Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/901BBA3B3E09877AEF08D8CED56482AEB7662F8A.cer
File:                     901BBA3B3E09877AEF08D8CED56482AEB7662F8A.cer (raw, json)
Hash identifier:          yP1OucBab+jPGu3nVuCsLl7ACuaFhbIFXLHnZCwsVEI=
Subject key identifier:   90:1B:BA:3B:3E:09:87:7A:EF:08:D8:CE:D5:64:82:AE:B7:66:2F:8A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4869C2F22CFF08ABB718A72DC52DC9BF7DA6154B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/901BBA3B3E09877AEF08D8CED56482AEB7662F8A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 11 Sep 2023 11:48:52 +0000
Certificate not after:    Mon 09 Sep 2024 11:53:52 +0000
Subordinate resources:    AS: 262543
                          IP: 177.72.80.0/21
                          IP: 2804:37a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:69:c2:f2:2c:ff:08:ab:b7:18:a7:2d:c5:2d:c9:bf:7d:a6:15:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 11 11:48:52 2023 GMT
            Not After : Sep  9 11:53:52 2024 GMT
        Subject: CN=901BBA3B3E09877AEF08D8CED56482AEB7662F8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1d:f6:ed:f9:82:fb:1b:0d:b8:d8:ec:5b:d1:
                    39:ea:a7:c3:65:4c:6a:d4:9f:38:35:8d:be:dc:3a:
                    6e:9b:cd:b2:78:2b:8d:d1:77:9e:b5:87:4a:81:63:
                    29:5c:af:73:41:59:7b:5e:85:0c:9d:58:8b:1f:2a:
                    11:1f:8b:36:dc:c3:cd:4c:af:cc:e8:35:39:0c:07:
                    5d:6c:ad:68:0a:c0:db:22:ce:f1:a5:c0:c0:75:0a:
                    94:d3:48:7c:6a:42:78:38:c7:5d:35:3a:7b:e1:1f:
                    b1:b3:07:8d:04:e1:52:8b:de:cf:5d:1e:3f:1e:8e:
                    65:b2:67:ba:70:77:e5:bb:99:b9:7e:8f:c9:c3:66:
                    1b:dd:a1:04:fb:e5:db:ce:df:46:88:fa:a4:52:bf:
                    1b:bb:d4:0f:d0:47:7a:bf:b2:26:a3:5f:a9:02:e6:
                    85:b1:29:be:54:9b:ad:11:1e:a7:93:a8:3f:8b:73:
                    b6:6a:82:f6:be:a7:91:f2:46:b3:14:9f:6a:6f:16:
                    fa:94:e2:a3:6b:9e:2c:4b:0d:a2:b4:dd:24:ef:e2:
                    ce:fa:1d:51:56:0a:c7:16:d8:0a:36:98:72:31:d8:
                    14:90:ef:ed:9d:7c:ec:59:e1:6c:5e:2b:47:bb:74:
                    0b:76:01:34:37:03:3a:45:78:93:2d:8e:b2:97:3b:
                    b6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                90:1B:BA:3B:3E:09:87:7A:EF:08:D8:CE:D5:64:82:AE:B7:66:2F:8A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AGUN4C81peikbKzDysrGnnkgUVvqxAcoBvB8Gfyb9TSe/0/901BBA3B3E09877AEF08D8CED56482AEB7662F8A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.80.0/21
                IPv6:
                  2804:37a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262543

    Signature Algorithm: sha256WithRSAEncryption
         94:8d:26:17:eb:23:97:b4:9b:88:ce:70:3f:30:a4:7b:1c:42:
         35:86:94:ac:28:99:30:84:18:06:90:2b:59:65:8d:55:5f:c4:
         1d:fd:ce:f2:92:fe:ce:0d:88:11:bc:48:d1:95:33:97:94:be:
         76:98:71:3c:fb:f0:97:3e:2a:57:03:4c:30:09:02:cc:fd:2c:
         b1:2f:d9:46:c4:03:73:89:bd:38:a6:d1:60:26:71:96:32:93:
         88:41:4b:54:54:2b:f4:a8:02:5e:f2:1b:3b:4f:e6:eb:fd:7d:
         da:95:d5:84:bf:52:44:87:5d:71:51:87:46:44:d6:e0:a3:4d:
         3d:cf:75:9b:45:53:ef:30:3f:9d:4d:d2:7a:d6:5b:f0:c5:00:
         55:25:95:12:e3:3c:94:01:49:93:ed:14:d6:8d:30:07:ba:aa:
         6d:2b:8f:31:03:aa:ed:50:56:dc:78:ff:c4:06:fa:e4:48:76:
         da:ee:bc:48:eb:6e:ab:97:49:ee:de:9f:ee:d6:96:31:b9:b8:
         73:39:da:d8:4b:df:df:9f:88:7f:e7:e5:03:cf:77:93:ad:5e:
         37:ad:41:31:29:de:0f:56:78:29:27:eb:07:20:83:47:08:ad:
         0b:45:40:c5:85:20:5c:57:c1:df:7e:4f:c0:cc:96:6a:15:16:
         4a:e9:dc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org