Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/895610FCEC55587ED75C0DE6D234563F371B0004.cer
File:                     895610FCEC55587ED75C0DE6D234563F371B0004.cer (raw, json)
Hash identifier:          sXsDvpgYKwtgJRltV0RSedVdYw3q+Kdr7flSyjf8qr8=
Subject key identifier:   89:56:10:FC:EC:55:58:7E:D7:5C:0D:E6:D2:34:56:3F:37:1B:00:04
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       076FC4FC519A9AAD910232F35D46FE2FFF19E42C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/895610FCEC55587ED75C0DE6D234563F371B0004.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 02:20:45 +0000
Certificate not after:    Wed 23 Oct 2024 02:25:45 +0000
Subordinate resources:    AS: 264300
                          IP: 138.121.132.0/22
                          IP: 170.244.112.0/22
                          IP: 2804:25c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:6f:c4:fc:51:9a:9a:ad:91:02:32:f3:5d:46:fe:2f:ff:19:e4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 25 02:20:45 2023 GMT
            Not After : Oct 23 02:25:45 2024 GMT
        Subject: CN=895610FCEC55587ED75C0DE6D234563F371B0004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:8c:4e:63:dc:1d:88:10:a2:43:cd:20:32:
                    57:08:38:18:bc:37:c0:8e:fd:0f:a6:fd:80:78:db:
                    a3:da:f2:74:47:75:4f:90:3b:d4:b6:89:95:7b:a7:
                    9c:8e:0b:50:69:a3:15:0b:13:13:59:1a:ef:e0:90:
                    d7:09:49:c5:25:50:61:1b:3b:bb:df:5a:b2:17:b7:
                    85:c1:3d:ab:69:9f:84:d3:3d:aa:26:46:92:b1:4d:
                    93:88:91:80:30:0b:0d:fc:55:ef:2a:22:7c:2e:9f:
                    d5:d6:41:ea:7b:c9:f1:d7:0e:5d:c6:8d:c4:c1:81:
                    d2:73:29:99:0c:49:1b:ea:03:8e:47:5b:33:75:2f:
                    91:25:77:8b:84:46:53:1a:9b:20:61:9d:fb:4e:5d:
                    e0:f9:5f:37:96:e6:01:ed:0f:dc:2d:85:2d:39:da:
                    1c:38:56:1e:73:20:4f:9e:a7:c9:aa:0a:6c:53:fb:
                    e6:64:2c:c2:9e:83:35:b6:dd:5c:e1:34:16:df:28:
                    fd:01:db:7a:04:8b:94:6b:5f:be:56:85:ce:d4:c8:
                    6b:95:e8:3c:7e:c0:ae:f1:fe:5e:07:e6:f6:76:cb:
                    42:c8:7e:75:22:ef:5d:cb:70:ed:47:82:65:2c:ca:
                    59:23:89:5b:47:e9:76:e0:7e:20:31:e0:c5:81:92:
                    38:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:56:10:FC:EC:55:58:7E:D7:5C:0D:E6:D2:34:56:3F:37:1B:00:04
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Bb235vyXU7fDiRQiXxbWPMJLRais5fXBk8FJzdTgDmyT/0/895610FCEC55587ED75C0DE6D234563F371B0004.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.132.0/22
                  170.244.112.0/22
                IPv6:
                  2804:25c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264300

    Signature Algorithm: sha256WithRSAEncryption
         51:2c:b3:51:6d:d2:fc:9b:5b:27:da:58:7a:66:a1:c4:e6:49:
         f8:2a:93:03:e3:21:60:8f:ea:a0:b3:d2:d3:ba:80:40:81:fe:
         e3:a7:1c:cc:f0:2f:a6:72:52:e0:33:1d:b0:1b:0a:7e:6d:51:
         f0:57:85:17:b3:ed:8f:b4:42:7f:a0:c7:d4:23:71:bb:0e:4e:
         13:9f:4d:9d:73:91:ab:c7:34:db:60:5c:51:15:52:6e:40:72:
         6f:93:61:9c:ad:ee:fa:37:28:68:74:a9:7f:aa:51:8d:39:2c:
         f8:83:ad:ba:57:18:86:28:49:86:55:f1:90:f6:b2:e6:bb:40:
         18:cb:bd:a6:bc:fd:71:69:4f:7e:18:a8:5a:71:50:8c:c8:47:
         dc:f4:84:f2:57:59:b6:a7:47:ca:7f:47:91:15:af:73:ad:ef:
         f3:c6:39:27:5a:7b:f3:b8:71:d3:2f:72:3e:0b:92:a7:44:44:
         89:7d:53:1a:46:55:cb:24:18:98:31:cb:e2:8f:ab:64:b5:de:
         7e:92:c7:b8:ce:49:4f:60:7d:52:8b:95:b9:7c:75:bf:50:db:
         9d:21:d1:cc:b1:2c:9d:8e:c1:cf:db:da:72:59:bc:a6:09:3d:
         5e:f5:17:28:cc:85:7a:f1:5c:f6:a1:21:ab:f4:0d:ae:60:70:
         f9:8a:3d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org