Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CD92AB0D0580C464472A09277D6846360CC1C9C4.cer
File:                     CD92AB0D0580C464472A09277D6846360CC1C9C4.cer (raw, json)
Hash identifier:          g3g+9fJlSzlJaI0ALU/58n+hNC8Rw5QFT5Pj59FFzYo=
Subject key identifier:   CD:92:AB:0D:05:80:C4:64:47:2A:09:27:7D:68:46:36:0C:C1:C9:C4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1E9FBE82B60B66A5D83BD3DBAF3C084F00678595
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/CD92AB0D0580C464472A09277D6846360CC1C9C4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 01 Sep 2023 13:19:06 +0000
Certificate not after:    Fri 30 Aug 2024 13:24:06 +0000
Subordinate resources:    AS: 262676
                          IP: 187.73.224.0/20
                          IP: 2804:e80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9f:be:82:b6:0b:66:a5:d8:3b:d3:db:af:3c:08:4f:00:67:85:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  1 13:19:06 2023 GMT
            Not After : Aug 30 13:24:06 2024 GMT
        Subject: CN=CD92AB0D0580C464472A09277D6846360CC1C9C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:ad:c7:0f:5d:9e:56:24:07:17:68:ad:83:
                    88:46:3b:f8:ee:75:7b:4d:be:5f:dd:3d:17:8f:ea:
                    32:d7:c8:12:ee:75:e2:4c:b3:22:5e:f8:34:f1:1b:
                    53:85:a8:9c:21:0f:9c:5e:2d:1f:17:cd:24:5e:f7:
                    a8:02:8b:88:61:d0:7a:ce:d9:ae:1c:7a:33:36:df:
                    7a:ef:ff:9e:e8:48:2c:a9:c0:db:b9:70:9a:d3:ea:
                    7a:a8:1b:1c:8d:07:65:f9:27:12:42:57:03:03:e2:
                    58:36:31:1a:7c:2f:4f:22:cf:aa:14:21:5f:5a:a9:
                    d9:d8:74:f6:e4:f7:15:4b:45:2b:51:93:cf:e2:bc:
                    03:60:9c:b2:48:89:72:83:64:bd:14:9c:05:76:b9:
                    a3:d2:fc:07:1d:67:9d:50:93:b6:97:5b:f3:cd:83:
                    c7:6f:2a:0c:f2:b8:7d:20:22:9d:a9:0d:08:a5:13:
                    a4:7f:d5:cd:23:ae:ac:15:28:b7:6f:ad:fb:14:6f:
                    40:32:db:ac:d9:fc:1d:91:2b:fd:39:47:3b:50:20:
                    67:79:9c:a3:01:ac:62:dc:99:8f:cd:66:08:52:f4:
                    89:94:b7:d8:84:4d:57:e6:ff:2a:89:e0:9f:b3:47:
                    af:9f:d5:bf:9e:e7:45:de:dc:76:61:e4:05:60:24:
                    5b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:92:AB:0D:05:80:C4:64:47:2A:09:27:7D:68:46:36:0C:C1:C9:C4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/1/CD92AB0D0580C464472A09277D6846360CC1C9C4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.224.0/20
                IPv6:
                  2804:e80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262676

    Signature Algorithm: sha256WithRSAEncryption
         95:33:93:86:19:fd:a0:08:c8:b3:51:e7:30:fd:d9:54:54:ed:
         a4:fd:78:f0:10:5e:da:83:9b:ee:f7:17:35:a2:88:65:c2:a2:
         e5:c7:bd:11:c0:e1:82:b5:6c:8c:51:5c:7c:e1:96:f9:95:4b:
         c3:42:5c:ea:a1:ca:b3:87:85:4a:f3:63:b1:40:1e:ce:0e:50:
         10:a2:05:5c:ba:d8:ef:01:31:e2:44:c7:ed:ef:22:63:30:a6:
         9d:88:3a:df:7a:65:59:4f:88:73:a3:35:3f:97:6a:b3:6d:82:
         e0:6e:45:34:a3:4f:ca:80:4d:5b:07:d2:cd:ce:9c:e2:cc:28:
         98:0f:f2:ae:8a:f6:db:fe:aa:8a:a2:4f:88:f8:98:69:12:73:
         4e:1b:cf:c1:70:6b:e3:d4:cc:b1:47:29:95:c8:19:fe:64:68:
         f7:1f:e4:ad:28:a5:99:e1:79:b5:5a:31:ec:42:4a:b5:8d:b5:
         02:ed:bb:92:a7:5a:52:e1:36:94:a2:58:5a:91:d8:d7:90:90:
         5b:53:b0:91:63:88:59:db:49:d3:63:da:a7:2e:71:2b:68:6b:
         5a:93:0b:2e:72:c8:9b:0e:26:37:59:81:09:9d:3d:88:8d:48:
         b8:89:27:a7:9f:b8:63:6c:61:a8:51:4f:7f:bd:5f:7f:1a:80:
         c0:aa:65:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org