Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CB82F441A2AB9E9D367CB186AB1C39CCFD34599C.cer
File:                     CB82F441A2AB9E9D367CB186AB1C39CCFD34599C.cer (raw, json)
Hash identifier:          AFdURF3/Lq5NkJFKFHwWVpbfGvBu15FgiXYzqbTwajg=
Subject key identifier:   CB:82:F4:41:A2:AB:9E:9D:36:7C:B1:86:AB:1C:39:CC:FD:34:59:9C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5C5356E3941E517E0E2D40AE271C48FA7748C5CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/CB82F441A2AB9E9D367CB186AB1C39CCFD34599C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 25 Jun 2023 14:14:09 +0000
Certificate not after:    Sun 23 Jun 2024 14:19:09 +0000
Subordinate resources:    AS: 267410
                          IP: 45.235.92.0/22
                          IP: 2804:4d10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:53:56:e3:94:1e:51:7e:0e:2d:40:ae:27:1c:48:fa:77:48:c5:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 25 14:14:09 2023 GMT
            Not After : Jun 23 14:19:09 2024 GMT
        Subject: CN=CB82F441A2AB9E9D367CB186AB1C39CCFD34599C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:03:62:8e:4b:39:23:12:0d:76:2f:41:b5:
                    28:01:72:63:48:69:e3:f8:4b:40:d3:b5:95:4a:55:
                    03:a3:1a:6b:ce:71:85:cd:39:76:b5:3a:65:55:ad:
                    d4:60:bf:a8:a7:16:f4:76:7f:a9:e7:19:5e:6a:c5:
                    ea:9e:34:df:bf:ad:d6:44:4d:bc:ad:fc:a6:b7:2f:
                    32:27:a9:35:4f:3b:ea:b0:5f:99:85:83:22:2e:6c:
                    06:b2:20:4f:27:80:c3:94:87:bb:71:c3:74:7e:8d:
                    aa:e1:2a:87:1e:52:9c:8d:88:10:a3:0a:0e:52:64:
                    01:31:db:d8:bd:14:36:ec:21:ed:06:85:d3:c6:69:
                    c0:b0:7f:c9:41:06:01:60:06:33:b3:85:61:ee:3c:
                    fd:d0:3c:be:05:7b:60:93:af:9b:0d:04:f1:0e:56:
                    3d:d9:1e:3e:9b:dd:c3:65:38:ca:40:bd:19:da:04:
                    2e:e2:5d:dd:2a:36:d2:2c:63:32:40:ff:be:22:ac:
                    29:67:4f:9b:48:f0:62:60:ff:b8:8b:e9:d2:a2:fb:
                    31:25:8b:0c:4f:fa:ba:9f:ce:4a:09:9c:2f:03:86:
                    1f:15:aa:7e:62:56:af:84:ad:17:6c:00:2d:22:04:
                    59:78:e9:7d:09:ad:d1:46:b6:9d:5d:c1:e7:5c:3a:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:82:F4:41:A2:AB:9E:9D:36:7C:B1:86:AB:1C:39:CC:FD:34:59:9C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/JB2Ea7HE6fDBLeX8YGJDVmHtx5A5vVeZKcgmdUHsRTSa/0/CB82F441A2AB9E9D367CB186AB1C39CCFD34599C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.92.0/22
                IPv6:
                  2804:4d10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267410

    Signature Algorithm: sha256WithRSAEncryption
         9d:31:e5:25:e2:c8:14:17:a0:7c:d6:d0:35:dc:04:12:1d:42:
         a1:db:30:34:e7:19:76:9d:47:eb:5e:fe:93:e0:96:b9:4f:73:
         58:ff:78:8d:ba:6b:56:16:45:77:e8:7e:84:14:d5:ad:b0:7b:
         5a:5f:dd:33:17:3a:a4:c4:73:c4:a1:fa:67:8a:ef:01:b8:ee:
         98:6e:97:6c:b8:ad:86:99:7f:e3:2d:4c:20:74:dc:3d:a2:8b:
         29:d9:a1:27:6a:fc:12:4d:11:e9:e8:9b:e6:43:b6:e8:0f:5a:
         89:9a:4a:0c:ad:63:53:37:7f:e3:6e:4b:89:c0:d0:56:2f:80:
         1d:f1:77:d3:6c:6f:ca:3e:a7:84:bc:58:ba:3b:f8:d3:1b:68:
         00:29:82:b4:a6:59:62:5b:eb:b4:f8:f3:aa:3b:28:76:ca:d1:
         fe:c0:a9:ca:fb:81:f0:4a:84:5c:5a:fb:e3:c5:01:29:c4:3a:
         2d:eb:91:68:03:99:b7:e1:d1:72:79:30:34:09:f6:6e:64:49:
         27:16:f1:8d:d8:70:5b:28:54:a7:80:34:3c:35:e2:1b:6c:8b:
         6f:a4:1e:09:7d:42:1e:cf:96:59:21:91:98:52:15:ec:e1:aa:
         78:fe:4b:0c:01:0f:3e:82:59:d4:f6:4c:2f:12:97:00:09:c1:
         7e:15:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org