Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/958F6E245DA17CB51E5737C91D215B1BE0A00780.cer
File:                     958F6E245DA17CB51E5737C91D215B1BE0A00780.cer (raw, json)
Hash identifier:          GB33eRB0xxtgZDI/oIErnQhv4RePca95bFYCi1ueu1E=
Subject key identifier:   95:8F:6E:24:5D:A1:7C:B5:1E:57:37:C9:1D:21:5B:1B:E0:A0:07:80
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E332FD6A92C3E6DBE704BFE20D0B8665762EBFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/958F6E245DA17CB51E5737C91D215B1BE0A00780.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 04 Feb 2024 16:04:43 +0000
Certificate not after:    Sun 02 Feb 2025 16:09:43 +0000
Subordinate resources:    AS: 264195
                          IP: 138.97.196.0/22
                          IP: 2804:2400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:33:2f:d6:a9:2c:3e:6d:be:70:4b:fe:20:d0:b8:66:57:62:eb:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  4 16:04:43 2024 GMT
            Not After : Feb  2 16:09:43 2025 GMT
        Subject: CN=958F6E245DA17CB51E5737C91D215B1BE0A00780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:60:ba:1d:07:0c:de:3d:19:04:8e:51:77:
                    c9:91:f2:a0:2c:7d:42:ad:5f:7f:2f:fe:a4:ba:45:
                    db:e7:2c:6c:45:2d:3b:be:69:8d:9f:dd:f7:d5:62:
                    be:b2:21:15:15:2d:d5:4c:71:38:ea:de:d6:56:a6:
                    56:1a:46:26:8a:c0:a2:30:fd:90:be:62:c6:76:24:
                    74:65:8b:f0:7f:e2:c8:05:4a:47:46:de:1e:56:75:
                    30:d2:37:bc:63:59:4e:a4:aa:2f:db:f9:b5:31:67:
                    6a:3a:15:41:23:64:2a:b0:c8:53:b4:0f:bd:13:e2:
                    5a:ae:86:65:bc:6e:e9:64:41:b7:d4:2f:98:8a:d3:
                    3b:05:1c:93:b5:34:e3:d3:fa:da:bf:a8:02:c2:b7:
                    44:66:4e:05:54:cc:25:89:6f:03:14:4c:f9:c2:97:
                    32:10:fe:9b:42:28:12:fc:17:2e:96:5f:29:cb:7a:
                    1a:1a:92:21:86:b5:9c:6d:4c:7f:95:6a:97:b1:d0:
                    17:83:8d:de:8c:c8:e0:89:87:b4:5d:1c:2c:6c:87:
                    10:a9:4b:68:18:7b:7c:6f:32:09:cc:c4:16:13:03:
                    d7:6b:03:05:9a:2c:a3:a8:9f:4e:51:8d:a9:ad:da:
                    07:d9:83:e0:2c:bd:3d:84:c9:e5:d1:22:bc:b2:ca:
                    4e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                95:8F:6E:24:5D:A1:7C:B5:1E:57:37:C9:1D:21:5B:1B:E0:A0:07:80
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BZLAzuFWUys1X9pzvJFCobbQsBcwPBvRkfGTxELQ3fQU/0/958F6E245DA17CB51E5737C91D215B1BE0A00780.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.196.0/22
                IPv6:
                  2804:2400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264195

    Signature Algorithm: sha256WithRSAEncryption
         2f:71:50:ee:af:f0:30:16:98:bd:50:86:3f:1b:38:0c:52:f1:
         6a:7d:11:19:40:d8:d9:da:c7:8b:bc:29:b3:3a:dc:ba:14:5b:
         3a:ba:98:d1:46:23:bf:9b:8f:57:85:dd:a9:e5:05:ae:3d:f6:
         5a:63:c4:79:62:61:2d:57:21:e7:1d:a8:3d:c6:0d:61:a6:47:
         fe:93:06:ba:84:7d:46:60:46:d8:77:d8:ed:b0:cf:73:ba:1f:
         67:7a:fd:64:30:c6:7e:00:eb:f4:fb:5d:ae:49:48:ea:fb:8e:
         d3:23:a1:0d:62:50:f8:b2:af:e4:de:dc:d0:ed:47:0e:08:03:
         19:92:04:c4:eb:1a:cf:5d:2e:83:08:34:c1:0e:40:4f:87:c8:
         2a:af:f0:4c:77:e5:75:f6:2f:53:cc:1b:fc:c0:5d:43:28:1a:
         07:6d:f2:39:46:35:bd:f5:eb:1a:b2:eb:54:8b:2d:db:07:8a:
         d4:54:48:07:ac:cf:b2:0b:17:22:ad:42:52:9e:a5:3a:92:de:
         82:2a:17:29:8b:81:21:38:53:bf:c1:10:8e:f8:b8:62:fa:83:
         cb:64:31:a0:ed:c5:39:02:1f:ee:65:98:41:1c:7d:69:1a:ac:
         33:88:d6:5d:a3:e4:b9:82:6a:b8:6e:f9:e0:aa:76:9b:9f:8a:
         f2:40:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org