Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.cer
File:                     89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.cer (raw, json)
Hash identifier:          NXPu3nmmvp8mvMoZqyp3gYPW9vU8L0HIGQTBxq+VfnU=
Subject key identifier:   89:D3:BA:1A:68:91:74:A6:2F:94:25:DD:D0:F6:89:2E:C0:EE:6E:0A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       514E873487EA4E71390A35FDD90AE92A3C8AC762
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Mar 2024 11:25:09 +0000
Certificate not after:    Thu 27 Mar 2025 11:30:09 +0000
Subordinate resources:    AS: 52941
                          IP: 45.169.212.0/22
                          IP: 177.38.40.0/21
                          IP: 2804:b18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:4e:87:34:87:ea:4e:71:39:0a:35:fd:d9:0a:e9:2a:3c:8a:c7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 11:25:09 2024 GMT
            Not After : Mar 27 11:30:09 2025 GMT
        Subject: CN=89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d9:57:85:8d:6f:c0:8f:92:85:d5:71:6a:0b:
                    cf:ed:b1:aa:1d:a6:c0:0e:34:67:c9:d3:ca:12:1e:
                    3d:c3:5e:f0:05:2e:ba:be:9d:1a:fd:5a:45:08:71:
                    fa:5d:d0:d8:6b:c7:e8:54:8d:36:fd:6d:9f:01:7b:
                    b3:32:21:f2:26:02:04:64:41:9f:dc:c4:09:d2:47:
                    25:cb:b5:a9:37:1a:f7:eb:d1:0d:27:a2:89:06:e1:
                    ab:d1:30:2c:5d:88:f7:48:ef:31:97:38:46:ad:5b:
                    70:50:e2:44:0e:0e:88:34:b4:1c:3b:52:18:53:94:
                    86:fe:9e:fa:d5:8e:4c:55:fb:51:b4:19:42:89:e2:
                    1a:d6:1a:d1:e8:b9:a6:39:42:55:1a:fc:1e:2a:af:
                    e3:32:a1:21:2d:5b:5d:68:b8:e6:2e:2f:07:a6:77:
                    6c:b5:f1:61:e9:02:73:47:5d:fa:63:10:81:29:13:
                    e6:3e:5b:21:a9:98:58:90:8e:f6:7d:04:c5:1d:85:
                    ac:78:b8:48:37:07:c3:b1:f7:bf:99:57:4e:b6:83:
                    dd:cd:45:2b:9a:28:37:ec:4b:38:2b:67:74:5f:98:
                    52:22:be:e2:65:68:54:78:3f:bd:2b:45:53:20:2c:
                    d6:ce:27:bc:85:0c:0a:72:a5:28:01:3e:fe:a1:05:
                    c9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                89:D3:BA:1A:68:91:74:A6:2F:94:25:DD:D0:F6:89:2E:C0:EE:6E:0A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7njrcCcu617bG7jWQwzwT1ZQYzntrjCoC37N9pQqMCWL/0/89D3BA1A689174A62F9425DDD0F6892EC0EE6E0A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.212.0/22
                  177.38.40.0/21
                IPv6:
                  2804:b18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52941

    Signature Algorithm: sha256WithRSAEncryption
         4b:c2:7d:ac:f6:70:46:47:fa:ad:16:4a:69:9f:36:ad:d9:e5:
         9e:39:3d:e5:5b:35:96:31:22:7d:b0:b0:12:b4:65:59:53:3c:
         9f:96:c4:35:77:17:dc:20:d7:87:b1:11:19:1a:83:25:b9:f0:
         09:db:82:55:7a:4d:89:60:f1:fa:31:90:e0:c0:64:87:09:7f:
         e3:31:c1:37:f2:7b:41:78:88:10:99:f7:21:1c:5f:d4:3f:82:
         02:e9:a7:bb:01:8a:74:f8:8e:cb:5a:7c:ed:68:b9:43:be:28:
         9a:50:17:25:d4:67:1d:79:5e:97:bc:5c:d2:40:11:ad:c5:04:
         61:08:cb:d1:08:06:a6:66:a8:4c:be:7c:54:5c:47:1c:e7:48:
         38:28:cd:41:6c:d2:ab:9a:a6:16:16:cb:49:3e:b9:f8:09:f6:
         46:21:99:9b:ec:33:3a:23:15:b8:fe:bd:bf:ab:4b:d4:59:40:
         47:18:a5:32:84:12:b8:97:62:2b:54:e4:28:cf:8c:9d:dd:50:
         51:44:91:93:da:a2:79:eb:18:07:50:f2:7d:7f:c1:d9:28:32:
         79:4f:2c:5a:c5:d2:81:32:aa:ee:b8:5a:9c:5e:63:9f:b3:f2:
         57:d1:9c:c1:07:47:75:ee:8e:1e:9c:46:43:4e:c5:81:3e:47:
         43:90:15:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:24 2024 by rpki-client on console-fra.rpki-client.org