Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.cer
File:                     A230333F7690F474E284A95BADD3D39F6C5CB9F3.cer (raw, json)
Hash identifier:          W+xkMY1LAY8WHDgnogRnDpE6AoeDXFiP4dBl0GcqGks=
Subject key identifier:   A2:30:33:3F:76:90:F4:74:E2:84:A9:5B:AD:D3:D3:9F:6C:5C:B9:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       18856E7BF016D2D5C35838195CD170B238C34AB0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2024 18:45:10 +0000
Certificate not after:    Tue 14 Jan 2025 18:50:10 +0000
Subordinate resources:    AS: 264514
                          IP: 45.191.128.0/22
                          IP: 132.255.216.0/22
                          IP: 2804:20c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:85:6e:7b:f0:16:d2:d5:c3:58:38:19:5c:d1:70:b2:38:c3:4a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 16 18:45:10 2024 GMT
            Not After : Jan 14 18:50:10 2025 GMT
        Subject: CN=A230333F7690F474E284A95BADD3D39F6C5CB9F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:25:25:20:ee:4c:73:8b:c1:cd:cb:53:ed:97:
                    36:85:10:21:76:38:aa:5a:37:e3:9d:3d:3f:11:06:
                    22:78:60:8b:12:69:c7:e4:4e:c5:f6:c6:1f:0c:9e:
                    f5:df:7b:0a:df:95:4e:4c:8c:4d:31:ca:0f:34:1d:
                    7d:20:2e:82:a6:95:ee:eb:bd:7c:dd:f2:02:64:42:
                    10:8d:e5:28:18:bd:e2:5e:a2:b4:d7:26:15:72:c5:
                    5e:cf:93:58:13:4c:22:f4:65:e8:4d:79:2d:1a:79:
                    f7:04:29:2b:7a:79:57:f4:21:0f:6c:35:51:58:9e:
                    c6:e8:d7:64:84:6b:5a:1e:01:9a:3a:67:22:ec:24:
                    f0:e6:f6:db:83:d2:5a:96:9b:a2:53:ca:92:c2:bb:
                    be:4c:d9:49:5b:4e:56:99:27:97:26:61:ee:cb:38:
                    55:1d:1b:fc:a9:07:6b:e8:6e:c5:21:ee:af:a0:c6:
                    bc:04:66:f0:2d:09:1e:5e:95:a7:8a:27:1d:89:cf:
                    04:3d:2e:ed:8f:df:77:2a:de:92:6a:d0:d4:05:0d:
                    d0:d1:63:e1:d9:fa:67:ff:15:8f:54:91:71:3e:c2:
                    ce:57:d1:2e:f2:fa:82:a7:be:6e:a5:f0:3b:9b:7e:
                    74:d7:23:fd:91:8d:c9:b8:37:1e:08:a7:c0:d5:f5:
                    20:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A2:30:33:3F:76:90:F4:74:E2:84:A9:5B:AD:D3:D3:9F:6C:5C:B9:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/dR3rsxqyjBzLJaKCh1nRS8ZuistzqoJ9ZATA5SpZegE/0/A230333F7690F474E284A95BADD3D39F6C5CB9F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.128.0/22
                  132.255.216.0/22
                IPv6:
                  2804:20c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264514

    Signature Algorithm: sha256WithRSAEncryption
         68:2a:91:05:b4:cc:86:ff:40:97:3a:85:9d:5b:1a:05:f0:51:
         33:b2:2e:6d:81:96:0f:98:99:7f:b8:2e:3f:cf:81:d8:b8:8f:
         34:7e:b4:7e:b3:82:2c:8e:33:e1:a2:62:dd:0e:be:f4:3c:d7:
         f2:7d:5c:0f:45:1e:b8:20:11:e9:78:4a:b0:f5:22:ca:5c:f8:
         57:94:a2:3d:52:f4:51:90:4c:81:46:7d:25:1b:57:68:2c:4e:
         bd:d8:67:07:91:02:05:95:a6:d6:e8:ef:73:67:98:da:da:9c:
         ea:ef:1d:ef:b9:e4:bf:9b:4f:fc:96:af:ea:9f:75:72:e2:7d:
         07:5e:61:bc:ae:99:d0:9d:9b:58:00:ef:76:06:16:15:72:59:
         e5:b9:54:5c:c6:3e:75:48:cb:68:0c:79:b2:eb:a1:98:aa:99:
         d8:22:a6:c8:45:21:9d:4c:0a:4d:a2:54:fe:68:03:53:6e:a6:
         48:13:79:a0:8f:35:35:1b:61:a7:e6:4d:c9:e4:ec:eb:ce:c8:
         da:b9:59:e6:59:00:37:d9:b8:e5:fc:89:c1:02:2d:2c:87:63:
         2f:91:2b:6a:94:ef:51:c4:e8:95:a7:32:1d:49:1b:7e:e9:7a:
         ab:92:21:2b:54:7a:5d:d8:f3:5d:43:69:cc:69:87:2c:e4:df:
         cb:92:52:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org