Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/94DC791C0B379CA74B5FE680A8F691B7BD7C3D1A.cer
File:                     94DC791C0B379CA74B5FE680A8F691B7BD7C3D1A.cer (raw, json)
Hash identifier:          ihfqYtxrfpZGWsB78+HqI5ID8ELMq0ZIeXwW1punzEU=
Subject key identifier:   94:DC:79:1C:0B:37:9C:A7:4B:5F:E6:80:A8:F6:91:B7:BD:7C:3D:1A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       313503E5E24DA943ABF70333F58ECB795B02CEBF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/94DC791C0B379CA74B5FE680A8F691B7BD7C3D1A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 02:44:58 +0000
Certificate not after:    Wed 29 May 2024 02:49:58 +0000
Subordinate resources:    AS: 268782
                          IP: 45.172.240.0/22
                          IP: 2804:5a94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:35:03:e5:e2:4d:a9:43:ab:f7:03:33:f5:8e:cb:79:5b:02:ce:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 31 02:44:58 2023 GMT
            Not After : May 29 02:49:58 2024 GMT
        Subject: CN=94DC791C0B379CA74B5FE680A8F691B7BD7C3D1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:13:5d:82:97:1f:a3:5f:f5:55:aa:50:cb:14:
                    2f:52:56:a4:a5:82:0c:f2:fa:bb:58:35:89:63:df:
                    17:80:c1:e0:e4:5f:1b:84:1b:5e:1b:2b:d6:83:11:
                    50:a4:ac:44:8a:44:b3:7c:21:52:44:7e:90:40:6b:
                    35:c8:0d:1f:3f:4f:69:00:39:88:68:89:38:f8:74:
                    8b:e6:61:9d:26:3b:02:f7:11:d6:27:87:0a:2e:d6:
                    b0:a5:0a:de:0d:60:dc:80:ae:f4:fe:26:29:ff:1b:
                    1b:85:93:45:9a:6d:89:41:e5:e2:30:b5:e0:61:a6:
                    b5:4b:fd:9e:57:3a:03:6c:17:3f:e7:6e:6a:f9:df:
                    00:22:bf:18:30:66:f9:ba:15:6d:d7:cc:11:76:6a:
                    7b:26:c4:9b:94:1c:d6:5c:63:67:f7:48:f9:38:e4:
                    0a:5f:84:89:7d:bc:09:d0:57:74:f4:d5:a9:05:98:
                    d2:76:aa:e5:29:43:aa:86:a4:9c:22:ec:32:71:dc:
                    4e:6c:00:9c:06:ad:1e:13:1d:47:75:53:5c:74:1a:
                    a2:4d:b7:8f:a2:a1:d1:ba:61:60:6f:97:8a:3f:c8:
                    4e:dc:63:0b:08:f9:1e:4f:26:75:81:79:fc:03:75:
                    b9:9e:8b:3f:4a:be:38:a6:2d:66:34:67:a4:1b:48:
                    c9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                94:DC:79:1C:0B:37:9C:A7:4B:5F:E6:80:A8:F6:91:B7:BD:7C:3D:1A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/0/94DC791C0B379CA74B5FE680A8F691B7BD7C3D1A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.240.0/22
                IPv6:
                  2804:5a94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268782

    Signature Algorithm: sha256WithRSAEncryption
         9e:d6:4e:27:16:1d:68:31:3d:3c:18:86:81:1f:2e:7a:c1:5f:
         e4:65:78:11:e4:83:79:fe:3c:6c:df:0c:7b:8f:59:6b:88:1c:
         14:af:e9:44:0e:b0:4c:99:a6:3b:ee:28:44:67:c6:42:9b:8c:
         45:5c:61:ba:81:60:23:57:1b:28:cd:bc:c4:6d:aa:df:7b:8b:
         cc:30:2c:1c:c0:fe:d2:c4:ce:52:08:1c:68:36:61:bd:c5:17:
         45:50:e9:c8:10:9f:a6:1d:24:4a:22:7f:61:3d:94:ae:cf:6d:
         53:1a:81:f1:45:3b:bc:40:ca:96:f1:99:0f:d6:d8:0d:fe:e2:
         2f:e8:67:58:89:38:5b:01:ed:1f:26:85:aa:7f:0d:f4:b8:32:
         39:a5:d5:c3:c5:02:44:41:87:b1:5a:8f:a5:c1:fb:c9:1c:38:
         09:a5:ed:b1:ac:de:a3:4f:b3:db:a0:b4:be:8a:9d:d5:ad:e2:
         1c:02:20:c4:27:1b:3e:91:55:5c:3c:b3:99:4a:aa:49:eb:97:
         77:37:ce:9e:cd:93:4b:5a:55:a8:33:0f:ea:de:e8:66:c5:67:
         b5:54:2d:cb:0e:1a:23:12:05:4b:f2:77:b3:0f:3e:13:64:61:
         31:6c:ac:40:32:fb:d9:5b:85:2d:19:d8:e9:d0:e9:79:b0:05:
         58:f6:17:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org