Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C0128AFEEAFC57EF19FBC626FAAC420747560569.cer
File:                     C0128AFEEAFC57EF19FBC626FAAC420747560569.cer (raw, json)
Hash identifier:          LOZmriktCzJpgJGHPcY9E+Vl+8NQXBhLcbls29gY9MA=
Subject key identifier:   C0:12:8A:FE:EA:FC:57:EF:19:FB:C6:26:FA:AC:42:07:47:56:05:69
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3F88D7BC598AEA0D5E7D0E6119C4D4CF475E9D04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/C0128AFEEAFC57EF19FBC626FAAC420747560569.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 24 Jan 2024 13:28:54 +0000
Certificate not after:    Wed 22 Jan 2025 13:33:54 +0000
Subordinate resources:    AS: 264577
                          IP: 138.36.116.0/22
                          IP: 2804:21d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:88:d7:bc:59:8a:ea:0d:5e:7d:0e:61:19:c4:d4:cf:47:5e:9d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 24 13:28:54 2024 GMT
            Not After : Jan 22 13:33:54 2025 GMT
        Subject: CN=C0128AFEEAFC57EF19FBC626FAAC420747560569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c4:5c:26:dd:33:1c:d4:68:cd:d3:bf:78:f0:
                    4d:48:fd:8a:e8:08:e8:56:8c:06:69:20:be:6a:44:
                    ee:39:d3:e2:31:ab:9b:65:24:34:43:78:6e:9a:eb:
                    67:48:78:08:1d:3c:a1:69:da:5e:79:a8:5f:ab:55:
                    53:4a:3d:cb:ab:34:4b:7c:2f:15:20:6b:e5:0b:e8:
                    8a:0b:e9:dd:d9:47:00:ee:23:1f:f4:9b:18:dd:eb:
                    42:2e:42:4c:a8:33:1a:c1:e5:aa:14:d1:51:f8:87:
                    b0:aa:22:a0:bb:3c:ae:a3:49:c3:59:15:1d:54:2e:
                    44:7c:b4:b1:88:bb:b3:3d:58:25:f6:eb:82:80:2d:
                    d9:57:ee:53:ba:d6:0b:ce:fb:4c:e5:ec:8d:58:91:
                    00:29:f8:b6:1f:92:80:fb:2b:4e:5e:4f:54:fa:a7:
                    f1:0d:0f:42:62:59:8a:b9:60:59:23:35:9b:c9:3a:
                    5b:80:a8:7a:0d:66:4b:87:55:0e:aa:2e:4c:10:08:
                    96:f5:df:24:45:24:af:b0:69:1e:61:01:cd:51:69:
                    98:14:30:dc:9b:95:c1:d8:cd:c9:1d:f0:7d:a7:6e:
                    dc:fd:73:cc:33:2e:36:c7:dc:f7:cf:f6:52:1c:76:
                    79:8c:d4:82:8d:47:17:83:3a:51:e2:55:08:69:a2:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:12:8A:FE:EA:FC:57:EF:19:FB:C6:26:FA:AC:42:07:47:56:05:69
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3W2cSkQQyqsAfuR6694VZF2EBd7WPhkDMcveD3tdyzfb/0/C0128AFEEAFC57EF19FBC626FAAC420747560569.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.116.0/22
                IPv6:
                  2804:21d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264577

    Signature Algorithm: sha256WithRSAEncryption
         55:c8:53:41:81:aa:a8:b7:84:7c:ca:53:93:fa:30:52:44:00:
         0e:05:7b:2c:e8:66:a2:a7:70:b0:0b:47:d9:75:3b:b9:eb:89:
         09:08:0d:68:b3:c8:52:9e:27:4d:7f:dd:35:62:dc:23:79:29:
         22:7a:fb:00:df:0c:4c:26:af:ed:c5:84:aa:7d:80:d1:b9:2e:
         7c:af:ca:5b:d1:f1:7e:18:bd:63:7f:13:60:01:fb:69:a6:99:
         27:48:34:b5:86:f8:f8:bc:b4:f4:35:07:0a:32:6d:81:19:f2:
         ec:c1:db:5b:63:c0:c4:34:87:22:a9:49:53:ba:f1:3d:0c:fe:
         e5:4f:a1:f5:35:4d:2b:24:f8:4d:46:b9:80:23:33:ed:0d:d1:
         80:cb:0a:4f:a2:b0:c0:9c:e2:4e:c6:db:5a:75:18:88:64:4a:
         a4:a4:e4:49:9a:cb:cc:4d:1a:6a:ec:d1:03:f1:b1:ea:f3:54:
         6e:66:8e:47:e6:64:55:9f:d2:db:80:6f:90:bd:74:28:72:3f:
         63:77:4e:70:5b:52:8b:fd:86:c7:8d:b1:97:3d:ca:b2:f5:c0:
         47:ec:b6:51:67:50:e4:8d:bc:39:8f:2f:71:1a:2a:ad:ef:75:
         c4:02:1e:c7:63:89:fa:dc:3e:9d:f2:a7:d0:d7:25:8d:05:2f:
         ba:95:b3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org