Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CDE7AD619ADE061F54FC38424291FA04B034E709.cer
File:                     CDE7AD619ADE061F54FC38424291FA04B034E709.cer (raw, json)
Hash identifier:          yiKRj4r8u08wnbxg49dpvb6EokNDqaxtYU3ZtMxagLw=
Subject key identifier:   CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2A847280B2AA770AD625ADC007E9082D96833B4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 13:41:47 +0000
Certificate not after:    Thu 13 Feb 2025 13:46:47 +0000
Subordinate resources:    AS: 61633
                          IP: 131.100.148.0/22
                          IP: 2804:1c04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:84:72:80:b2:aa:77:0a:d6:25:ad:c0:07:e9:08:2d:96:83:3b:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 13:41:47 2024 GMT
            Not After : Feb 13 13:46:47 2025 GMT
        Subject: CN=CDE7AD619ADE061F54FC38424291FA04B034E709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b9:0b:51:03:31:47:67:a5:a5:6d:bd:36:11:
                    31:a6:ce:14:fe:d5:18:72:44:49:56:21:68:b6:c9:
                    f6:22:7c:c8:99:9c:b7:70:0f:26:72:1e:ef:fd:1e:
                    1e:ac:6c:3d:ce:ac:ec:20:6c:88:fd:06:ca:c0:a9:
                    20:59:00:88:c0:63:e8:74:9c:18:a9:a2:36:6b:fe:
                    4a:1b:43:c9:36:d9:cb:93:ad:0b:6f:ff:58:f6:be:
                    b1:cf:9c:dd:4e:6e:53:ff:41:8a:74:2f:6f:65:bf:
                    3a:73:c1:78:d6:29:5a:41:ec:fe:61:e4:fc:76:26:
                    44:c2:75:a8:d5:fd:bb:d6:1e:17:ad:2b:c6:91:68:
                    13:6a:2c:58:2b:57:c5:34:5f:15:44:bc:96:76:a6:
                    96:4d:55:09:45:ee:82:92:33:ae:b6:70:0e:ca:f9:
                    be:27:42:03:48:fb:8b:24:26:4d:db:65:86:6e:74:
                    cc:01:3d:ee:8e:c5:80:ad:25:21:be:bc:88:fc:23:
                    d0:e5:c2:1a:dc:22:6a:a1:1f:f4:d0:91:61:a0:e1:
                    c7:44:70:e2:d8:a5:dd:52:f1:36:f5:a3:0f:94:ac:
                    b1:60:2f:50:5a:c4:73:ad:44:2c:d5:48:13:f3:32:
                    0a:07:f9:9c:d4:44:8e:a6:a3:f2:e7:1d:ff:80:92:
                    9e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CD:E7:AD:61:9A:DE:06:1F:54:FC:38:42:42:91:FA:04:B0:34:E7:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Cf9edibhE5Xve59oypBp8JX2KoUqXrp8N8jDqQNJMipS/0/CDE7AD619ADE061F54FC38424291FA04B034E709.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.148.0/22
                IPv6:
                  2804:1c04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61633

    Signature Algorithm: sha256WithRSAEncryption
         3c:11:91:d7:85:f7:4d:75:1f:68:68:a3:6c:c2:ab:b8:aa:bc:
         b5:09:ae:5f:63:51:59:46:bf:c6:9a:74:e9:17:05:54:1a:2c:
         4f:c3:fd:53:82:14:c2:77:b9:12:5b:8d:da:58:70:27:b4:25:
         cc:03:08:c5:4d:84:54:a2:f3:10:20:ec:71:ee:fb:7a:ae:0f:
         e7:6e:4e:5a:35:5d:ba:b6:b3:d7:f2:21:e3:dd:12:b6:df:84:
         bd:42:64:5f:3d:11:d5:6d:55:4e:f0:aa:89:5d:68:b8:0a:d9:
         59:ba:8a:48:01:50:4b:a7:08:20:70:b7:26:79:b5:c4:76:b6:
         6c:a6:20:e0:30:90:03:d7:92:3b:f6:08:27:35:ac:ab:37:18:
         d7:0e:8a:69:d0:c3:5f:46:5b:6b:34:9a:1c:d4:24:43:42:7e:
         ab:00:32:80:3e:91:68:53:70:ac:6a:9b:9c:74:56:b1:88:51:
         c0:4a:75:8a:4f:5a:96:f0:71:78:e3:2d:7f:09:54:a1:3a:67:
         d5:b1:9b:6c:3f:6f:de:10:8e:28:2f:c6:71:42:8b:76:02:fe:
         42:ee:c1:1e:9e:2d:ff:e5:ea:fa:0c:5e:c9:ec:0e:59:96:d9:
         11:4e:50:d2:72:27:c0:8f:b6:a6:aa:bf:83:ea:c3:f7:c8:ef:
         91:45:06:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org