Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C47A0255A3995AAED2A3427AEB59BE137E0EB83C.cer
File:                     C47A0255A3995AAED2A3427AEB59BE137E0EB83C.cer (raw, json)
Hash identifier:          OIZI9xU5t0TlYz8JzqonounqPhtl33p2WRoo0xANoUc=
Subject key identifier:   C4:7A:02:55:A3:99:5A:AE:D2:A3:42:7A:EB:59:BE:13:7E:0E:B8:3C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       01D0CF39C9A3594CC346941339BB3F6AA76286D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/C47A0255A3995AAED2A3427AEB59BE137E0EB83C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 17 Jun 2023 13:24:52 +0000
Certificate not after:    Sat 15 Jun 2024 13:29:52 +0000
Subordinate resources:    AS: 270877
                          IP: 138.185.88.0/22
                          IP: 2804:72d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d0:cf:39:c9:a3:59:4c:c3:46:94:13:39:bb:3f:6a:a7:62:86:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 17 13:24:52 2023 GMT
            Not After : Jun 15 13:29:52 2024 GMT
        Subject: CN=C47A0255A3995AAED2A3427AEB59BE137E0EB83C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:93:10:30:5e:ba:98:e4:dc:09:5d:97:5e:
                    60:67:3f:0c:c3:e9:6f:94:0f:09:80:16:37:69:c6:
                    fa:b1:0b:e6:53:dd:46:73:0e:1a:f4:77:d9:e8:0d:
                    7e:b2:aa:12:84:2a:d3:5e:14:c6:2d:c1:99:8f:d5:
                    07:d9:5d:ac:b9:2d:88:1f:af:92:c7:3a:3a:46:50:
                    a9:eb:c5:dd:b9:06:e5:65:7f:eb:33:d5:71:df:6b:
                    af:47:f7:70:2a:be:4c:07:35:9d:1a:05:0d:13:bb:
                    16:20:d4:ea:ba:07:7f:56:ae:4d:bb:01:08:2b:35:
                    6e:a7:ef:ff:bb:a7:91:ad:9f:cc:25:61:e2:42:16:
                    c0:66:5e:ed:98:82:1d:a9:40:b1:d7:3a:ab:35:9c:
                    53:25:eb:2e:a5:3e:47:64:af:5a:a1:da:af:e7:b5:
                    65:18:f2:50:4e:1e:b1:3d:6b:72:ff:f2:07:86:a9:
                    99:e2:10:57:ca:b3:0d:f9:b8:15:80:a1:68:80:9b:
                    ce:2e:78:3b:79:78:81:00:74:e5:19:f0:7b:84:c2:
                    6f:d5:a8:01:1b:ed:5b:c2:7e:8f:e0:af:ed:31:d0:
                    ed:3f:2b:c6:d5:20:b5:a7:d5:37:cd:2b:50:d4:b6:
                    6f:a6:48:58:e9:2e:9b:87:fb:5a:79:7f:14:4a:4b:
                    92:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C4:7A:02:55:A3:99:5A:AE:D2:A3:42:7A:EB:59:BE:13:7E:0E:B8:3C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/0/C47A0255A3995AAED2A3427AEB59BE137E0EB83C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.88.0/22
                IPv6:
                  2804:72d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270877

    Signature Algorithm: sha256WithRSAEncryption
         10:c3:f2:ac:1b:7f:f1:04:78:7c:ac:87:14:48:4f:db:42:7f:
         58:9c:56:7b:fe:01:1b:32:3d:47:68:be:d3:84:97:c3:a6:b2:
         3e:1f:f0:73:10:84:6a:9d:ff:e9:5a:e9:f8:bf:7c:a1:09:4b:
         ee:cf:ab:c8:a7:2d:35:20:5d:ae:0d:bd:18:ff:5f:78:95:36:
         21:06:b3:81:46:ec:30:2d:67:50:bd:c1:9d:26:0e:a2:de:94:
         a8:b6:2a:c5:45:77:68:cd:8c:53:09:d3:ca:4d:55:88:0b:62:
         8a:df:02:56:83:f3:30:45:17:d4:0c:c4:e1:92:f7:af:5e:c9:
         d1:cd:bf:d2:70:e2:3a:6c:76:af:47:5c:65:c8:71:29:b9:35:
         48:ad:ac:bd:75:6c:ba:15:79:58:01:a8:8c:a6:23:94:c0:27:
         6f:d5:77:5e:88:05:ce:0b:46:da:f2:ef:2b:f3:b8:b8:01:bf:
         30:2c:83:f9:fc:57:f6:b5:21:16:83:59:4a:0a:b5:4f:d2:91:
         81:37:87:96:25:04:b8:27:8c:f6:0d:07:9a:e7:bd:96:d7:b1:
         4f:29:ad:1c:34:84:25:f8:d7:08:fa:cf:a8:ee:29:a9:73:a7:
         82:d9:65:90:44:29:95:2b:43:bc:64:ef:29:b6:19:88:27:09:
         e9:c6:f5:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org