Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/98A58630706439BCF78BD26A366BF9EF99C622F8.cer
File:                     98A58630706439BCF78BD26A366BF9EF99C622F8.cer (raw, json)
Hash identifier:          2EysHXfiL07cjqizat8WaNTUau0G0EprHJuB2CYDDRw=
Subject key identifier:   98:A5:86:30:70:64:39:BC:F7:8B:D2:6A:36:6B:F9:EF:99:C6:22:F8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0679546BC315B2FDB1F7F275A82147DBD440FBB0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/98A58630706439BCF78BD26A366BF9EF99C622F8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 04 Oct 2023 15:44:03 +0000
Certificate not after:    Wed 02 Oct 2024 15:49:03 +0000
Subordinate resources:    AS: 268013
                          IP: 45.167.152.0/22
                          IP: 2804:56a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:79:54:6b:c3:15:b2:fd:b1:f7:f2:75:a8:21:47:db:d4:40:fb:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  4 15:44:03 2023 GMT
            Not After : Oct  2 15:49:03 2024 GMT
        Subject: CN=98A58630706439BCF78BD26A366BF9EF99C622F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ce:ff:6c:ac:e2:53:c0:0c:71:53:b4:07:a9:
                    36:14:82:7f:13:82:35:75:23:6f:7c:1a:c3:f8:04:
                    70:93:dc:3d:db:c3:ce:a4:b8:37:68:06:13:35:d4:
                    2e:0a:a0:f6:d4:b0:49:a5:d0:c1:a5:4d:9e:dd:2d:
                    8e:ab:b8:5f:52:57:e3:ee:f8:bc:f3:60:54:80:af:
                    49:c7:16:32:06:31:2b:db:88:0c:82:75:6d:a1:52:
                    ed:e2:31:c8:82:28:c4:02:b8:8e:6e:08:66:79:81:
                    77:7d:d6:8b:b1:d0:11:c7:1d:fa:f7:10:83:c9:1e:
                    89:6e:06:48:16:f0:9c:34:4c:c1:0b:76:b4:57:49:
                    da:c2:b8:2e:55:e6:cc:7b:75:4a:f8:e3:a5:39:48:
                    0a:5a:12:1f:ba:97:05:e9:dc:e9:bd:ab:3b:41:5b:
                    86:29:f0:a3:a0:7e:94:31:0f:e0:73:d7:64:31:8f:
                    d5:a1:38:9f:4b:56:2f:61:6f:f4:c2:1f:2c:32:94:
                    fb:e8:07:ca:68:42:c2:5a:6f:72:3b:48:c1:25:51:
                    6f:51:69:72:6a:5b:d9:98:86:ab:57:3e:c9:20:66:
                    9e:47:b9:18:22:28:32:24:1c:4d:06:46:bd:52:a5:
                    82:97:cb:3c:bb:38:31:4a:0e:b9:35:e8:89:1a:14:
                    3f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                98:A5:86:30:70:64:39:BC:F7:8B:D2:6A:36:6B:F9:EF:99:C6:22:F8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/dg5QANLhVfZ4gbYhF8xgxWUbAvcXgnSxBpoYBUQ9Lu7/0/98A58630706439BCF78BD26A366BF9EF99C622F8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.152.0/22
                IPv6:
                  2804:56a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268013

    Signature Algorithm: sha256WithRSAEncryption
         58:d3:9c:6c:6c:67:4d:a3:ee:5e:7d:54:0e:ff:6b:4e:eb:f0:
         2b:32:36:4a:ca:58:10:49:9a:0c:40:09:83:d4:bf:69:6e:26:
         2c:e3:92:03:f6:a9:b5:d0:31:19:bb:bf:7c:d5:98:35:ed:48:
         56:7c:f7:23:64:cf:39:02:ca:01:bd:f7:33:51:3d:1e:25:c6:
         ad:82:31:52:d9:fa:7d:25:45:ee:ea:e9:38:30:a3:cd:55:55:
         60:00:6f:8b:ee:9b:25:38:20:d5:0a:49:84:e3:5a:88:6d:e4:
         4d:37:a8:22:fd:27:44:4a:36:73:24:2a:57:ef:e5:f6:47:b0:
         67:2a:51:c7:b1:2d:c0:b7:24:b1:23:8f:0c:bd:8e:98:19:9b:
         b6:5f:95:cc:ae:e3:3b:a4:9b:47:e7:4f:50:ea:4e:b3:9b:4c:
         98:7b:0b:d5:eb:dd:ab:24:35:44:a6:78:1c:41:25:8f:99:ad:
         e8:74:74:fe:f3:d9:03:99:c4:95:2b:05:05:e9:be:f7:40:10:
         83:2b:75:76:4a:ac:33:63:18:22:9b:26:e9:f4:b0:0f:94:90:
         a4:e0:d6:e5:05:96:c2:7d:10:3c:85:7b:a8:7c:6d:83:f6:eb:
         e5:72:dd:5d:5b:5f:2f:73:fc:00:25:e9:b5:12:23:42:2a:f9:
         6f:c5:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:25 2024 by rpki-client on console-fra.rpki-client.org