Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/98716993F5885BA4377ED210D21A8A2D0CE43192.cer
File:                     98716993F5885BA4377ED210D21A8A2D0CE43192.cer (raw, json)
Hash identifier:          /bVslVolyZJAEezwyJDKke2rY7PJPOVL+vvdUxtXo/4=
Subject key identifier:   98:71:69:93:F5:88:5B:A4:37:7E:D2:10:D2:1A:8A:2D:0C:E4:31:92
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       293712A5654ECCB6933AFA7DE8E8F44A7CB6A445
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/98716993F5885BA4377ED210D21A8A2D0CE43192.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 15:04:55 +0000
Certificate not after:    Fri 14 Feb 2025 15:09:55 +0000
Subordinate resources:    AS: 271658
                          IP: 131.255.131.0/24
                          IP: 2804:7ef8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:37:12:a5:65:4e:cc:b6:93:3a:fa:7d:e8:e8:f4:4a:7c:b6:a4:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 15:04:55 2024 GMT
            Not After : Feb 14 15:09:55 2025 GMT
        Subject: CN=98716993F5885BA4377ED210D21A8A2D0CE43192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ff:44:22:b3:a4:c4:13:89:37:97:b1:1e:b0:
                    93:84:d2:90:c0:2d:a2:ad:c2:3a:9f:e3:00:63:be:
                    73:7a:43:46:b2:20:ad:aa:92:08:90:13:a6:a2:17:
                    97:4b:58:7b:2c:04:f4:c0:9c:4f:56:14:72:d6:4d:
                    7b:8d:4f:ff:06:20:8e:70:37:20:1d:75:d1:6a:63:
                    9b:24:2b:76:06:43:61:22:37:ec:a3:df:7f:bf:2b:
                    aa:23:f0:28:10:9c:3f:05:ab:e1:f2:81:73:d0:7b:
                    54:0a:1c:82:6c:56:b7:6d:be:31:5f:43:0f:9b:6c:
                    49:72:86:39:20:cb:aa:cd:40:af:da:a7:fe:a3:b3:
                    d4:48:47:d9:ff:fa:1c:65:ef:6c:9c:1c:8a:df:f4:
                    67:e4:fb:82:82:13:c4:a1:05:b1:d1:57:d2:b5:ca:
                    65:db:37:9d:f8:5c:58:90:c0:de:5d:9c:19:fe:bd:
                    3f:55:12:d9:08:2e:2b:86:87:2f:8a:20:f0:e8:c9:
                    92:45:e6:91:60:09:a2:7c:73:27:f5:25:92:84:24:
                    4d:1e:c0:d3:7d:37:1c:89:76:6b:a0:a2:a1:c2:3e:
                    fc:32:54:7d:cd:3d:33:a4:4e:53:6b:c6:ec:76:54:
                    90:db:09:e8:ef:a5:cc:24:ab:5e:16:e7:54:11:8d:
                    9d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:71:69:93:F5:88:5B:A4:37:7E:D2:10:D2:1A:8A:2D:0C:E4:31:92
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/98716993F5885BA4377ED210D21A8A2D0CE43192.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.131.0/24
                IPv6:
                  2804:7ef8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271658

    Signature Algorithm: sha256WithRSAEncryption
         68:4b:ee:a3:4b:2c:c5:04:d9:a8:db:52:e3:db:fe:63:de:36:
         d9:93:d4:fb:0d:b1:a0:07:1c:8b:54:24:22:c9:c1:f4:4c:72:
         1c:89:39:01:57:84:ae:1d:35:3e:4e:b6:42:5e:48:8f:ce:e2:
         9c:46:56:8d:ce:d6:93:6a:1b:cc:17:5e:85:b6:9f:ec:37:19:
         b0:a8:04:57:cd:4b:1f:8d:51:f8:29:b1:33:fc:3e:1e:f4:1a:
         3d:96:2e:02:78:32:2a:d2:85:ce:54:e7:57:c7:00:93:2e:a4:
         2b:9c:47:ed:b7:54:1d:bd:83:72:a3:41:d3:67:b6:22:d4:4e:
         2f:0d:59:f0:78:ff:6f:5e:aa:ec:f5:44:c3:e1:65:3b:f7:66:
         ad:97:3d:de:7c:1b:cf:a9:78:7f:58:19:ab:03:3d:0f:aa:e1:
         b6:bb:9e:02:ae:3d:dc:e0:31:b0:ef:7c:e6:e4:42:ce:38:f2:
         f7:12:a8:97:42:f4:7a:ed:bf:3f:ca:4b:e5:5b:b2:2c:66:13:
         c5:4d:b3:fa:ee:2a:0c:49:3c:13:e2:67:cd:75:4f:2d:89:84:
         36:e6:7e:b4:be:67:be:eb:30:82:53:44:b1:fe:d2:6d:a3:5a:
         e9:e2:db:dc:b9:59:06:1c:48:94:4d:a8:24:89:79:08:d1:2d:
         98:a3:e9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:39 2024 by rpki-client on console-ams.rpki-client.org