Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9305769E7A3B2FFB5C36FF7018B4949D62A65585.cer
File:                     9305769E7A3B2FFB5C36FF7018B4949D62A65585.cer (raw, json)
Hash identifier:          H+Zm20nsp2xqJ8+R2ierRUTYMGEDruH9K1YOJADglKE=
Subject key identifier:   93:05:76:9E:7A:3B:2F:FB:5C:36:FF:70:18:B4:94:9D:62:A6:55:85
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       37F490668F7F7C1E33FEE82046490A4336E3AC20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/9305769E7A3B2FFB5C36FF7018B4949D62A65585.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 22:38:56 +0000
Certificate not after:    Tue 04 Feb 2025 22:43:56 +0000
Subordinate resources:    AS: 271609
                          IP: 45.183.176.0/23
                          IP: 2804:7e34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f4:90:66:8f:7f:7c:1e:33:fe:e8:20:46:49:0a:43:36:e3:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  6 22:38:56 2024 GMT
            Not After : Feb  4 22:43:56 2025 GMT
        Subject: CN=9305769E7A3B2FFB5C36FF7018B4949D62A65585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:6c:dd:82:0c:e0:9a:28:71:ea:39:cd:f1:
                    c5:96:5e:88:a9:e9:fa:61:fa:e0:63:52:94:45:6b:
                    92:c1:3e:f4:9a:93:47:d5:b3:69:c2:1a:b3:c5:69:
                    d5:3c:90:bd:9a:1e:eb:71:5b:b8:0f:6a:e9:e2:fe:
                    ab:6c:c4:ec:ec:84:83:b2:3f:05:f0:f3:54:d7:06:
                    81:03:4b:e2:90:02:55:05:76:40:cd:30:a2:d7:d5:
                    c1:61:5a:70:52:0d:85:0f:88:5b:17:1c:bf:f9:fd:
                    bf:8d:f1:78:09:2f:02:6f:46:5d:c6:d2:82:c8:5e:
                    93:94:f3:41:3a:ce:76:49:af:0c:04:eb:3e:45:aa:
                    4b:d3:71:3b:bb:d2:4f:0f:f9:f5:dd:bb:f3:90:7c:
                    81:82:dd:b5:7a:78:13:4c:02:a4:33:c9:ff:a8:d0:
                    c1:d7:9d:16:80:e3:08:56:5a:1b:43:05:a3:a2:7b:
                    ec:cb:76:f1:32:78:74:fe:e8:91:03:3a:aa:4a:58:
                    e2:29:16:f1:2e:04:47:7c:dd:77:2a:e7:85:ba:fa:
                    a4:06:8d:58:02:9a:6c:57:9c:da:60:20:cf:13:27:
                    f1:61:f6:eb:e1:63:f5:97:bd:78:76:75:76:b5:85:
                    d4:b5:14:f6:e5:e5:bf:61:9e:76:ec:f6:e2:46:6f:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                93:05:76:9E:7A:3B:2F:FB:5C:36:FF:70:18:B4:94:9D:62:A6:55:85
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8z25B61KokS1eVWUMTxBHFPu5e4sNyAgANDbfguUuKtj/0/9305769E7A3B2FFB5C36FF7018B4949D62A65585.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.183.176.0/23
                IPv6:
                  2804:7e34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271609

    Signature Algorithm: sha256WithRSAEncryption
         b6:6c:aa:d3:f6:c7:78:e0:2f:e4:68:b0:3e:ca:4e:95:17:51:
         ea:37:d1:4a:f4:d1:d6:d7:be:22:61:24:82:f4:b5:73:e9:1e:
         d7:9d:2a:e5:c1:cd:5c:2c:23:7d:57:b8:cd:b7:ef:5f:41:7e:
         8a:02:11:df:e1:8f:fb:a3:15:af:50:1d:5b:fa:aa:d4:44:9a:
         73:f2:2b:ab:f8:66:0b:60:7d:b2:3d:7d:8c:ac:6e:ea:f3:5e:
         0c:c0:d7:1d:80:ce:99:a3:86:e4:03:04:3f:02:af:fb:0c:bc:
         a1:82:e9:c4:99:d2:cd:23:f7:b5:31:b5:af:8d:8d:44:04:63:
         20:7b:ad:e8:b5:18:b4:d5:03:da:24:f8:ef:c6:20:89:91:be:
         38:34:a8:f5:79:d4:c6:7b:c2:61:9b:60:90:5e:3b:34:1e:3e:
         48:bd:a5:7a:b9:4d:5a:83:49:10:e2:84:96:67:e6:4d:b7:c2:
         61:f7:56:95:9b:3f:9c:aa:49:5b:17:c4:b2:a3:f3:e6:8e:df:
         04:8e:2d:27:7f:9d:26:ed:6a:46:be:36:09:5d:cc:f1:f7:e1:
         3e:dd:32:02:9e:13:65:89:d6:37:b5:ef:b7:ae:73:c7:32:30:
         69:75:8c:fe:00:e1:71:37:b9:d5:dd:8c:54:d3:1e:a7:5f:8f:
         80:9c:b9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org