Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324.cer
File:                     C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324.cer (raw, json)
Hash identifier:          8OSnHUfp21zRZBruzmhTlYKCUrQ4TiCJyVF0mt4rb4w=
Subject key identifier:   C0:E4:B8:66:69:A9:22:3F:D6:ED:3F:EC:0E:2D:E5:90:5F:97:C3:24
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       25D5836498449F145498AE6830243689F8BA893A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/91j5J95979s5xU8jP4R7TnpdWCVDGQCGp2LsmRctd3Wm/0/C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324.mft
caRepository:             rsync://rpki-repo.registro.br/repo/91j5J95979s5xU8jP4R7TnpdWCVDGQCGp2LsmRctd3Wm/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Sep 2022 21:02:25 +0000
Certificate not after:    Mon 11 Sep 2023 21:07:25 +0000
Subordinate resources:    AS: 52874
                          IP: 177.129.128.0/21
                          IP: 2804:8e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d5:83:64:98:44:9f:14:54:98:ae:68:30:24:36:89:f8:ba:89:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 12 21:02:25 2022 GMT
            Not After : Sep 11 21:07:25 2023 GMT
        Subject: CN=C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e6:67:41:a7:f8:c8:0c:3a:88:47:07:0b:74:
                    34:da:e0:44:ec:74:93:cc:ff:b4:c5:05:f8:d8:57:
                    2d:1a:60:5a:35:6e:de:31:5a:dc:7d:e1:3b:12:73:
                    35:87:77:9c:7f:b4:d0:4b:8c:d6:7e:46:48:d1:5a:
                    c2:5e:5f:07:31:92:60:44:fa:46:7c:d1:45:0a:5f:
                    68:e6:89:b7:10:c2:6a:e7:0c:8c:d0:49:13:de:a7:
                    6a:ab:07:a0:60:ee:db:47:23:f4:7e:0b:cd:f8:1c:
                    f1:a3:fb:e7:87:3a:ca:95:65:3d:f6:b3:35:26:2d:
                    1c:21:7b:2c:05:f0:01:cb:12:d7:aa:c5:9c:b3:86:
                    10:37:c5:a7:4e:c0:2c:ad:83:0d:5a:f5:41:ac:ff:
                    ea:13:c3:b7:f1:f6:1e:75:67:6c:c0:6e:1d:97:23:
                    8d:16:bb:71:4b:96:e9:8f:51:91:c9:1b:cd:3b:f1:
                    b1:95:ba:d3:ee:f5:2d:44:e9:7e:f1:0a:33:ab:ae:
                    7c:39:be:93:9c:ba:e1:73:b0:b6:b3:14:bb:a5:aa:
                    52:5c:3a:2b:e0:63:2d:6e:87:9e:4b:df:bd:9e:31:
                    fa:5b:38:6a:3a:94:32:c6:be:27:69:2e:0a:2b:25:
                    a9:7d:53:1b:72:8f:16:79:84:23:27:8a:e2:26:7b:
                    ff:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C0:E4:B8:66:69:A9:22:3F:D6:ED:3F:EC:0E:2D:E5:90:5F:97:C3:24
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/91j5J95979s5xU8jP4R7TnpdWCVDGQCGp2LsmRctd3Wm/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/91j5J95979s5xU8jP4R7TnpdWCVDGQCGp2LsmRctd3Wm/0/C0E4B86669A9223FD6ED3FEC0E2DE5905F97C324.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.128.0/21
                IPv6:
                  2804:8e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52874

    Signature Algorithm: sha256WithRSAEncryption
         7b:86:66:1d:b7:53:09:03:cc:7d:fa:bb:95:c3:a0:99:95:dc:
         13:0d:78:c1:1a:d5:b2:3f:56:f1:e6:b1:3a:6b:14:75:24:25:
         fe:3a:2c:0b:3f:1f:16:d9:86:45:e8:c1:3f:ce:85:31:7b:86:
         82:f0:64:cc:4e:57:cc:70:4b:f7:fd:ae:b2:a7:0e:aa:81:5c:
         fb:2d:c0:2f:94:3b:b6:28:06:83:64:81:44:99:18:40:43:7b:
         8f:1d:27:cb:d0:a5:3f:0d:07:ff:b6:ff:bd:32:66:59:f8:d6:
         42:ab:b4:5f:7b:a6:26:00:4e:9d:36:41:b9:6d:f1:59:61:8a:
         c3:2b:0b:a7:b7:98:db:1c:19:56:58:27:e0:2e:d5:12:78:4e:
         7b:56:1e:62:ce:a8:03:44:28:3e:73:2f:b2:db:8a:cb:ff:76:
         54:4f:e4:94:a5:a1:41:39:86:d3:ad:44:b1:a4:0d:97:0c:f7:
         9b:ac:e8:27:a5:96:bc:9d:bf:be:84:c7:e2:69:25:3a:3f:a8:
         fa:b8:3c:05:92:32:1d:48:b5:1e:5c:41:bb:f4:91:fb:f2:ae:
         f9:b5:4c:ab:67:fe:cc:b0:44:e6:e2:cc:0a:24:1e:45:fd:2b:
         f9:7f:f2:1a:25:2c:e5:e8:75:94:21:44:e2:4e:ed:bb:9f:69:
         88:29:92:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org