Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/CF966D995E0E059570D4B57016072AFC8B494ED0.cer
File:                     CF966D995E0E059570D4B57016072AFC8B494ED0.cer (raw, json)
Hash identifier:          reLMEzYVBqmlEK+MPP990NZhNS7p8yOag8Qm3DtaSRw=
Subject key identifier:   CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       286C8952B427D7A413181A3039DF773F907AE79B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/CF966D995E0E059570D4B57016072AFC8B494ED0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 07 Mar 2023 21:35:10 +0000
Certificate not after:    Tue 05 Mar 2024 21:40:10 +0000
Subordinate resources:    AS: 262514
                          IP: 170.80.64.0/22
                          IP: 177.55.176.0/20
                          IP: 2804:568::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6c:89:52:b4:27:d7:a4:13:18:1a:30:39:df:77:3f:90:7a:e7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 21:35:10 2023 GMT
            Not After : Mar  5 21:40:10 2024 GMT
        Subject: CN=CF966D995E0E059570D4B57016072AFC8B494ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ad:87:69:6c:f0:3a:cd:64:69:d4:eb:e9:bb:
                    ce:72:27:19:72:75:5e:d8:99:e8:4a:1e:69:72:be:
                    37:9d:b3:3e:de:dc:bf:88:c3:29:7a:05:47:b3:62:
                    2e:67:be:4a:e2:79:c0:33:27:5f:b4:fa:c5:6f:a5:
                    31:0d:ac:fa:a2:98:6e:bb:ef:96:76:a6:c0:79:d0:
                    a7:2d:2a:1c:af:f4:11:63:01:9e:ed:7e:ed:a7:8b:
                    99:4a:86:e4:7e:c0:d5:77:9c:f1:7b:e0:65:6c:88:
                    59:01:36:2c:fd:2e:20:e6:d0:3b:55:40:06:b1:e3:
                    af:5a:1c:43:ac:01:0d:c5:77:64:bd:2a:8e:3c:cc:
                    79:50:1e:8e:d5:32:4b:b7:1f:36:ba:88:6f:44:ac:
                    1e:e2:7f:f4:e7:39:ed:77:40:4d:e5:dc:46:40:f3:
                    fb:24:af:8d:2c:7e:77:ce:ee:d5:3f:66:95:06:85:
                    cd:fa:0e:c2:a5:6e:ce:dd:13:1b:7a:e3:6f:7a:49:
                    97:e4:1d:31:3f:86:9c:55:d2:42:ac:e9:2b:3f:e3:
                    bf:9b:ce:24:55:41:4f:06:e7:6c:73:b0:fc:f0:7e:
                    06:66:2a:9f:d5:89:5a:78:c0:32:9d:e0:e4:03:a7:
                    73:2f:d2:b6:ee:01:1d:f4:f4:40:e0:bf:61:51:f9:
                    18:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                CF:96:6D:99:5E:0E:05:95:70:D4:B5:70:16:07:2A:FC:8B:49:4E:D0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GMTRjFfZHGavUzKXurZU7NqnQpcHHdHoXVCC6n7SDTiB/0/CF966D995E0E059570D4B57016072AFC8B494ED0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.64.0/22
                  177.55.176.0/20
                IPv6:
                  2804:568::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262514

    Signature Algorithm: sha256WithRSAEncryption
         71:9a:60:80:38:45:16:6c:08:a9:e7:0d:9a:4c:34:9b:42:a0:
         95:80:22:b9:c5:99:0c:15:4f:d3:62:87:7c:d8:73:18:d0:ba:
         db:7d:fa:3b:f0:ab:9e:3c:f4:bc:54:af:48:b7:79:6c:68:4b:
         89:40:37:de:d4:0d:73:b4:fe:c2:58:2a:32:47:0a:b7:e3:12:
         1e:49:20:3b:31:cc:6b:8c:83:a7:57:07:b5:e5:93:e5:ba:1f:
         2d:6c:4c:3d:c9:31:ad:81:53:33:32:ee:3d:87:80:e3:8f:0b:
         f7:32:12:41:1a:0d:c7:b3:7d:08:8a:df:b0:21:50:13:70:0c:
         f5:83:69:34:6b:50:9b:ac:cf:e3:a4:d6:8b:04:e2:e7:26:5a:
         aa:19:b9:24:34:d7:38:45:8d:7d:15:26:ab:76:9a:67:ea:de:
         21:94:f9:8d:f7:8c:9d:4b:ff:c9:79:4b:df:67:82:05:b6:87:
         72:c1:a3:15:f0:e8:73:07:b5:b5:36:87:96:ff:b4:ef:e1:4a:
         67:f4:c7:0d:48:21:7c:23:86:ab:79:ca:17:7b:4b:ad:fe:35:
         47:9d:27:4b:53:a7:38:da:df:39:94:b6:56:33:85:d8:3a:aa:
         df:5b:76:82:99:02:52:b6:d5:5f:89:28:74:1c:76:64:42:0f:
         df:eb:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:33 2024 by rpki-client on console-fra.rpki-client.org