Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9135C08D527D027A8B9E98427B68340ABAED0962.cer
File:                     9135C08D527D027A8B9E98427B68340ABAED0962.cer (raw, json)
Hash identifier:          yY7YadNvnIQTdy2NZLmRjYAgHl4RZpzvWod1xKBBwC0=
Subject key identifier:   91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6173AD0F8A18DFECE63CBE0E42C655CC78C19330
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 15:00:42 +0000
Certificate not after:    Mon 27 Jan 2025 15:05:42 +0000
Subordinate resources:    AS: 266437
                          IP: 170.82.16.0/22
                          IP: 2804:37d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:73:ad:0f:8a:18:df:ec:e6:3c:be:0e:42:c6:55:cc:78:c1:93:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 29 15:00:42 2024 GMT
            Not After : Jan 27 15:05:42 2025 GMT
        Subject: CN=9135C08D527D027A8B9E98427B68340ABAED0962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:99:6c:51:29:18:8e:a5:a9:30:34:40:a8:
                    10:5e:7c:e1:db:fb:b1:42:91:f0:de:ee:71:0d:79:
                    66:88:3d:c0:5f:88:63:d8:b3:cf:3b:d6:5f:ad:85:
                    17:22:51:c6:36:35:95:c9:b0:7a:f4:a7:bb:f6:c4:
                    53:5b:c3:0a:7e:79:fc:b6:00:b0:c1:c1:6a:f1:b1:
                    a4:c1:54:0e:41:53:16:73:01:c0:ef:60:9e:29:d3:
                    d3:e7:ff:1b:b3:43:59:69:b4:10:1a:9e:01:8d:2d:
                    87:67:31:58:59:f6:94:e6:07:c2:dc:30:34:c8:ab:
                    07:09:d3:7f:0a:e6:a1:a0:17:36:3e:71:cf:b5:22:
                    30:80:61:0e:be:e1:d9:40:e4:00:0c:03:e6:4c:57:
                    c8:1f:d7:5e:2b:b6:f3:e9:06:23:1f:bf:5e:5b:f8:
                    0b:f5:da:5d:4a:94:30:ca:7e:d7:cb:94:76:2f:02:
                    05:29:61:c5:fc:8e:d6:4c:32:15:6c:3e:eb:b0:0b:
                    66:90:56:9a:b7:c4:3a:f6:66:d0:36:77:b8:90:50:
                    d7:dd:1e:ce:af:65:80:1e:67:e7:50:d8:fc:56:50:
                    53:0d:f2:69:ee:1d:4c:66:4f:15:49:52:e3:e0:75:
                    fc:ab:d2:ba:da:63:fb:df:d4:9e:d3:cd:61:38:9c:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                91:35:C0:8D:52:7D:02:7A:8B:9E:98:42:7B:68:34:0A:BA:ED:09:62
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3MPpVoKqFMSS2e4Yupst27DW182CvprC4kjwSsZU8AaX/0/9135C08D527D027A8B9E98427B68340ABAED0962.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.16.0/22
                IPv6:
                  2804:37d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266437

    Signature Algorithm: sha256WithRSAEncryption
         60:35:1d:ca:df:a3:07:80:15:20:53:eb:23:b8:88:fc:a9:cb:
         76:57:e8:34:1d:05:af:78:39:9c:ac:7a:40:a4:18:18:35:f9:
         02:7b:e2:89:41:3a:21:33:0a:26:16:c3:62:64:00:5e:2c:33:
         ba:b2:40:c2:b1:5b:89:cb:bd:8e:33:08:c8:6d:4c:f4:75:51:
         83:2c:0b:81:d1:40:65:cf:26:43:0f:4e:3a:9f:3c:a0:bf:ce:
         f7:4e:ad:b5:c7:31:04:c8:b5:ca:37:35:ef:87:e6:59:f0:b9:
         46:40:b0:30:bd:d2:08:8d:f7:80:d2:f0:d7:e7:7c:86:bf:0f:
         2d:48:3b:42:36:ba:41:1d:5b:ba:06:72:3d:50:d7:9f:dc:c9:
         83:10:7b:e9:65:ed:3d:fb:e3:8f:d9:59:93:8a:8b:e1:25:7e:
         e0:03:72:ed:a8:c2:cc:89:35:2e:1c:22:19:ed:c1:ac:fa:70:
         79:0c:14:a7:38:48:bb:bf:06:ad:fd:f9:fa:03:e4:89:4e:ab:
         22:9b:4c:f7:67:23:56:be:de:39:7a:f3:2e:3a:b9:ee:7b:c4:
         58:81:63:a0:8c:78:60:16:f6:bf:d8:cc:70:8d:4b:9f:33:cb:
         29:65:84:54:41:13:a8:02:5c:28:ff:5d:cf:e3:22:43:02:19:
         ea:e4:98:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org