Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/901122F2D1C80D8CD2B84C52693263E57928B4CE.cer
File:                     901122F2D1C80D8CD2B84C52693263E57928B4CE.cer (raw, json)
Hash identifier:          KGDiTQ59EX/TSHQ49kgSqZGN7HzQWOWE3ixOOWDv4K4=
Subject key identifier:   90:11:22:F2:D1:C8:0D:8C:D2:B8:4C:52:69:32:63:E5:79:28:B4:CE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58C2F73FB5AC96B3D4360D73AB2612BFC6227841
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/901122F2D1C80D8CD2B84C52693263E57928B4CE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Nov 2023 06:51:23 +0000
Certificate not after:    Sat 16 Nov 2024 06:56:23 +0000
Subordinate resources:    AS: 266061
                          IP: 45.4.212.0/22
                          IP: 2804:39f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c2:f7:3f:b5:ac:96:b3:d4:36:0d:73:ab:26:12:bf:c6:22:78:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 06:51:23 2023 GMT
            Not After : Nov 16 06:56:23 2024 GMT
        Subject: CN=901122F2D1C80D8CD2B84C52693263E57928B4CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:51:10:52:c2:46:f1:3b:39:df:fd:47:0f:
                    00:8c:c2:58:ce:06:ff:ef:74:ea:72:2a:91:2c:69:
                    f6:ed:9a:4b:08:3f:1b:91:fb:91:5b:eb:41:7b:ca:
                    5c:67:72:de:80:51:6e:ad:2d:61:7b:bd:6a:88:96:
                    93:06:6b:ca:46:c6:fb:37:4a:e0:7f:bc:17:ae:9b:
                    da:ae:7f:80:74:57:f1:f0:f7:64:7f:9b:17:3a:70:
                    58:d7:78:46:6f:53:1b:a8:c8:3e:41:93:29:e3:3b:
                    eb:fd:67:96:78:fd:75:ac:20:d2:cb:2c:b8:35:45:
                    d7:2f:d1:6c:e3:92:00:c6:50:47:90:cd:8c:c2:ea:
                    95:b9:3c:1b:52:1b:71:a5:38:2e:08:30:8f:39:0d:
                    35:1c:d5:fc:3b:10:da:94:c5:0b:22:ea:d0:04:0e:
                    e5:03:41:91:47:57:92:59:8f:48:96:e4:78:d4:80:
                    08:e8:d4:d6:3c:3d:41:87:6a:90:5c:0d:f6:a2:ba:
                    41:3d:a0:8a:86:45:af:0c:36:9d:4c:ad:f1:cc:1a:
                    a0:43:f1:95:5e:af:cc:2c:29:28:d7:98:ae:00:e2:
                    7d:04:07:d2:40:ba:2e:06:d0:4f:2f:8b:6f:c5:b4:
                    c0:4d:86:04:41:a3:3a:ce:5a:cf:22:bc:c5:a9:24:
                    6e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:11:22:F2:D1:C8:0D:8C:D2:B8:4C:52:69:32:63:E5:79:28:B4:CE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G95uSNd8BkHkySnrATJFJPReknHsWLmJiF9Ne6RLTe4U/0/901122F2D1C80D8CD2B84C52693263E57928B4CE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.212.0/22
                IPv6:
                  2804:39f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266061

    Signature Algorithm: sha256WithRSAEncryption
         26:ac:09:9e:09:ea:11:7c:67:16:66:41:63:71:71:21:29:b9:
         75:4e:cb:a8:7f:44:45:6c:d0:e9:f0:61:1d:fd:2f:93:48:7c:
         e5:fd:92:f8:ac:9b:24:57:9a:b1:39:06:8c:c1:ae:54:f1:a1:
         27:87:fb:9d:03:f6:06:df:0e:c1:2a:92:24:8e:c5:51:d3:98:
         fa:1c:a0:07:82:15:07:47:be:aa:b8:a9:8c:81:f5:ab:db:ac:
         7d:d2:e7:a9:c0:60:6b:c8:af:33:37:c3:99:1c:ae:7e:ef:d6:
         0f:9e:7e:fe:12:18:df:c8:32:bd:30:8f:07:82:f4:cb:59:be:
         5e:49:0a:27:25:94:7b:cd:21:25:f1:2a:b6:b3:27:e7:a6:0f:
         36:bb:56:da:da:78:13:a1:51:f1:92:3c:fb:43:33:cd:90:66:
         f0:f6:17:d4:3d:38:0e:de:30:a5:62:5d:8a:c7:55:38:c6:7d:
         b4:16:6c:83:71:3b:a3:81:0d:3b:5e:24:3a:f7:35:a7:aa:ae:
         55:d9:60:3c:e5:24:8f:fa:7d:7b:5f:f8:c2:28:90:81:66:18:
         3d:b9:70:70:f1:ba:f5:3c:17:68:68:2c:21:d4:be:2e:6e:c6:
         0f:e7:6d:78:e7:49:11:20:13:c8:82:ef:f0:28:e4:f1:0b:2a:
         57:41:09:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org