Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/C82DE841AAD8FB0915EA593DD3965B4E66B83813.cer
File:                     C82DE841AAD8FB0915EA593DD3965B4E66B83813.cer (raw, json)
Hash identifier:          g+zdgHwx03U7/J9pHh4pIJwwSVD7LHx+lMdSCZRAOho=
Subject key identifier:   C8:2D:E8:41:AA:D8:FB:09:15:EA:59:3D:D3:96:5B:4E:66:B8:38:13
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       39E5E7234C7D5682CCB11E8B4706CB5AA59F909D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/C82DE841AAD8FB0915EA593DD3965B4E66B83813.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 18 Jan 2024 21:15:11 +0000
Certificate not after:    Thu 16 Jan 2025 21:20:11 +0000
Subordinate resources:    AS: 271280
                          IP: 190.12.152.0/22
                          IP: 2804:7904::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:e5:e7:23:4c:7d:56:82:cc:b1:1e:8b:47:06:cb:5a:a5:9f:90:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 21:15:11 2024 GMT
            Not After : Jan 16 21:20:11 2025 GMT
        Subject: CN=C82DE841AAD8FB0915EA593DD3965B4E66B83813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:74:9a:5b:4f:27:fd:a4:37:f8:a5:65:a4:0b:
                    97:2b:69:a1:a3:48:eb:00:0a:6a:dc:73:50:71:fb:
                    90:16:7f:b1:e6:9f:dd:f3:03:3a:ac:85:2a:dc:d9:
                    2b:29:65:4e:89:d0:de:7c:32:df:1a:5e:37:18:9f:
                    ea:22:52:6c:f4:5d:0b:bf:bb:16:87:84:56:e3:2b:
                    ce:fd:ce:c2:6e:a1:1a:cb:2c:cb:3a:12:42:7d:a7:
                    51:fc:28:1e:e6:b5:ca:95:45:5f:4b:96:b0:9f:0b:
                    9c:80:6c:6b:53:96:e7:29:8c:34:19:87:6f:b8:d2:
                    84:fc:d0:af:5d:37:d6:0d:d6:20:18:3d:7f:24:7d:
                    15:34:75:61:dd:e8:9c:f6:e2:af:18:e1:97:d1:ac:
                    1a:0d:10:1d:48:47:92:64:a0:7e:a8:f4:dc:75:2c:
                    ff:01:da:af:40:f7:56:fc:93:b7:5e:f0:c2:ce:27:
                    33:6d:03:49:49:e5:b0:6b:e5:64:c2:36:19:72:2b:
                    70:86:5e:d0:9b:83:88:cb:61:4e:f3:87:e9:e6:46:
                    ff:2a:7e:dc:86:f0:61:a6:bb:48:a4:c1:93:a8:fc:
                    6a:1e:fb:ad:34:e2:68:f5:11:7b:f8:1b:7b:49:7b:
                    3c:f6:0a:cb:b7:ef:86:e9:17:ea:0d:43:fa:c3:8b:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                C8:2D:E8:41:AA:D8:FB:09:15:EA:59:3D:D3:96:5B:4E:66:B8:38:13
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HG8kx81PYUoRNaQquiF2m6y9xjwuByVxeNriJ99shw3K/0/C82DE841AAD8FB0915EA593DD3965B4E66B83813.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.152.0/22
                IPv6:
                  2804:7904::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271280

    Signature Algorithm: sha256WithRSAEncryption
         0e:f2:4f:ab:60:5a:3d:6f:2d:41:6a:9c:4f:e8:7f:8b:87:b6:
         02:23:35:61:d7:cd:5f:82:e1:d2:8d:98:f7:8b:f7:98:27:c4:
         d3:8e:d7:9e:3b:03:b7:52:eb:29:03:bf:65:53:6e:b6:69:20:
         58:90:23:21:57:c1:dc:c9:c5:15:44:b1:85:57:50:0c:9b:fb:
         93:60:27:b3:01:b6:1f:60:c4:0a:b1:42:2e:e3:7b:10:b1:03:
         7b:be:0d:3e:bd:86:70:11:1d:52:e2:f7:a0:d3:78:b7:43:58:
         df:1f:17:ce:66:61:d3:f1:c2:ab:62:20:31:57:8f:42:a9:ec:
         fe:09:15:6e:c2:39:5c:d2:5a:0a:3c:18:15:c6:98:ef:71:fb:
         23:be:17:38:e2:88:07:5b:71:94:86:e0:b8:2e:f3:31:29:4c:
         44:8c:1a:49:a1:0a:94:c9:64:53:62:47:70:fd:12:57:ba:0a:
         65:ce:01:2e:6b:6d:3d:85:75:6a:b8:aa:19:c3:3b:9a:98:b5:
         57:30:92:c2:e6:df:61:20:d2:e1:a1:e3:a2:45:86:92:1a:0d:
         2d:39:60:81:3b:f6:9e:2a:bb:4a:4b:07:1b:0d:73:ef:ee:61:
         67:1c:a1:49:57:8c:41:ad:26:b0:7e:c8:32:f4:17:5b:f9:ae:
         e8:ad:a6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org