Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/923141629C33831528ED5BCD343A22B26852B46E.cer
File:                     923141629C33831528ED5BCD343A22B26852B46E.cer (raw, json)
Hash identifier:          /nHgC1/UJxSIKwWwSQwwSWs6gwiFmbXaG5C6Ehhw6Q8=
Subject key identifier:   92:31:41:62:9C:33:83:15:28:ED:5B:CD:34:3A:22:B2:68:52:B4:6E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CD68884351AE6702E4998F9E33257B37A6C4BAA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/0/923141629C33831528ED5BCD343A22B26852B46E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 18 Oct 2023 17:35:15 +0000
Certificate not after:    Wed 16 Oct 2024 17:40:15 +0000
Subordinate resources:    AS: 264027
                          IP: 143.0.216.0/22
                          IP: 177.74.180.0/22
                          IP: 2804:29a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d6:88:84:35:1a:e6:70:2e:49:98:f9:e3:32:57:b3:7a:6c:4b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 18 17:35:15 2023 GMT
            Not After : Oct 16 17:40:15 2024 GMT
        Subject: CN=923141629C33831528ED5BCD343A22B26852B46E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:2c:f9:53:75:f1:c4:b5:63:03:5b:ed:85:
                    07:4c:97:2d:08:59:08:31:b3:bc:12:ce:1b:ce:ff:
                    74:4c:d0:35:4a:d0:df:0f:e9:70:cb:0c:1f:42:bd:
                    4d:f3:ac:40:39:ec:b7:ed:08:f3:5a:a8:10:31:4d:
                    fb:89:d3:e9:cd:0b:27:18:79:95:c3:07:3b:2b:61:
                    66:76:36:d8:ab:48:59:d4:64:0e:c4:74:a9:80:2d:
                    25:33:6f:e3:19:92:61:f9:1c:24:eb:6c:f3:88:bf:
                    c3:58:4a:ca:05:3e:35:22:75:1c:b0:cd:70:b2:79:
                    4e:fb:1a:b8:6d:38:5a:37:aa:43:0f:8d:cf:b9:25:
                    58:42:b6:e3:3e:37:b4:fb:3c:b5:60:5e:d3:5c:8d:
                    d8:e6:1a:bc:19:d0:2f:9f:a8:6b:db:e6:66:e4:7c:
                    95:3b:04:d0:88:ba:03:f5:2f:3e:03:8a:52:6f:cc:
                    ac:c2:18:7c:df:d8:80:b6:a1:0f:7d:bf:6d:ce:d3:
                    0f:3f:70:b3:58:d6:aa:a8:49:d6:af:60:ea:f3:fd:
                    53:95:48:5f:eb:65:08:54:38:e8:3f:90:1a:27:ea:
                    4b:20:1f:0d:2e:fa:ff:36:65:90:56:ee:a4:7a:37:
                    ed:9c:70:0e:3c:b6:46:d3:0b:d8:7c:44:35:67:03:
                    c2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                92:31:41:62:9C:33:83:15:28:ED:5B:CD:34:3A:22:B2:68:52:B4:6E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6orvXMoFpstwbJhonoEF5UKbYKLEf2sWxm7hZM6ik3zc/0/923141629C33831528ED5BCD343A22B26852B46E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.216.0/22
                  177.74.180.0/22
                IPv6:
                  2804:29a8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264027

    Signature Algorithm: sha256WithRSAEncryption
         b1:1c:80:8b:20:73:1c:f5:02:12:dd:be:51:92:ad:5b:bd:8c:
         3f:62:b9:8a:b8:f2:09:59:73:0f:f3:0d:6e:91:58:be:ff:8b:
         73:df:08:25:b3:58:83:4e:17:e8:a3:ab:7e:99:30:51:cb:43:
         51:f7:91:15:63:c0:56:ea:89:c3:8f:47:de:f3:54:5e:1d:30:
         27:08:b1:b4:ca:42:8c:3d:7b:5a:70:ac:e8:cf:64:8a:49:de:
         df:dd:70:0f:0c:9d:2b:5c:f2:90:04:3b:26:af:82:e4:99:1c:
         b4:24:93:91:0f:64:3b:fb:f2:44:d2:61:ad:e6:17:47:fc:4f:
         77:47:2a:0e:0e:ce:90:f7:cf:e3:07:d5:aa:03:0d:11:7e:aa:
         19:ee:f8:dd:e0:50:d9:5d:83:f8:6e:b7:56:90:b4:65:8b:65:
         af:9e:16:d0:f0:3e:e2:f4:da:3b:88:47:a4:8f:70:24:7a:86:
         4f:2a:e9:d4:47:1b:2d:12:45:d9:95:cd:06:a7:41:7f:3b:bd:
         4f:c8:d6:db:7f:35:30:0c:30:c4:d2:c7:00:fb:4f:c9:7a:85:
         3e:53:32:c0:c8:8b:de:fa:06:3b:17:03:34:03:73:8b:04:fd:
         a9:52:e0:cb:37:59:1c:d3:c1:7b:c0:70:ee:f9:ec:86:e2:e4:
         08:0f:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org