Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C422E0B8C0893646916FBC7155048940DBDE3512.cer
File:                     C422E0B8C0893646916FBC7155048940DBDE3512.cer (raw, json)
Hash identifier:          gM3PkqQytT+Wvqy75TnRAPKMpVU1ImR4d60gb+g6URU=
Subject key identifier:   C4:22:E0:B8:C0:89:36:46:91:6F:BC:71:55:04:89:40:DB:DE:35:12
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D2ADDDE8384E2D0465A79FE3FE1D6016060E1B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/C422E0B8C0893646916FBC7155048940DBDE3512.mft
caRepository:             rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 13 Mar 2024 19:56:38 +0000
Certificate not after:    Wed 12 Mar 2025 20:01:38 +0000
Subordinate resources:    AS: 268727
                          IP: 45.171.188.0/23
                          IP: 2804:59d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2a:dd:de:83:84:e2:d0:46:5a:79:fe:3f:e1:d6:01:60:60:e1:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 13 19:56:38 2024 GMT
            Not After : Mar 12 20:01:38 2025 GMT
        Subject: CN=C422E0B8C0893646916FBC7155048940DBDE3512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:14:8e:62:aa:d8:5d:0b:5d:37:fd:c1:f3:
                    91:e6:47:91:81:b3:01:60:a9:21:75:1e:a7:de:e2:
                    9c:80:f0:5a:9a:b1:5d:1f:b4:c8:e6:f8:8e:9f:58:
                    e9:48:15:18:09:60:91:af:0c:76:32:4c:c0:8b:a3:
                    58:41:fb:74:df:41:a6:fe:c1:e6:1d:b4:1c:f4:fa:
                    ee:a5:c0:98:9c:06:f1:24:d5:1b:b7:e4:c3:41:37:
                    08:18:f8:3c:ce:aa:3d:15:97:51:6c:21:c9:59:e5:
                    18:5f:6c:db:50:9b:39:d1:0f:73:8a:9e:04:f8:7b:
                    52:78:55:ba:7d:86:91:4d:38:71:c1:24:de:75:fd:
                    94:3f:dd:b2:bf:fa:f3:9a:47:0a:18:d9:24:7e:5e:
                    b0:eb:59:da:d3:d1:86:4b:88:57:9b:6f:cb:79:5c:
                    47:e9:7a:0a:3e:ea:b8:a4:b2:5c:f0:e8:91:ff:89:
                    ca:2b:b2:28:bd:36:7c:db:be:07:6e:df:ba:5e:31:
                    97:67:02:e9:fb:6b:ef:6c:a7:9d:70:90:9e:6c:20:
                    6e:37:06:ae:88:6a:25:bf:5d:2b:c6:fe:83:87:65:
                    53:6b:c1:35:e5:10:59:78:af:18:a7:ac:d6:e0:6f:
                    cb:78:39:95:e0:13:8e:1e:31:d2:d0:78:ea:6a:03:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:22:E0:B8:C0:89:36:46:91:6F:BC:71:55:04:89:40:DB:DE:35:12
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/kyWpGA2vP9UEDYfVNXwDktBCNDgsTRrJkxzQ5Bjm237/0/C422E0B8C0893646916FBC7155048940DBDE3512.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.188.0/23
                IPv6:
                  2804:59d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268727

    Signature Algorithm: sha256WithRSAEncryption
         28:86:19:0e:94:3e:19:f9:23:c9:12:be:c7:c7:96:e3:25:13:
         ff:32:df:40:ff:8d:eb:ac:22:43:99:f3:a4:0b:c3:83:46:57:
         77:a9:ed:98:8e:99:dc:d5:34:61:c0:9b:98:83:7c:3a:87:64:
         90:ba:86:7c:49:8c:3b:4d:f8:31:f7:70:2a:0b:46:a5:14:c2:
         45:fa:d7:4d:6f:6a:a5:51:24:c5:36:52:44:6e:89:fa:cb:74:
         a8:72:07:3c:25:85:bf:bb:2f:c6:0b:19:3e:ce:03:8a:c5:c0:
         8c:14:46:e0:36:5a:4f:96:d7:b5:fe:fc:6d:bd:f4:1b:81:60:
         f6:c2:a5:30:4c:99:83:fb:d2:0e:f8:16:96:b5:a8:52:1e:f3:
         d5:20:65:26:09:cc:26:3d:62:3d:27:25:ee:1f:7f:59:a2:af:
         0a:15:c3:9f:a5:30:ff:1b:37:02:8d:c4:8f:f2:95:b0:06:28:
         59:c8:bb:00:04:b7:7b:7a:50:aa:c8:92:6f:ab:c6:00:cf:ba:
         fb:59:01:1a:47:dc:ec:1f:11:4b:bd:2d:32:ab:2c:c3:47:3f:
         b4:52:ce:7d:7a:b5:02:3a:10:48:73:63:a9:7a:03:40:6f:0e:
         14:af:32:29:e6:79:54:93:18:c5:a5:7e:76:15:44:f5:c2:25:
         80:83:15:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org