Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9129AD41D8674385271EFA3A05D3D27494319FC0.cer
File:                     9129AD41D8674385271EFA3A05D3D27494319FC0.cer (raw, json)
Hash identifier:          KU6afz5ea81evwH0YkseuWTvN3MFS4TUt5wSGZSBJZE=
Subject key identifier:   91:29:AD:41:D8:67:43:85:27:1E:FA:3A:05:D3:D2:74:94:31:9F:C0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7587D84A912DE208EB4251E9270B1CDDDD99D5A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9129AD41D8674385271EFA3A05D3D27494319FC0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 12:45:08 +0000
Certificate not after:    Mon 07 Oct 2024 12:50:08 +0000
Subordinate resources:    AS: 263656
                          IP: 168.197.76.0/22
                          IP: 177.52.144.0/21
                          IP: 177.66.28.0/22
                          IP: 200.215.160.0/22
                          IP: 201.139.84.0/22
                          IP: 2804:10fc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:87:d8:4a:91:2d:e2:08:eb:42:51:e9:27:0b:1c:dd:dd:99:d5:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  9 12:45:08 2023 GMT
            Not After : Oct  7 12:50:08 2024 GMT
        Subject: CN=9129AD41D8674385271EFA3A05D3D27494319FC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8e:8b:ba:4a:92:34:16:c6:14:48:93:62:4b:
                    bb:31:f2:ee:4b:a2:db:e6:5b:13:9b:0b:13:97:28:
                    3a:3c:04:16:49:58:9d:a8:e8:82:21:54:d3:b6:49:
                    be:1b:e2:29:b1:76:6a:83:fb:3a:e7:b5:b5:ef:3b:
                    a6:83:f9:af:3c:48:a0:01:4d:3d:87:af:37:73:c2:
                    04:5d:52:21:fe:f3:71:dd:7d:f0:6e:0c:55:fc:0b:
                    91:36:ec:33:b0:d3:59:9b:fe:29:72:8a:cb:5f:d8:
                    3b:a9:c2:97:07:33:f1:a0:e5:fb:36:8a:26:ed:12:
                    15:fe:b0:35:d0:03:08:7e:00:e3:b9:38:36:90:d8:
                    5f:09:5b:3d:88:92:a4:2d:03:78:b5:3f:b5:c1:d2:
                    8b:f7:9a:9d:07:58:d6:93:28:6a:2e:ee:7e:03:5f:
                    3e:21:ac:8a:60:98:ca:27:8a:93:a0:42:b5:90:b4:
                    32:aa:dd:ae:1a:2d:90:81:d7:91:8c:9e:10:32:6a:
                    c2:8c:8d:69:a7:ae:5d:2d:2b:27:0f:c8:92:33:01:
                    fa:38:c5:66:c3:6e:ca:22:2e:6f:91:58:5a:6e:9c:
                    c8:6a:4a:8a:0a:45:e6:ed:86:0d:d3:96:57:86:ba:
                    6b:47:7b:72:af:5d:96:5f:42:b7:6c:f9:53:53:cf:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:29:AD:41:D8:67:43:85:27:1E:FA:3A:05:D3:D2:74:94:31:9F:C0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/KiEkP5zy2dnvxp3ZeGdG1aPAhA6s5ZYxjuJYh8vCVBx/0/9129AD41D8674385271EFA3A05D3D27494319FC0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.76.0/22
                  177.52.144.0/21
                  177.66.28.0/22
                  200.215.160.0/22
                  201.139.84.0/22
                IPv6:
                  2804:10fc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263656

    Signature Algorithm: sha256WithRSAEncryption
         54:c5:78:85:a4:cb:c2:88:81:57:9e:34:47:90:14:91:e8:84:
         e4:23:5e:48:a6:f4:45:d0:64:51:be:fd:26:99:17:91:f5:50:
         e1:a3:eb:63:25:18:c7:e6:6b:9b:89:2e:38:61:06:62:84:16:
         db:e9:26:08:f3:33:af:6b:d5:a1:c3:65:66:ab:41:1b:27:c6:
         f0:4c:8c:ce:d8:f3:98:27:9b:3d:f7:13:99:7d:4b:b9:0f:70:
         1c:cb:15:98:d4:40:39:00:2a:20:a6:f3:f3:c6:8e:62:1a:d6:
         81:de:17:d5:fd:93:db:e4:5b:13:ac:9c:c2:e5:d3:21:eb:ca:
         f7:8f:e1:a7:c7:9f:b9:68:87:fb:1e:20:92:50:b5:2f:f5:be:
         14:81:7c:66:7b:c9:e4:11:34:12:1b:24:9d:c1:7f:48:0c:3c:
         bf:6c:99:13:40:4b:a3:68:41:c8:ed:10:dd:66:a1:a3:59:92:
         aa:85:f8:37:6b:f3:da:be:1b:63:ab:6b:4e:6f:91:7d:ae:cc:
         69:10:4e:89:50:4e:1d:a0:18:df:da:19:24:fe:a2:f4:52:fe:
         72:e0:7e:1b:0b:5b:2c:f1:28:f2:e1:69:7d:1a:a4:23:51:b9:
         e3:c1:c2:2e:9d:5e:13:51:b2:f8:2d:33:5f:d7:6b:3a:dd:cf:
         d9:1e:f5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org