Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D031B487E72103F23BC5CC66124308EAD566D33F.cer
File:                     D031B487E72103F23BC5CC66124308EAD566D33F.cer (raw, json)
Hash identifier:          aprbrtXJn2aIGVLD4bbfLUpPo6G2/1n4bNV/Rs6AeHY=
Subject key identifier:   D0:31:B4:87:E7:21:03:F2:3B:C5:CC:66:12:43:08:EA:D5:66:D3:3F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3A65A8E7A1994E627442AD76D351A0B1564CCACD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/1/D031B487E72103F23BC5CC66124308EAD566D33F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/1/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 12:40:39 +0000
Certificate not after:    Tue 21 Jan 2025 12:45:39 +0000
Subordinate resources:    AS: 273679
                          IP: 2801:80:4000::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:65:a8:e7:a1:99:4e:62:74:42:ad:76:d3:51:a0:b1:56:4c:ca:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 12:40:39 2024 GMT
            Not After : Jan 21 12:45:39 2025 GMT
        Subject: CN=D031B487E72103F23BC5CC66124308EAD566D33F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:54:0d:ed:3f:1a:19:5f:18:57:02:6a:69:6c:
                    77:17:58:7f:60:8d:84:01:59:ae:8a:09:cc:8f:3b:
                    a9:9d:79:9f:61:a2:1f:5e:6d:98:ef:25:a3:e3:f1:
                    e9:08:a5:ae:8c:e6:1b:6a:95:03:0c:c6:6b:b3:e6:
                    f2:00:54:1b:d6:c0:b5:6a:79:ff:fa:e7:22:e8:c5:
                    85:13:c9:34:3f:f8:89:b7:f7:34:4f:c1:3c:3f:71:
                    ad:96:e2:16:13:39:e2:71:57:4b:1e:c9:af:03:5b:
                    86:6a:ef:af:62:e1:c3:52:fc:e6:b3:0a:04:fb:84:
                    91:50:f9:03:98:cb:69:7f:ce:9b:ea:7d:62:f3:c6:
                    08:c2:ca:fd:b7:08:b9:7b:f1:b9:80:96:0c:ef:fa:
                    e3:34:1a:c7:5e:29:f1:ea:45:b8:31:4f:4e:c1:cd:
                    13:a9:35:62:93:bb:98:1b:f7:a5:e0:65:07:b3:7c:
                    b9:a3:02:5d:06:9c:b7:82:01:f6:47:35:db:a7:51:
                    a8:1e:f4:ee:e8:67:92:eb:a1:c0:4b:1b:c6:a9:f4:
                    49:e2:72:1f:a5:48:62:bb:ce:7a:5d:b8:ed:1f:fa:
                    25:c4:c2:cd:65:7a:af:ed:38:17:03:da:ca:97:ce:
                    fd:9f:f8:80:ea:f6:08:a7:ae:e2:50:db:a9:66:ab:
                    f4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D0:31:B4:87:E7:21:03:F2:3B:C5:CC:66:12:43:08:EA:D5:66:D3:3F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/1/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BpxU1kH7WRpuGoGGnaH7fUjM3JocaxrsSr7Ke2AWyPno/1/D031B487E72103F23BC5CC66124308EAD566D33F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:80:4000::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273679

    Signature Algorithm: sha256WithRSAEncryption
         42:69:99:7b:bd:dd:7b:b8:bb:b6:93:8e:57:85:1f:4d:a9:e4:
         c2:1f:c2:c0:b5:9d:80:10:4b:34:cd:cc:30:ad:ea:af:b6:1e:
         2c:58:94:90:35:3e:d9:27:48:09:13:90:15:e7:fb:3b:10:40:
         ad:d5:a4:04:cd:19:d4:2a:bd:3b:48:eb:47:90:5c:f3:dd:0d:
         13:94:69:ff:ed:e2:9e:5a:9f:a2:f9:33:b7:ba:56:45:a9:31:
         44:5f:9f:57:82:a7:e5:6c:4a:4f:22:d6:a0:56:a4:d0:84:a9:
         d4:be:fa:bc:c8:da:7e:e6:3b:da:51:dc:6d:bb:25:ad:ed:0f:
         99:7b:a9:ed:1c:ff:a1:cc:74:6e:78:1c:18:db:3d:b0:57:32:
         50:5c:03:29:38:a8:e2:55:80:68:8c:f5:a8:28:49:14:22:9e:
         da:98:ce:8e:1c:1e:85:78:ac:40:eb:cb:76:f5:a1:f9:32:ad:
         6e:7e:36:6f:36:f9:f0:34:30:e8:09:4f:c8:64:29:6c:4f:94:
         91:87:87:48:7c:b2:6e:8b:81:2b:35:07:69:b2:e6:4d:84:f1:
         29:73:17:45:fc:aa:88:26:19:a7:34:f9:27:81:63:12:f7:9b:
         09:59:e9:da:f4:0e:17:93:92:42:5e:cc:e9:45:91:17:0f:df:
         b2:76:3c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org