Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/98437F0FE77FDF7A20AD9D0D24200BE51BE10147.cer
File:                     98437F0FE77FDF7A20AD9D0D24200BE51BE10147.cer (raw, json)
Hash identifier:          Vwp7eoL5tWrnV4UUHzFKW+aJyWLUYIOjQO38+YgktJ4=
Subject key identifier:   98:43:7F:0F:E7:7F:DF:7A:20:AD:9D:0D:24:20:0B:E5:1B:E1:01:47
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3B9AB7D186EAD83B4A790073FEDDB38E45EFE3B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/0/98437F0FE77FDF7A20AD9D0D24200BE51BE10147.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Nov 2023 17:42:53 +0000
Certificate not after:    Fri 22 Nov 2024 17:47:53 +0000
Subordinate resources:    AS: 271597
                          IP: 179.63.12.0/22
                          IP: 2804:7e04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:9a:b7:d1:86:ea:d8:3b:4a:79:00:73:fe:dd:b3:8e:45:ef:e3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 24 17:42:53 2023 GMT
            Not After : Nov 22 17:47:53 2024 GMT
        Subject: CN=98437F0FE77FDF7A20AD9D0D24200BE51BE10147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:08:d1:8b:90:96:55:54:ba:ad:86:93:14:
                    43:bd:7c:d8:6c:39:e2:b9:00:ee:21:46:4b:72:94:
                    e3:20:7e:a3:72:fc:09:8b:28:39:ad:1c:61:7d:00:
                    42:aa:d0:cf:ce:d0:a6:d0:9e:21:71:35:94:81:3b:
                    17:1f:48:25:01:e1:41:13:b0:c7:bc:46:73:48:80:
                    41:ce:36:9b:43:96:6a:f4:34:fb:e2:ec:d1:4d:8e:
                    7a:b5:59:3d:a1:45:9f:a7:ad:a1:ab:ab:dd:6f:2e:
                    d6:f9:b7:a5:ad:7a:e9:9e:76:9a:f1:b6:ab:35:d0:
                    a4:8d:30:63:8e:96:0c:8d:5c:b7:b2:57:8b:9e:fa:
                    f9:e0:c3:a2:ec:a6:ac:ee:6a:6b:06:85:a2:4a:f6:
                    22:50:30:7b:42:eb:6b:0a:14:48:a8:d0:79:00:23:
                    8b:a1:9d:76:f1:da:24:c1:bd:b4:d5:2a:d5:69:23:
                    e1:f6:4b:d7:cd:97:78:dd:06:38:62:07:67:d8:40:
                    d2:46:73:1d:04:9e:f4:5b:e1:77:85:da:05:c9:53:
                    93:66:eb:94:b6:60:b3:bf:e4:30:d2:ea:9b:56:ed:
                    4d:d1:90:da:c2:f0:63:51:28:8d:08:4a:20:c6:95:
                    77:2e:fb:be:f3:84:2e:4b:0e:45:e0:9b:f3:03:9f:
                    6f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:43:7F:0F:E7:7F:DF:7A:20:AD:9D:0D:24:20:0B:E5:1B:E1:01:47
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6Gw7fM3pikM6aTQJgLY9BX5y2CvjwxwDgR3pQLTYWLxu/0/98437F0FE77FDF7A20AD9D0D24200BE51BE10147.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.12.0/22
                IPv6:
                  2804:7e04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271597

    Signature Algorithm: sha256WithRSAEncryption
         7a:9f:15:7b:c8:05:49:b2:47:63:e2:11:c3:6f:c2:63:87:5d:
         84:58:6d:56:ef:c4:d6:87:51:93:14:bb:55:fd:58:b2:ef:4c:
         b6:4c:cd:a1:9a:c9:24:cd:cb:f2:48:70:e3:0b:f3:a5:a3:42:
         3a:41:a9:c8:1d:7f:ea:39:62:a5:f7:05:98:f2:4d:fe:02:85:
         8d:00:0d:d6:6a:63:1c:ed:bb:88:c0:0f:74:71:ce:b2:e7:63:
         18:b4:b2:7e:e3:d5:71:b9:f2:2d:99:19:f8:19:f4:49:af:54:
         49:7c:40:ab:9a:f6:97:78:05:70:2d:71:9f:1f:e2:bd:3d:43:
         ec:58:a6:4c:51:b0:5a:0e:ac:08:78:f7:d8:86:8e:43:7d:5b:
         24:36:78:91:a3:8f:d6:8c:98:7e:ce:ee:1e:3b:87:6f:7a:f9:
         73:0d:0e:ad:1a:07:56:c8:c9:78:a8:60:dd:3c:f6:29:97:1e:
         97:dc:9c:a1:30:46:0b:09:52:5c:3d:db:12:d6:9a:e2:79:99:
         94:2d:ae:85:4c:ab:71:ba:17:18:45:d2:ab:05:c7:ee:3c:63:
         52:ba:76:88:e6:0d:5d:af:b0:fe:4d:e6:36:6b:4f:47:42:58:
         38:92:60:ae:5d:8a:d8:25:8f:6a:04:9b:21:4a:7a:01:b0:9e:
         2d:2b:ea:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:19 2024 by rpki-client on console-fra.rpki-client.org