Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CBE0558E5B593300A63F71D0FF0F7F19660FD146.cer
File:                     CBE0558E5B593300A63F71D0FF0F7F19660FD146.cer (raw, json)
Hash identifier:          Z2EFDBaxMyixBcuaVk26tGALiZjKivibp3c6GhRzFiU=
Subject key identifier:   CB:E0:55:8E:5B:59:33:00:A6:3F:71:D0:FF:0F:7F:19:66:0F:D1:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6CAE0555598D0C7C285657C8BFA7FDBB0DA2488F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/0/CBE0558E5B593300A63F71D0FF0F7F19660FD146.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 08 Nov 2023 01:29:22 +0000
Certificate not after:    Wed 06 Nov 2024 01:34:22 +0000
Subordinate resources:    AS: 264963
                          IP: 170.0.68.0/22
                          IP: 2804:3098::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ae:05:55:59:8d:0c:7c:28:56:57:c8:bf:a7:fd:bb:0d:a2:48:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov  8 01:29:22 2023 GMT
            Not After : Nov  6 01:34:22 2024 GMT
        Subject: CN=CBE0558E5B593300A63F71D0FF0F7F19660FD146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0b:f7:c4:31:13:a3:e0:a3:53:b1:b0:49:6a:
                    75:db:4c:df:d4:d0:04:d0:e8:6e:42:12:5b:a3:3e:
                    e0:b9:7f:80:31:f7:48:01:d9:f4:ff:6b:f1:d9:70:
                    7c:88:08:23:06:f1:f3:ea:73:42:24:4d:31:ff:e0:
                    54:af:4f:06:64:b5:78:0c:a7:e4:f1:19:82:f9:72:
                    04:cf:b3:26:e0:e9:7e:7e:c0:68:6b:94:aa:55:12:
                    0d:b7:92:ea:ae:bf:42:ae:b3:dd:6b:5f:b4:53:44:
                    c5:c9:78:23:24:d2:85:57:c3:9e:ea:5c:07:dd:23:
                    cb:79:c6:50:14:ac:6a:d4:46:ba:e3:ab:6c:d6:c0:
                    ce:b3:e4:9a:b8:fa:5b:b9:22:ef:72:e9:06:38:65:
                    a5:5b:00:29:84:6d:80:67:74:34:88:2d:18:0e:05:
                    94:37:70:72:0c:07:5c:6b:c7:3f:76:f0:59:48:6e:
                    e0:39:2f:38:fd:1c:6f:91:54:8d:a3:0d:e0:b2:2b:
                    bb:3d:11:88:e1:16:39:64:82:25:6c:80:52:a5:09:
                    e6:01:52:04:57:f6:06:89:36:1f:27:6e:06:0d:e8:
                    89:e6:be:91:3e:9e:1b:1d:59:f3:e0:40:9a:17:b6:
                    9a:c4:8a:72:bf:38:39:4d:56:8c:f5:f1:7b:51:63:
                    f6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CB:E0:55:8E:5B:59:33:00:A6:3F:71:D0:FF:0F:7F:19:66:0F:D1:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HTyh3GZCFbbAYpNH1kXoHxxitJaWYWR4P3Pog2N5BrRH/0/CBE0558E5B593300A63F71D0FF0F7F19660FD146.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.68.0/22
                IPv6:
                  2804:3098::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264963

    Signature Algorithm: sha256WithRSAEncryption
         82:05:bd:12:73:99:dd:25:78:c5:81:06:78:17:50:2b:5e:0b:
         f3:6d:9a:1c:ca:5e:0d:de:00:0f:1e:7e:0f:03:a5:39:91:14:
         e8:e0:52:0f:81:7a:bc:61:72:5f:a4:1d:0f:dd:38:63:bd:cb:
         88:e9:30:68:7d:7c:59:a5:7f:e5:12:5d:fa:54:9e:65:52:a5:
         a3:cd:6c:75:7a:f1:a2:90:57:c2:cc:46:17:a5:72:c7:a8:b7:
         18:93:22:ac:b6:65:eb:7e:93:bd:7f:2b:08:0f:22:51:05:da:
         84:c4:a4:ad:07:8b:6d:e2:62:8a:9c:bb:20:76:42:07:9c:a2:
         f3:0b:c4:e2:bb:96:93:fe:b6:30:13:b8:83:96:c7:c8:5a:f7:
         82:df:2f:ec:6c:88:ab:5c:0b:e6:f7:cc:28:85:94:ec:f2:44:
         b3:60:14:c7:82:7e:7a:9d:39:6d:11:8c:49:9f:7d:12:f1:98:
         b3:1b:a4:1a:e7:06:5d:ea:09:45:84:89:f0:dd:89:a2:93:31:
         0c:81:bf:cd:10:c6:c2:0d:c4:6d:81:9c:b7:6e:35:54:24:e7:
         26:d9:14:2e:0a:00:c9:9b:a1:15:e9:01:e2:ab:5f:5d:db:52:
         d1:ed:c3:41:e6:86:8b:c0:39:bf:4a:84:9b:1a:71:84:d2:ac:
         1e:46:ab:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:15 2024 by rpki-client on console-ams.rpki-client.org