Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A92360E7914FF4558BDC67FE5BA7B8AB3A03338B.cer
File:                     A92360E7914FF4558BDC67FE5BA7B8AB3A03338B.cer (raw, json)
Hash identifier:          tJQ2UUPwEWRTlGseoadQZz4CVIAWJ/3QuERnX8NKlzE=
Subject key identifier:   A9:23:60:E7:91:4F:F4:55:8B:DC:67:FE:5B:A7:B8:AB:3A:03:33:8B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       165BB5376E6B903C5F0CB59EA0C991085AD5ADE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/A92360E7914FF4558BDC67FE5BA7B8AB3A03338B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 11:36:42 +0000
Certificate not after:    Fri 07 Mar 2025 11:41:42 +0000
Subordinate resources:    AS: 263276
                          IP: 45.178.124.0/22
                          IP: 168.90.224.0/22
                          IP: 168.195.180.0/22
                          IP: 179.108.248.0/21
                          IP: 191.243.16.0/20
                          IP: 2804:1638::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:5b:b5:37:6e:6b:90:3c:5f:0c:b5:9e:a0:c9:91:08:5a:d5:ad:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  8 11:36:42 2024 GMT
            Not After : Mar  7 11:41:42 2025 GMT
        Subject: CN=A92360E7914FF4558BDC67FE5BA7B8AB3A03338B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f4:fa:77:1e:32:b7:93:ef:8c:6d:0a:26:a4:
                    8d:0d:94:df:c1:92:26:2e:d1:eb:fa:1a:7f:13:9d:
                    4f:c5:2f:fd:9c:bf:6d:6d:05:12:24:3d:e2:03:80:
                    4c:3f:31:cf:49:37:ad:21:50:f8:1f:99:b1:53:e3:
                    cb:0e:38:fa:58:ae:a5:c8:14:08:7f:a4:79:a4:ae:
                    9c:2a:cd:0c:5e:3a:fd:64:fa:ca:b2:b9:4a:62:f9:
                    cb:8a:ed:fc:6c:10:fd:7a:94:ab:b1:3a:d3:3f:23:
                    95:f5:83:94:3c:78:ce:6c:1d:d3:5b:9f:31:b2:fe:
                    93:3e:15:54:10:7c:b7:4e:9a:ff:f6:8e:cb:b5:74:
                    cb:0e:b0:dd:16:97:e0:e9:6d:82:91:fb:d4:e7:64:
                    40:62:03:3b:6a:4a:82:82:8f:07:18:51:36:13:de:
                    d5:01:39:a0:76:6e:05:2a:04:fa:4d:5b:6b:5d:b7:
                    26:14:e0:79:67:be:ce:d5:5c:17:61:4f:05:c2:b9:
                    95:32:5c:ad:63:90:ac:68:c1:23:a7:5d:2b:65:64:
                    01:07:95:4f:f3:95:e8:1e:d6:8e:90:eb:13:5a:ca:
                    fa:35:13:f8:8e:8f:9d:3d:37:10:78:55:ed:8e:f1:
                    cd:27:c9:39:c0:3e:74:d0:9f:1e:a9:5d:58:ef:ed:
                    34:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:23:60:E7:91:4F:F4:55:8B:DC:67:FE:5B:A7:B8:AB:3A:03:33:8B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/26ApWrcjGWY4Cmya8ruyMBqoNmEaiuV61fjKn1cjusei/1/A92360E7914FF4558BDC67FE5BA7B8AB3A03338B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.124.0/22
                  168.90.224.0/22
                  168.195.180.0/22
                  179.108.248.0/21
                  191.243.16.0/20
                IPv6:
                  2804:1638::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263276

    Signature Algorithm: sha256WithRSAEncryption
         94:7f:3a:a8:32:ff:f9:d3:31:bc:56:2b:3c:78:13:6d:f7:a2:
         5e:57:63:8e:dd:22:56:18:96:62:54:be:25:1a:41:e6:ca:2f:
         6c:c5:4f:61:ee:be:0a:cb:68:3a:4d:67:dd:3b:2b:a0:0f:c9:
         54:d6:06:4b:11:3c:61:2d:e0:57:23:36:31:ab:82:32:e0:bc:
         3c:8b:9d:60:d5:cb:b7:1f:58:6c:05:94:99:46:42:84:ad:8f:
         0c:fd:3b:1b:99:34:b0:ea:a2:ff:89:d4:4d:c0:b8:ae:d5:d4:
         e7:8a:35:b8:21:22:16:34:58:b9:78:49:d4:1a:bd:de:d8:51:
         e7:e4:70:47:f7:23:84:ba:a2:d0:fb:3b:e7:58:54:93:fb:3c:
         26:3c:fc:b8:a4:e2:10:76:09:26:44:2b:39:ea:9f:3b:5a:60:
         29:a6:58:2f:8b:e7:14:e2:0c:5d:9c:2c:7c:17:40:fb:b9:40:
         3e:e2:47:1e:15:3f:3e:23:a5:a9:92:d7:c2:c3:8e:4b:37:ea:
         22:35:98:e5:6f:07:f3:3c:cb:3b:c1:62:ff:8d:ad:d2:e0:c0:
         30:c3:c7:d6:0d:45:ff:3f:d8:c0:28:ef:d0:9a:38:3f:02:4e:
         74:62:54:f6:eb:97:7b:de:9c:16:2c:6a:69:d4:ee:ac:00:1e:
         27:71:44:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:47 2024 by rpki-client on console-ams.rpki-client.org