Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A342FC6471B5406C66BB5A51BD6F3F7D07316279.cer
File:                     A342FC6471B5406C66BB5A51BD6F3F7D07316279.cer (raw, json)
Hash identifier:          0SCFXZJwizv7ycCr0uVL8XS2I+6oDHM5+s2OpAR7u+s=
Subject key identifier:   A3:42:FC:64:71:B5:40:6C:66:BB:5A:51:BD:6F:3F:7D:07:31:62:79
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7A03025FBF51F13540F079A91C3E3176468536E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/A342FC6471B5406C66BB5A51BD6F3F7D07316279.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 03 Nov 2022 21:25:13 +0000
Certificate not after:    Thu 02 Nov 2023 21:30:13 +0000
Subordinate resources:    AS: 270256
                          IP: 200.108.172.0/22
                          IP: 2804:6938::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:03:02:5f:bf:51:f1:35:40:f0:79:a9:1c:3e:31:76:46:85:36:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  3 21:25:13 2022 GMT
            Not After : Nov  2 21:30:13 2023 GMT
        Subject: CN=A342FC6471B5406C66BB5A51BD6F3F7D07316279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:19:49:3a:b1:09:61:cc:ac:e5:4b:99:18:5b:
                    99:60:db:6b:80:50:8d:8e:32:9d:29:cf:78:be:38:
                    18:57:60:52:b8:f4:7e:05:5b:6c:05:e5:46:a0:0b:
                    e8:b4:e0:bb:9e:76:35:00:44:5e:60:a4:65:2e:04:
                    88:b1:c3:b9:8d:cf:af:35:37:5c:f1:94:dc:3a:50:
                    8a:13:db:b9:17:04:c5:cb:72:3d:91:b7:17:b3:08:
                    67:fd:fa:4a:e7:0e:6c:8f:35:c7:96:f5:53:19:1f:
                    7b:cb:34:fe:59:10:b2:65:07:d9:74:75:70:f4:73:
                    d3:99:b7:81:3f:c7:bf:16:e9:38:36:25:55:58:c3:
                    08:2a:10:a7:14:00:a8:49:93:77:bf:b1:8d:bb:70:
                    0c:5f:da:b2:0c:49:9f:a6:83:59:ab:79:1f:32:92:
                    70:6e:19:25:38:16:90:cb:df:2a:d9:1f:5d:b4:6b:
                    3f:a3:1d:42:9d:84:0e:be:71:20:1a:b5:42:f4:d8:
                    ba:84:13:72:98:24:e5:ff:04:19:c8:2c:be:d7:53:
                    cc:4e:03:2b:93:1d:17:0b:66:d9:eb:9a:2e:2f:d7:
                    a1:ec:26:1a:bf:c8:b6:67:fc:98:18:34:3d:d9:75:
                    3e:5b:68:21:7c:92:55:2b:8b:1a:07:89:3d:14:2e:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A3:42:FC:64:71:B5:40:6C:66:BB:5A:51:BD:6F:3F:7D:07:31:62:79
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DNrth6nDDjzQWC7gBzU21hbQQk7Lsdsji3iHCwK8CTx7/0/A342FC6471B5406C66BB5A51BD6F3F7D07316279.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.108.172.0/22
                IPv6:
                  2804:6938::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270256

    Signature Algorithm: sha256WithRSAEncryption
         49:c6:0e:72:a0:fd:1a:0b:e3:4b:26:fb:84:7c:9b:02:06:0e:
         e5:6b:3e:94:f0:cd:b9:6d:7a:aa:8e:5d:e8:21:e2:95:53:6b:
         45:d8:75:0d:ba:84:a4:1d:3e:c4:2d:86:df:bb:c9:50:0f:fe:
         5e:84:f8:95:90:bf:3d:67:e0:e0:59:63:eb:fd:c7:f4:98:9a:
         51:ac:df:8b:53:15:7b:1f:44:3b:24:72:0b:c3:01:6e:1d:a9:
         ac:bb:dd:62:32:77:8b:7f:60:7a:ff:96:95:39:3b:5a:64:1f:
         e5:54:a1:9c:a5:88:c5:10:68:a2:c2:86:33:e5:4b:e0:ac:35:
         e4:d9:cc:fa:32:11:e5:ed:56:42:c6:30:49:07:2f:08:58:cc:
         65:10:14:8f:a1:d9:af:ae:fd:aa:4d:a5:97:00:a6:34:f2:2e:
         e0:a5:de:bc:03:1f:2b:d4:8d:79:eb:44:2f:67:bb:2a:ac:4f:
         e1:81:be:23:5a:45:06:ce:2e:50:a3:18:52:db:a6:ec:e1:32:
         70:83:07:bc:39:84:bf:29:d4:c8:50:ba:d6:68:f1:07:47:88:
         24:b8:32:1a:89:ff:67:08:f3:28:14:02:e5:c6:51:aa:c2:cc:
         5e:ad:94:a9:2e:c7:d3:c1:a2:44:54:e8:82:4f:4f:7d:56:25:
         47:41:97:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:26 2024 by rpki-client on console-fra.rpki-client.org