Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/891796811536F9E96F82342847EC5708FC1E88E7.cer
File:                     891796811536F9E96F82342847EC5708FC1E88E7.cer (raw, json)
Hash identifier:          d5WpTYc9bAu6jxLFWFHfwtdpm7nqWc6NvSPNcuBIpWI=
Subject key identifier:   89:17:96:81:15:36:F9:E9:6F:82:34:28:47:EC:57:08:FC:1E:88:E7
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6AF852B03A16C30FA17699D05EF7063DD4F711A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/891796811536F9E96F82342847EC5708FC1E88E7.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 12 Apr 2024 13:10:05 +0000
Certificate not after:    Fri 11 Apr 2025 13:15:05 +0000
Subordinate resources:    AS: 267155
                          IP: 45.229.144.0/22
                          IP: 2804:48f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:52:b0:3a:16:c3:0f:a1:76:99:d0:5e:f7:06:3d:d4:f7:11:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 12 13:10:05 2024 GMT
            Not After : Apr 11 13:15:05 2025 GMT
        Subject: CN=891796811536F9E96F82342847EC5708FC1E88E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:fe:67:b8:74:3b:4a:47:ee:60:65:66:7e:
                    01:78:d8:4c:d3:4f:f7:26:1c:c9:87:4c:43:de:4a:
                    da:2d:8c:d9:40:39:cf:c0:be:84:66:03:03:91:04:
                    81:39:ce:6d:aa:50:d6:85:be:c5:1e:47:30:9f:67:
                    de:ec:27:be:2d:af:15:cb:1e:b1:48:9e:c7:e1:c1:
                    2b:06:5b:ab:6a:0c:22:b7:46:46:44:ee:36:6f:a5:
                    f1:ab:d4:ca:bb:35:36:5d:40:b8:04:c0:0f:98:66:
                    21:39:5a:6b:a4:da:2d:65:6c:b1:3f:2a:f8:70:24:
                    7e:c9:62:3c:08:96:6a:60:28:e7:81:8e:0d:32:fb:
                    cb:ea:66:fc:19:3c:6e:49:16:0d:86:fe:f2:6f:1a:
                    e1:c1:c0:bd:a4:a5:94:60:fc:dc:17:40:6c:e0:97:
                    66:90:36:77:60:c2:10:81:41:59:e3:02:d6:15:a7:
                    11:c3:7d:bf:a6:4b:17:54:4e:b6:c1:a0:34:c3:65:
                    60:0c:3c:07:55:27:a9:00:7a:56:29:27:cd:2f:d2:
                    13:ec:fe:1d:64:79:58:a2:39:10:13:81:a4:29:7a:
                    1a:16:eb:e6:a3:72:72:a9:d9:9a:66:2c:8d:36:28:
                    c0:0d:b6:a3:d0:56:5b:d1:6c:85:3d:2d:12:38:43:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:17:96:81:15:36:F9:E9:6F:82:34:28:47:EC:57:08:FC:1E:88:E7
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7AN9VMf3j2iLhsjdFbnNs5hw5N1Ar9WCMK1qA9ncuYXr/1/891796811536F9E96F82342847EC5708FC1E88E7.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.144.0/22
                IPv6:
                  2804:48f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267155

    Signature Algorithm: sha256WithRSAEncryption
         21:b9:5c:30:a2:41:cb:84:08:b2:2c:3e:bf:49:50:14:ba:b1:
         fd:d9:2a:3e:5b:aa:1c:e6:d8:52:e7:80:51:bf:f3:a8:8f:76:
         16:24:90:3b:58:c8:8c:ea:a1:28:dd:cf:41:8c:77:61:dc:ad:
         c3:9f:2e:cf:3f:60:72:30:ac:f1:dc:69:0a:b6:c3:25:65:fc:
         22:2a:08:fe:75:b7:44:0d:11:20:c3:c9:a8:f4:49:a3:02:6f:
         53:2d:86:12:c7:5f:57:a0:0f:58:8e:4b:82:3a:7c:41:23:d7:
         f6:ef:47:e3:3b:2a:b5:32:79:3f:39:a1:ec:33:67:b5:5f:dc:
         1b:d7:bf:2e:60:37:dd:7a:65:d4:51:c6:4e:a5:3a:4d:39:3b:
         e8:35:d4:b6:dc:c0:bd:c8:33:72:ae:68:2e:66:40:57:68:22:
         9f:53:2a:7b:0e:be:a1:db:a5:4f:1e:90:d2:d5:38:df:ed:d0:
         42:a0:28:7a:ef:02:88:85:45:c1:67:3f:8c:8b:dc:e8:7b:73:
         60:72:2b:28:4d:a4:f0:4a:98:00:15:84:1f:ff:36:e7:81:99:
         b7:01:56:a1:98:a1:06:eb:f5:40:47:5f:45:61:cf:d5:d8:89:
         b0:cb:35:cd:6f:54:30:16:d9:39:66:ce:3f:0d:0d:92:a9:c7:
         fe:33:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org