Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/841CE1539C5B29E2CC6DD52791EF8C91725DF71E.cer
File:                     841CE1539C5B29E2CC6DD52791EF8C91725DF71E.cer (raw, json)
Hash identifier:          fusAhv+yiW5tABn2SI1Zsv/TyCwR8yr2StkDH3U4BFI=
Subject key identifier:   84:1C:E1:53:9C:5B:29:E2:CC:6D:D5:27:91:EF:8C:91:72:5D:F7:1E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       499F7DA9AE0CEAF321AB9DDA70FD374EA111E682
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/841CE1539C5B29E2CC6DD52791EF8C91725DF71E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 18 Feb 2024 15:38:47 +0000
Certificate not after:    Sun 16 Feb 2025 15:43:47 +0000
Subordinate resources:    AS: 267540
                          IP: 201.182.216.0/22
                          IP: 2804:42f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:9f:7d:a9:ae:0c:ea:f3:21:ab:9d:da:70:fd:37:4e:a1:11:e6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 18 15:38:47 2024 GMT
            Not After : Feb 16 15:43:47 2025 GMT
        Subject: CN=841CE1539C5B29E2CC6DD52791EF8C91725DF71E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9c:6c:ec:22:1e:bb:02:1f:b1:f7:3e:d4:28:
                    4b:38:10:e4:36:50:96:b8:6f:24:d4:1f:bf:17:c9:
                    dd:39:4f:49:e0:be:7f:8a:ff:9a:e7:b4:83:40:59:
                    d7:c8:1e:d3:2d:1e:d3:11:83:e4:ea:6e:a1:07:d3:
                    35:51:a8:ce:15:86:46:ea:9b:e3:e8:c6:2d:a9:9c:
                    50:c4:29:b8:ff:97:cc:96:55:f8:56:16:1c:54:60:
                    d3:65:fd:3c:a5:ed:c4:5e:b8:00:2a:ee:5c:60:2e:
                    2a:4d:38:47:81:d9:58:e7:48:6c:46:15:43:a7:db:
                    bb:f7:1c:e8:44:23:36:a9:0b:60:48:b8:15:6d:b5:
                    12:e6:4f:0a:37:cb:31:da:01:15:10:1b:d7:b4:47:
                    55:14:2f:15:39:17:3c:4d:96:f3:06:cf:15:9d:9a:
                    c4:e8:e1:f7:2f:70:41:7b:66:72:e7:aa:a8:20:c4:
                    28:63:f2:d9:ea:6a:4d:d2:23:df:70:e6:5f:d0:52:
                    ed:f9:72:87:47:d5:36:03:14:f2:c3:4c:cd:e4:92:
                    a0:98:13:b8:4e:d0:5d:48:e9:93:e4:5b:5f:22:35:
                    3f:9a:92:8d:9c:52:11:fd:47:64:41:94:34:04:11:
                    14:35:c5:a4:b4:41:41:c6:d5:14:28:ba:05:ca:1b:
                    15:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                84:1C:E1:53:9C:5B:29:E2:CC:6D:D5:27:91:EF:8C:91:72:5D:F7:1E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J4B76xgG4Yme91gGrMLsrYMpPjZgFRbWQQJnqUgcXjRL/0/841CE1539C5B29E2CC6DD52791EF8C91725DF71E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.216.0/22
                IPv6:
                  2804:42f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267540

    Signature Algorithm: sha256WithRSAEncryption
         b2:28:c8:64:ca:9f:df:d2:43:86:ac:b9:78:42:f5:40:3b:40:
         bf:42:55:08:97:28:1f:7d:27:d4:f0:28:a4:39:f9:2c:01:22:
         4c:a2:e6:19:6a:3a:94:4e:af:ec:aa:08:91:49:41:8a:c0:b9:
         8d:5f:8a:dc:fb:9c:62:02:fa:93:d3:16:11:27:ce:0d:d9:66:
         50:a1:31:25:02:be:3b:e1:29:85:24:db:d1:7d:6e:70:ee:e4:
         91:e6:a4:33:5f:45:bb:87:7e:6e:93:d5:02:58:ec:46:a5:d4:
         c6:77:96:ce:27:74:e8:69:20:27:53:fc:b6:88:74:44:6a:cf:
         24:25:30:41:73:0d:83:b1:25:6f:5a:85:06:da:52:c0:50:bc:
         ea:58:74:4e:a9:42:7c:3c:d3:40:38:4c:21:97:de:e3:60:24:
         6c:d3:e5:2a:cd:28:e6:9d:b1:a5:1b:22:8d:49:3d:17:36:72:
         cc:92:d6:af:4e:63:e8:13:89:21:ff:c2:e6:27:0b:17:36:a3:
         2d:2f:ab:ec:f9:56:7d:60:fd:ce:91:56:96:bb:df:ce:fd:a8:
         b5:56:27:55:07:a1:f7:a1:d5:20:6e:9d:e0:7a:ef:71:3d:bc:
         a4:fc:67:8b:16:e5:88:11:42:dc:86:2b:0b:a6:44:fe:39:29:
         44:5d:8c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:17 2024 by rpki-client on console-fra.rpki-client.org