: CN=837E2E8FB82243CE82340C637E2D78CD89539A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d4:6f:96:65:d5:2e:0f:77:ce:25:11:3c:f1:
                    c8:98:f5:15:5f:c6:d9:be:66:19:8a:89:d6:0c:28:
                    a0:3e:19:58:66:35:45:5a:19:23:81:e5:a6:40:d9:
                    9b:79:e1:cd:46:08:0f:9e:35:a0:fd:27:83:07:81:
                    6c:09:f9:39:f2:d9:f1:1a:ae:05:ca:b6:d4:a1:a8:
                    a2:ea:f8:a5:24:57:1e:98:73:93:2d:bf:56:03:47:
                    99:e2:d7:59:8a:eb:4b:44:68:64:9f:38:81:21:89:
                    65:aa:c9:e9:3c:c4:02:a8:c1:d4:8c:1c:83:c9:3c:
                    72:3e:c5:f2:a0:1c:6d:a9:1d:7f:6f:07:87:63:91:
                    a2:6d:7f:90:68:2b:50:ec:bc:e9:c8:70:27:47:6e:
                    52:ef:4b:96:ec:f3:cd:be:ec:8d:13:d5:61:96:db:
                    e7:92:5b:f8:0f:f4:42:0e:6a:aa:51:b1:c0:17:24:
                    40:1c:ab:f8:14:3c:30:64:fe:98:c2:88:2a:dc:22:
                    08:c2:66:d7:a3:b9:b1:c9:15:ec:2f:12:34:81:47:
                    fc:40:8c:0d:86:99:57:6f:b7:7f:59:87:b6:9d:12:
                    6f:70:63:54:1b:58:ab:d7:31:35:21:b7:34:4d:99:
                    79:da:60:4e:6c:bc:16:02:05:e8:89:5d:5b:2d:cf:
                    4b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                83:7E:2E:8F:B8:22:43:CE:82:34:0C:63:7E:2D:78:CD:89:53:9A:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/837E2E8FB82243CE82340C637E2D78CD89539A12.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.248.0/21
                  186.227.152.0/22
                IPv6:
                  2804:ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262972

    Signature Algorithm: sha256WithRSAEncryption
         6a:30:77:3f:89:8b:6a:cd:ba:15:b3:43:d9:c8:1f:9f:8d:65:
         08:de:2c:5c:a7:37:ac:9c:93:70:8f:84:2b:a5:20:60:7b:1e:
         98:af:93:0b:97:e8:ed:a4:4b:c7:02:f6:f8:2f:5f:94:3e:12:
         ce:94:98:d7:43:02:92:7f:ca:27:d8:44:fb:30:49:e2:8d:cd:
         41:26:74:fd:b2:7e:80:62:08:18:fa:57:d9:13:dc:28:d9:9e:
         11:37:78:0b:3e:dc:2b:6d:d8:a4:4d:6d:b9:91:3a:3d:13:6b:
         57:61:0e:d5:d2:a4:ed:b0:93:67:8a:93:92:54:61:88:f6:1b:
         28:3c:85:b1:98:53:18:a5:66:19:f2:e3:a8:91:e7:91:04:0f:
         ac:e9:67:ed:97:2e:cb:58:eb:4e:be:fc:c7:f5:24:c9:3b:65:
         d7:86:29:96:84:f8:58:ac:e4:af:08:f6:8f:b4:26:cd:04:3c:
         86:5f:c0:4f:a7:00:a8:4c:dc:34:89:6a:62:f5:d1:2a:ac:62:
         bc:3d:89:f9:2f:24:1e:49:ac:bc:36:08:8c:e7:9c:16:f5:54:
         ca:ac:91:e0:7f:9e:3e:45:78:a1:a6:7a:c3:5b:c7:96:c4:22:
         20:30:62:e8:2b:f3:43:59:9c:e8:7c:9f:ef:66:6a:ee:50:23:
         59:1c:e8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:38 2024 by rpki-client on console-ams.rpki-client.org