Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9705DAF862839CC953B88777D3FF774FCD7CFC22.cer
File:                     9705DAF862839CC953B88777D3FF774FCD7CFC22.cer (raw, json)
Hash identifier:          RgA3S4pTfW04vNWPLmP9CVtYB0bmaCXAJGKecmIwiOs=
Subject key identifier:   97:05:DA:F8:62:83:9C:C9:53:B8:87:77:D3:FF:77:4F:CD:7C:FC:22
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       28AAD414CF17660807E909FF10A94B813532C287
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/9705DAF862839CC953B88777D3FF774FCD7CFC22.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Dec 2023 14:36:37 +0000
Certificate not after:    Sat 07 Dec 2024 14:41:37 +0000
Subordinate resources:    AS: 269497
                          IP: 45.187.204.0/22
                          IP: 2804:6588::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:aa:d4:14:cf:17:66:08:07:e9:09:ff:10:a9:4b:81:35:32:c2:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  9 14:36:37 2023 GMT
            Not After : Dec  7 14:41:37 2024 GMT
        Subject: CN=9705DAF862839CC953B88777D3FF774FCD7CFC22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e8:2f:e5:7f:17:e5:12:39:b4:a8:f6:cf:e2:
                    37:b6:2a:e0:34:29:e4:19:72:12:75:d3:c0:7d:62:
                    ab:32:b9:dd:24:cc:8c:f6:37:1a:02:4d:57:d1:8c:
                    f2:8a:64:ca:62:ed:69:eb:52:c1:66:39:2a:15:55:
                    19:db:b6:3b:7e:e4:b8:06:52:04:61:15:6d:96:5f:
                    fa:81:22:f7:0a:d7:f2:c1:38:4e:83:9d:e1:00:b7:
                    fe:10:c7:7f:3f:e6:c4:61:83:74:ab:86:6e:21:52:
                    4a:eb:cb:56:92:1d:78:14:ba:81:c1:7f:60:0a:d2:
                    a5:7f:91:93:5c:7d:72:62:b3:0c:f8:d3:87:c0:c4:
                    23:86:f0:63:cc:d7:4b:a3:69:3b:38:63:06:7d:9b:
                    c7:34:dc:d3:bc:5f:58:03:8e:2a:85:5f:b3:c0:fc:
                    ba:78:82:a9:18:4a:e9:1a:eb:d3:b8:5d:4f:5b:e2:
                    3e:6c:e0:2a:9e:b9:61:a5:69:ef:af:ac:67:da:78:
                    2b:28:34:e5:81:b3:a0:4a:19:fe:ec:bc:f8:05:3e:
                    23:8f:06:f3:0f:af:9a:f7:77:16:4d:38:20:6b:ce:
                    87:2d:27:49:df:26:2c:2f:6b:c1:bd:03:28:00:46:
                    9a:ac:b5:77:b9:1c:96:ea:3b:0e:2e:5b:47:1b:57:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:05:DA:F8:62:83:9C:C9:53:B8:87:77:D3:FF:77:4F:CD:7C:FC:22
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/9705DAF862839CC953B88777D3FF774FCD7CFC22.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.204.0/22
                IPv6:
                  2804:6588::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269497

    Signature Algorithm: sha256WithRSAEncryption
         07:b6:59:df:8d:cf:04:0a:19:a3:b9:fc:f4:e1:40:58:c7:79:
         18:3a:be:50:1c:ce:b4:0c:16:c0:df:7b:81:f1:f7:3e:97:c5:
         9c:e0:81:59:22:d0:ce:db:09:1c:44:24:32:4b:59:2a:51:b6:
         ae:97:f1:0a:d7:a4:79:48:2f:fe:01:1b:51:4b:d5:a6:1a:53:
         4d:49:3c:3d:a7:a5:af:b9:8d:2e:e5:92:7e:28:52:bc:93:94:
         13:01:ee:e8:31:2b:75:8a:61:ae:d6:13:de:3a:1c:72:ef:df:
         b2:72:12:10:a3:1e:27:f3:c8:7a:5b:f0:72:f8:9e:aa:4c:b5:
         1d:4e:35:c5:5c:30:74:89:38:8f:c9:31:bc:23:6a:9c:09:f4:
         1f:35:8a:07:66:ee:e1:00:72:cd:1a:53:90:30:2a:53:4e:49:
         72:d4:9a:66:61:de:28:cb:62:55:27:04:31:e0:98:2c:2d:08:
         fc:3d:1c:7e:ac:37:1a:9e:34:2a:ee:bf:3b:90:a5:94:31:6f:
         80:68:8c:c7:99:fc:84:bf:65:50:63:48:79:55:53:cc:c0:02:
         aa:3d:05:07:96:5f:2c:61:32:c9:9e:6a:76:50:25:4b:0d:54:
         e5:1a:39:d6:14:86:1a:b6:fb:15:32:6d:8c:37:97:62:d3:96:
         40:ac:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org