Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.cer
File:                     A17E1666B400764AAB84BF876124DB6CB1EB0DC3.cer (raw, json)
Hash identifier:          NNyvrpyYDnQY7rB29qEPLpGQVNynBvWsylCoIE1RLPA=
Subject key identifier:   A1:7E:16:66:B4:00:76:4A:AB:84:BF:87:61:24:DB:6C:B1:EB:0D:C3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7F9101275FB8855FA32653F3B2363012E65662F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 14:52:45 +0000
Certificate not after:    Thu 13 Feb 2025 14:57:45 +0000
Subordinate resources:    AS: 270247
                          IP: 177.53.160.0/22
                          IP: 2804:6914::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:91:01:27:5f:b8:85:5f:a3:26:53:f3:b2:36:30:12:e6:56:62:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 14:52:45 2024 GMT
            Not After : Feb 13 14:57:45 2025 GMT
        Subject: CN=A17E1666B400764AAB84BF876124DB6CB1EB0DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ef:47:8d:5e:d3:17:ef:4b:75:83:2b:4a:f9:
                    bc:a8:17:40:77:07:cd:9a:83:2e:43:57:07:7c:6c:
                    fc:47:4a:71:e3:01:23:e2:0c:c3:64:4e:ac:9c:9b:
                    aa:44:eb:91:89:10:c5:72:a4:83:e5:d4:29:c0:21:
                    e2:5b:93:17:9f:b1:6f:fd:a5:89:cd:92:5e:96:b3:
                    4f:96:b8:15:7e:e6:dd:6d:f9:5c:8f:c7:46:7f:89:
                    df:eb:b7:e5:19:48:6f:20:1c:3a:05:c9:bc:06:63:
                    09:e3:a2:ef:04:30:1f:61:84:5f:1e:f1:d7:c3:64:
                    80:ce:c8:7a:ec:0c:b5:93:61:95:28:3c:9b:1b:cc:
                    53:64:80:74:d8:4f:41:f4:c3:bd:e2:c9:3e:6f:fd:
                    d9:6b:69:df:8e:a2:62:2c:fa:77:e3:91:8b:dc:bc:
                    23:60:d5:d6:04:d3:7e:14:ac:03:55:bc:e5:65:e7:
                    6b:70:a5:96:fa:91:2f:9f:a7:e3:a9:db:c4:f8:83:
                    76:f1:f7:6a:46:af:28:e2:3c:cc:88:ea:a6:59:2a:
                    86:34:74:d5:6a:5c:c8:0f:a3:eb:7d:15:67:81:b4:
                    3a:03:7e:4c:20:7a:da:a7:d7:86:b8:23:e7:e8:c7:
                    42:fb:e5:cb:3e:b0:66:88:2d:61:86:92:46:f2:97:
                    f4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A1:7E:16:66:B4:00:76:4A:AB:84:BF:87:61:24:DB:6C:B1:EB:0D:C3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.160.0/22
                IPv6:
                  2804:6914::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270247

    Signature Algorithm: sha256WithRSAEncryption
         26:ed:a4:01:51:09:cf:d3:14:68:9a:a9:bb:7f:c6:7c:a2:89:
         02:a3:91:10:8c:9b:d9:8d:3a:de:3d:44:2c:39:18:a0:3d:e8:
         2b:56:d6:bc:71:6e:ae:7d:a8:a0:da:01:49:91:bc:82:cb:25:
         0e:9c:b6:02:86:93:d4:77:ca:12:f6:35:80:82:e3:0a:5e:82:
         68:e1:9e:76:61:1c:80:cb:21:9b:d7:19:fa:a2:94:9f:c8:11:
         f6:2f:51:31:09:51:5a:05:38:b7:65:3b:c2:77:a1:6c:a9:47:
         16:e2:0e:8a:97:6b:ce:a9:3c:6c:d8:8a:7a:2b:e2:20:ce:07:
         76:1c:f6:8e:d0:dc:83:eb:33:b7:23:eb:42:f8:db:00:2f:54:
         e2:49:99:bc:57:cc:ea:7c:50:0a:d5:5e:42:80:ac:5d:bc:0e:
         4b:15:db:3d:7c:c5:18:2a:b1:47:c7:18:50:78:d1:3b:1a:67:
         84:0c:3e:fa:a3:74:28:e1:6b:c8:f1:1f:96:6c:cd:f7:c5:b0:
         9f:d7:6f:54:c4:53:77:79:58:1b:20:bc:5a:3d:5c:69:fa:79:
         d6:0d:6e:44:59:b9:9a:17:0f:64:e3:7b:39:b9:83:75:18:64:
         d3:a9:ae:b2:f3:74:20:3a:f7:f8:77:d0:94:d9:a0:94:75:17:
         c4:c0:e6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org