Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C108B118ADDDA1AF1790F4DD709AD61290012461.cer
File:                     C108B118ADDDA1AF1790F4DD709AD61290012461.cer (raw, json)
Hash identifier:          NTBHYRlvi7J5whiXVC4iN98yQUsVWGZsOCEE08nD9pk=
Subject key identifier:   C1:08:B1:18:AD:DD:A1:AF:17:90:F4:DD:70:9A:D6:12:90:01:24:61
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7FAE777011D165372BE7EB9F690B75A2A0E79EBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/92WQsWGc8KjEy1tFBFZQRjU6rTLE44c9G17Ddi7sHcmf/0/C108B118ADDDA1AF1790F4DD709AD61290012461.mft
caRepository:             rsync://rpki-repo.registro.br/repo/92WQsWGc8KjEy1tFBFZQRjU6rTLE44c9G17Ddi7sHcmf/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jan 2022 19:01:48 +0000
Certificate not after:    Tue 17 Jan 2023 19:06:48 +0000
Subordinate resources:    AS: 61838
                          IP: 201.148.224.0/22
                          IP: 2804:1a20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:ae:77:70:11:d1:65:37:2b:e7:eb:9f:69:0b:75:a2:a0:e7:9e:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 19:01:48 2022 GMT
            Not After : Jan 17 19:06:48 2023 GMT
        Subject: CN=C108B118ADDDA1AF1790F4DD709AD61290012461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d5:21:50:94:b6:df:8a:fb:34:6d:ae:b7:60:
                    8a:7f:54:9e:d0:85:8f:1e:e0:31:cc:5c:3e:6a:97:
                    c1:32:a5:be:6b:02:d8:9e:50:57:38:f0:fd:68:a8:
                    65:95:a4:d5:24:13:35:c8:c4:63:52:9f:47:43:98:
                    72:a2:ab:9b:c8:35:f1:00:e1:1a:c1:57:e4:bf:02:
                    2d:fe:f2:7a:6a:81:2d:a4:85:29:68:02:57:d6:df:
                    a2:d8:6a:84:2e:65:77:f2:2c:a1:7f:41:ea:79:8e:
                    b7:af:40:76:3a:38:c9:ad:23:68:56:9f:bf:75:7c:
                    73:2b:5c:e9:fd:1d:69:46:c9:9e:4d:db:82:3f:c2:
                    05:37:71:6f:7f:5d:bd:8f:12:c9:3d:50:8c:71:dc:
                    64:d7:df:e6:99:ba:e1:be:92:bc:de:44:2f:ac:20:
                    91:71:a2:d5:bd:93:74:1c:fe:b2:ae:0f:a8:59:8a:
                    cd:03:8c:21:6d:53:8a:87:2d:4b:bd:fc:7b:f4:ae:
                    60:54:80:c8:30:5d:cf:09:d8:77:f7:34:50:7f:81:
                    20:5b:a3:06:0f:bf:5a:68:b4:50:42:e2:e2:5e:69:
                    7b:bc:f5:1e:50:13:bc:dd:a4:33:41:37:12:f8:4c:
                    a8:ec:87:c5:b6:10:75:48:2c:c6:0d:2b:df:e4:61:
                    aa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C1:08:B1:18:AD:DD:A1:AF:17:90:F4:DD:70:9A:D6:12:90:01:24:61
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/92WQsWGc8KjEy1tFBFZQRjU6rTLE44c9G17Ddi7sHcmf/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/92WQsWGc8KjEy1tFBFZQRjU6rTLE44c9G17Ddi7sHcmf/0/C108B118ADDDA1AF1790F4DD709AD61290012461.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.148.224.0/22
                IPv6:
                  2804:1a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61838

    Signature Algorithm: sha256WithRSAEncryption
         7b:b3:6a:4d:4f:83:85:f1:11:e7:1a:ee:b5:b5:c3:c9:e4:55:
         41:f7:3a:f0:40:5a:5d:02:da:c1:3a:0b:cf:f9:96:d5:f2:e5:
         a9:72:65:be:ad:32:43:93:d6:7f:29:71:36:95:9d:5e:78:b9:
         ce:b9:47:57:e9:8c:76:17:d0:e3:76:12:75:b1:31:87:6b:43:
         fd:3a:9a:5b:d1:9e:8d:42:06:04:38:ee:80:31:02:e7:16:96:
         c1:20:db:0d:bd:a7:e8:24:5c:2c:97:ba:1e:05:92:32:7c:f7:
         78:8e:44:dd:25:a6:f1:2e:30:b6:6f:9b:20:36:03:1f:21:be:
         12:5f:98:79:26:be:aa:cc:f9:2e:db:5c:e2:63:92:e9:b6:db:
         ab:24:1d:81:2b:d0:34:df:ca:a3:8f:a3:b5:73:b9:e3:05:de:
         63:45:cf:b8:fd:8a:d9:41:02:5e:e2:b7:c6:64:fc:20:79:d4:
         c7:a0:91:91:c2:45:60:a9:df:26:14:e4:76:08:86:e7:9f:15:
         7d:74:e1:a3:6d:18:9b:b3:8b:4e:31:9c:ae:ab:89:7e:2c:9e:
         a7:05:36:ff:be:10:6a:f9:ea:c1:1f:7d:ec:03:8b:9a:1e:90:
         7f:e3:8f:1b:05:ef:08:74:9c:b1:c1:03:52:3e:26:23:37:4e:
         d7:f2:43:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:32 2024 by rpki-client on console-fra.rpki-client.org