Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/89331D39B430650C6C281629A0425E632CE5387D.cer
File:                     89331D39B430650C6C281629A0425E632CE5387D.cer (raw, json)
Hash identifier:          XBgsgtIVt31ZecITpcuJg/Hl13yHrenb4HTpRdEQftI=
Subject key identifier:   89:33:1D:39:B4:30:65:0C:6C:28:16:29:A0:42:5E:63:2C:E5:38:7D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       50EB3C543629C7CE76688B3C9714D6D6D1B718E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3d4vG8ZTqrJ3GYTRw5k2y5gbritWRcLDaHg5TzbfoJth/0/89331D39B430650C6C281629A0425E632CE5387D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3d4vG8ZTqrJ3GYTRw5k2y5gbritWRcLDaHg5TzbfoJth/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 05 May 2023 16:33:48 +0000
Certificate not after:    Fri 03 May 2024 16:38:48 +0000
Subordinate resources:    AS: 269271
                          IP: 45.180.116.0/22
                          IP: 2804:6204::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:eb:3c:54:36:29:c7:ce:76:68:8b:3c:97:14:d6:d6:d1:b7:18:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  5 16:33:48 2023 GMT
            Not After : May  3 16:38:48 2024 GMT
        Subject: CN=89331D39B430650C6C281629A0425E632CE5387D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:96:d7:34:3b:9a:fe:4d:32:7f:21:20:02:28:
                    69:d8:e8:14:b6:06:3b:64:51:08:96:fe:40:72:e1:
                    89:6a:d0:e9:4b:a2:28:25:dd:2e:9e:a1:3d:c9:54:
                    f0:75:4c:49:6a:ee:ae:fe:cb:93:36:ab:a5:86:c8:
                    97:96:43:7c:67:ba:94:44:05:a3:b5:2c:31:92:be:
                    7d:d9:13:91:2b:7f:c5:f2:39:34:6e:b3:83:e3:f3:
                    68:69:4c:4c:aa:0e:21:3c:cd:b3:a3:00:85:4b:22:
                    b2:7f:90:30:49:00:fa:f9:88:b8:c9:f5:30:d1:89:
                    a7:51:c1:a4:55:ae:e4:26:e6:82:c1:0a:8d:ba:9e:
                    a6:25:6e:b2:06:fd:99:32:ed:40:69:1c:91:37:db:
                    1d:dd:83:84:87:32:ad:89:58:74:fe:96:9b:53:98:
                    53:88:4e:0f:40:c9:c9:a2:43:02:be:84:81:46:2e:
                    51:2c:ec:6d:d9:27:4b:0d:34:6a:3a:e9:6e:53:d9:
                    61:8b:c5:b3:8e:d0:de:8a:02:5a:b6:22:88:fe:96:
                    14:bb:72:bb:35:bc:ce:f3:16:f7:a3:40:ff:3a:60:
                    37:2d:e2:00:56:d9:bf:d6:81:b9:62:8e:81:68:62:
                    33:ea:37:b0:cb:3e:00:da:55:ec:47:5b:d3:9f:ca:
                    cb:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:33:1D:39:B4:30:65:0C:6C:28:16:29:A0:42:5E:63:2C:E5:38:7D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3d4vG8ZTqrJ3GYTRw5k2y5gbritWRcLDaHg5TzbfoJth/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3d4vG8ZTqrJ3GYTRw5k2y5gbritWRcLDaHg5TzbfoJth/0/89331D39B430650C6C281629A0425E632CE5387D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.116.0/22
                IPv6:
                  2804:6204::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269271

    Signature Algorithm: sha256WithRSAEncryption
         8f:0d:78:46:f5:7e:bc:1c:71:66:14:ee:48:ed:e7:04:d4:9c:
         3b:93:55:6d:e4:85:48:c0:86:b7:cc:38:81:b0:14:71:01:ae:
         4f:27:2a:e8:ee:a0:79:b7:f0:a4:e2:18:8f:1e:3c:c2:89:df:
         df:70:91:63:7e:57:5b:21:7e:05:ae:54:ca:29:cc:d9:55:4b:
         2b:48:22:d3:83:04:73:85:f3:89:98:81:ec:05:45:e7:01:88:
         f9:cd:31:68:41:df:df:9d:e7:73:c7:86:80:a9:ec:c0:cb:7a:
         eb:76:34:e8:37:89:ee:b9:2a:8d:f4:ff:c0:be:ba:c0:d3:c9:
         5a:72:cc:9e:bf:3e:02:dc:fb:e0:be:1e:db:06:2d:e4:b4:38:
         ca:41:4f:2a:db:b6:36:4f:fe:e2:57:25:70:81:b5:91:26:33:
         c1:90:ee:d0:db:bd:8e:5f:c7:ab:2c:c6:7e:d3:cf:b9:22:cd:
         33:86:23:5a:51:31:42:3a:8d:93:f1:39:39:1f:02:de:89:8f:
         e9:17:98:cf:55:c6:6f:c3:b8:33:d3:90:34:49:8d:fb:ef:7b:
         34:f9:3c:de:63:10:0f:7f:6b:84:6a:91:11:bb:bd:69:f7:83:
         ca:a3:d8:30:2c:e8:a8:60:3e:a0:a8:17:a1:4d:54:c2:20:21:
         9c:03:e1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org