Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/A989F27243C24F6E4842DBC2B041DFAE8A4E9A92.cer
File:                     A989F27243C24F6E4842DBC2B041DFAE8A4E9A92.cer (raw, json)
Hash identifier:          PcpLPXfveeqobJ67ZHJKTMFtip2RGgfDdrfvfyd1LaY=
Subject key identifier:   A9:89:F2:72:43:C2:4F:6E:48:42:DB:C2:B0:41:DF:AE:8A:4E:9A:92
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6F22254AED5F970BC83A0E20C10C91E66CBEEA92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0/A989F27243C24F6E4842DBC2B041DFAE8A4E9A92.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 18 Nov 2023 10:39:37 +0000
Certificate not after:    Sat 16 Nov 2024 10:44:37 +0000
Subordinate resources:    AS: 264512
                          IP: 132.255.228.0/22
                          IP: 138.255.200.0/22
                          IP: 2804:20c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:22:25:4a:ed:5f:97:0b:c8:3a:0e:20:c1:0c:91:e6:6c:be:ea:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 18 10:39:37 2023 GMT
            Not After : Nov 16 10:44:37 2024 GMT
        Subject: CN=A989F27243C24F6E4842DBC2B041DFAE8A4E9A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9d:81:2f:7a:78:70:39:60:97:52:73:72:32:
                    09:71:40:9a:f1:00:20:5f:5d:95:66:76:fc:5c:23:
                    0f:d7:20:dc:7e:aa:14:9a:74:2c:82:75:96:30:70:
                    c9:a5:6d:29:f1:40:d8:36:f9:68:44:57:d8:8b:67:
                    54:d0:85:09:5e:80:b0:63:4d:4d:bd:49:97:59:b7:
                    c0:57:9a:64:95:bf:81:c2:d7:2a:9f:60:33:ba:cd:
                    56:07:cf:ea:8b:ad:cd:ff:b8:89:44:f3:8a:68:af:
                    62:04:78:a9:f3:19:8a:b9:77:bd:52:1a:8e:87:35:
                    31:06:96:9c:e8:5a:1d:b3:a1:9b:49:4d:23:89:8c:
                    35:4e:72:a0:9d:eb:38:34:62:4c:a5:5c:4b:ef:bf:
                    de:26:a3:e5:86:4d:33:11:09:38:f6:bb:3d:f4:f6:
                    ff:ad:83:d0:6f:35:3f:0d:5b:5f:06:7e:a3:15:aa:
                    4d:05:52:dc:2f:5c:28:b2:ee:b0:3b:4f:af:c8:93:
                    74:87:fd:b4:cb:6d:da:9c:23:c3:8c:b2:23:61:79:
                    04:49:58:09:48:53:89:8d:78:42:f3:8e:c3:c0:ee:
                    c2:ea:91:ec:96:6c:9d:97:7e:dd:dd:81:d7:d9:39:
                    cf:75:ea:28:a6:f2:c6:78:a1:3a:38:fc:24:26:a8:
                    04:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                A9:89:F2:72:43:C2:4F:6E:48:42:DB:C2:B0:41:DF:AE:8A:4E:9A:92
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EZxRbJcXhBM5okm16T2drSeJnBogofDL41vSdFh9RRWM/0/A989F27243C24F6E4842DBC2B041DFAE8A4E9A92.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.228.0/22
                  138.255.200.0/22
                IPv6:
                  2804:20c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264512

    Signature Algorithm: sha256WithRSAEncryption
         1a:58:de:f9:42:6f:5f:78:1e:8c:b4:eb:9e:44:89:bb:83:2e:
         19:72:76:68:3c:7b:04:0f:02:7c:ca:43:06:80:16:75:3a:40:
         90:0b:cb:8b:fc:ec:d7:9e:c3:32:ad:74:27:ea:c4:51:4a:50:
         92:ce:d9:67:11:dc:92:6d:70:d9:51:2b:72:57:dd:f9:02:58:
         a8:ca:bf:27:c8:5f:52:8e:86:20:27:35:7b:8e:e2:e8:86:f1:
         cc:94:64:10:ce:92:98:3d:fa:1d:64:a3:02:6a:72:4a:07:e5:
         35:f9:f8:56:cc:40:5c:b2:61:32:a5:4e:00:75:a3:87:5c:9b:
         ec:be:51:e3:61:09:f3:c0:fa:53:7a:79:60:cc:01:3f:c1:e0:
         5f:fa:2b:86:a0:8e:95:ea:77:1f:99:8f:b4:6c:5b:18:e6:1a:
         5e:8c:eb:b8:6a:9b:3c:eb:13:5a:73:17:a3:64:1d:04:7d:55:
         18:f3:2d:8c:70:62:9f:91:4d:67:75:5e:a0:39:01:3c:d3:9d:
         73:a5:5c:dc:f4:cf:1c:24:bf:a5:a9:96:4c:e7:2a:04:05:9c:
         9d:c8:e9:bc:30:e4:4c:17:b9:e7:8e:f0:31:87:99:2e:00:c3:
         6f:f6:52:fc:c2:fc:04:04:8d:a5:17:ee:bf:54:50:78:90:fe:
         ba:39:42:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:20 2024 by rpki-client on console-fra.rpki-client.org