Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/9723508999E6E6042E07B57FC49918FDD5C8CDDC.cer
File:                     9723508999E6E6042E07B57FC49918FDD5C8CDDC.cer (raw, json)
Hash identifier:          TnIeLoCWtaU3k7ESadSc47CIEzh1VanF1VDt+ahHxEw=
Subject key identifier:   97:23:50:89:99:E6:E6:04:2E:07:B5:7F:C4:99:18:FD:D5:C8:CD:DC
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       58716FE0675B6049A9F75DBE05EA5C639204F034
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/9723508999E6E6042E07B57FC49918FDD5C8CDDC.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 28 Mar 2024 21:58:02 +0000
Certificate not after:    Thu 27 Mar 2025 22:03:02 +0000
Subordinate resources:    AS: 265130
                          IP: 143.208.152.0/22
                          IP: 170.254.200.0/22
                          IP: 2804:2b00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:71:6f:e0:67:5b:60:49:a9:f7:5d:be:05:ea:5c:63:92:04:f0:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 28 21:58:02 2024 GMT
            Not After : Mar 27 22:03:02 2025 GMT
        Subject: CN=9723508999E6E6042E07B57FC49918FDD5C8CDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:02:21:6b:bf:59:8f:98:ef:65:15:da:31:f6:
                    f4:d3:f2:35:25:31:94:ce:05:30:e3:a8:de:2d:60:
                    10:1c:30:1c:45:b5:b8:6a:80:8b:0a:51:23:c9:25:
                    45:68:06:00:42:97:28:46:43:84:61:41:c2:a3:b5:
                    04:c2:5b:ea:70:4a:14:56:13:60:6e:94:ea:71:f0:
                    f9:e5:d4:73:b8:6a:60:43:41:9b:a2:c0:84:24:6f:
                    8f:31:61:01:e7:36:6c:b8:37:a3:ae:91:db:ed:7e:
                    d1:fc:21:0f:72:2b:45:7a:b2:b9:a3:25:ab:65:aa:
                    18:08:35:7c:7f:55:12:fa:3e:a7:0d:b4:72:7d:f9:
                    5d:ee:ad:18:da:0c:75:4a:09:30:50:19:27:bc:e0:
                    41:e5:7a:ab:c6:01:f5:33:22:d6:a2:cb:64:fc:ae:
                    66:b7:23:95:de:f5:1b:23:ab:17:58:7f:22:0c:78:
                    d2:22:4e:b6:df:7b:65:8b:42:bb:1c:51:68:6d:d0:
                    78:f9:1b:61:b9:1d:34:95:98:03:69:34:9c:08:3c:
                    e2:70:67:c7:08:d8:d1:49:1e:70:27:d0:f7:22:d1:
                    27:88:e8:99:74:0b:41:60:1c:3a:46:13:62:25:54:
                    e8:7a:63:d5:1b:17:8b:6c:2e:cf:07:ce:b5:56:36:
                    d4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                97:23:50:89:99:E6:E6:04:2E:07:B5:7F:C4:99:18:FD:D5:C8:CD:DC
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Dd2yafQEDRyLSnEhXwh6CmSYwBuJE5q35zKDVBmY5xw/0/9723508999E6E6042E07B57FC49918FDD5C8CDDC.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.152.0/22
                  170.254.200.0/22
                IPv6:
                  2804:2b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265130

    Signature Algorithm: sha256WithRSAEncryption
         7a:1e:89:16:1a:9f:4f:98:f3:be:3e:68:4e:3a:d4:bc:9b:dc:
         b2:27:e0:31:27:d7:40:ff:75:d1:98:8f:05:ae:a9:3c:a6:67:
         f0:c8:98:66:4c:72:83:42:27:80:d8:a0:fc:d3:39:54:8a:11:
         cb:05:d1:f7:00:52:b0:d2:d8:27:33:dc:96:f0:d4:fe:69:9e:
         b6:63:92:d7:84:66:c1:97:ee:95:45:56:4c:da:58:f7:6e:30:
         fe:85:2d:e3:eb:e5:2c:d8:e2:00:f6:63:84:8a:98:3d:e2:34:
         08:25:ae:34:f2:f3:3a:d4:78:cb:32:56:42:9d:e0:85:a9:a2:
         77:a0:5a:27:e6:c4:41:26:8c:ae:4e:9b:68:7c:f4:75:2f:1e:
         f5:e5:f1:f1:91:eb:17:14:b2:18:29:52:2d:b9:8d:34:73:6f:
         cd:d0:37:ce:46:b6:56:10:93:02:a6:e9:7a:a5:54:8b:ac:38:
         31:70:a6:2a:30:62:b5:65:3b:62:27:b9:02:a3:90:2d:c7:2f:
         31:05:a6:68:f2:66:14:b6:b9:2c:f0:39:c2:16:06:8c:fd:54:
         b8:cd:c2:e3:30:98:c5:f1:56:e3:57:22:49:0f:37:9c:60:3d:
         7e:9e:18:0e:f0:1e:69:56:5e:29:36:49:80:25:4b:14:3f:f6:
         ad:22:81:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:42 2024 by rpki-client on console-ams.rpki-client.org