Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D51A679483A81F432A557B026F36D9650FD61E78.cer
File:                     D51A679483A81F432A557B026F36D9650FD61E78.cer (raw, json)
Hash identifier:          aISXYN7K3Kj6utV9fS4BEoeZNHl3fXuolvl1b30RWq0=
Subject key identifier:   D5:1A:67:94:83:A8:1F:43:2A:55:7B:02:6F:36:D9:65:0F:D6:1E:78
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2FAB2B1F583874E06B24309C64B2865258BBBCF5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/0/D51A679483A81F432A557B026F36D9650FD61E78.mft
caRepository:             rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 28 Jan 2024 00:09:59 +0000
Certificate not after:    Sun 26 Jan 2025 00:14:59 +0000
Subordinate resources:    AS: 265439
                          IP: 168.195.188.0/22
                          IP: 2804:3428::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ab:2b:1f:58:38:74:e0:6b:24:30:9c:64:b2:86:52:58:bb:bc:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 28 00:09:59 2024 GMT
            Not After : Jan 26 00:14:59 2025 GMT
        Subject: CN=D51A679483A81F432A557B026F36D9650FD61E78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ac:40:de:61:e2:8b:08:b1:f4:d6:36:25:6e:
                    c4:82:4f:77:27:b9:0a:a5:b9:d0:70:4a:62:6b:61:
                    99:27:d8:81:e1:9d:14:ff:03:e6:a7:0b:01:e6:45:
                    69:53:26:75:e1:aa:50:09:9c:8e:c9:47:15:9e:c0:
                    1b:44:bb:90:e9:61:b4:05:47:84:d1:43:3a:2e:90:
                    4d:b5:d0:0b:ce:b3:99:ad:86:f5:6f:3a:ee:81:08:
                    9b:2b:4d:ae:04:db:6c:7b:37:26:67:2e:d4:b5:6c:
                    35:e2:cb:63:8c:82:79:17:08:72:36:51:58:83:e4:
                    a5:6b:c6:d4:a0:86:73:4c:3e:b6:e0:71:b5:09:61:
                    f4:32:a0:0e:95:82:55:7a:d2:db:b9:37:75:c5:c0:
                    1c:f2:35:09:6a:34:69:5d:2d:61:15:b9:e8:5a:56:
                    38:e8:98:11:24:2a:eb:0e:78:f8:c8:35:67:a5:81:
                    e3:2c:78:85:be:30:e2:c6:48:b9:3a:c5:eb:63:00:
                    6c:f5:06:af:9e:c2:c8:39:c0:91:b8:43:e9:44:6e:
                    65:63:cf:b9:06:51:d3:ba:6c:88:49:b6:bd:76:66:
                    e6:2a:98:d4:99:24:e9:f6:a1:47:6d:02:82:0f:b3:
                    0b:f9:04:47:73:7f:10:d7:71:0e:7a:74:3a:ea:1e:
                    d8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:1A:67:94:83:A8:1F:43:2A:55:7B:02:6F:36:D9:65:0F:D6:1E:78
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/H3bPnUivH3Ap3T8TEoidSQmXuLUNFUPWLRpFiM6CQCwU/0/D51A679483A81F432A557B026F36D9650FD61E78.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.188.0/22
                IPv6:
                  2804:3428::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265439

    Signature Algorithm: sha256WithRSAEncryption
         17:f4:02:85:67:2b:dd:83:52:8f:ca:dd:06:16:6e:2e:e9:b9:
         f4:66:06:9d:64:69:a6:89:c9:cf:3d:5d:c7:0a:9f:da:ad:8c:
         9d:b7:0e:ee:4f:54:3a:5e:a9:3d:13:5d:9b:33:29:60:66:c6:
         29:cd:59:be:9c:9d:3b:5e:83:1f:65:37:bd:6a:1f:d1:2b:d5:
         80:bb:5b:89:11:67:28:13:e8:41:98:ee:c4:01:17:25:94:3b:
         81:12:12:77:3a:81:fb:a2:20:c6:b2:f0:ee:85:38:3f:54:f1:
         bb:05:3d:7f:29:fa:cb:39:ba:0c:f3:4f:9b:13:ce:31:40:6c:
         a8:47:5a:d7:3f:b8:24:22:68:e8:0f:62:12:ed:83:e5:b1:e6:
         45:28:9b:88:97:ea:98:f7:4a:ce:35:bc:52:67:a1:20:28:66:
         5e:22:b3:3e:c8:24:b4:18:8d:a8:e2:99:fb:b1:06:91:a9:17:
         f8:7f:22:ac:fb:dd:3b:1f:68:1b:b0:2d:23:fe:50:59:ca:cb:
         05:30:2b:fe:c2:17:6a:12:ba:c2:cc:10:88:1f:1d:5e:57:75:
         8e:60:43:04:60:e4:cc:ba:df:e3:25:5b:b9:78:84:e5:66:f7:
         9d:2a:51:54:24:83:d3:fc:18:9a:20:05:8c:c1:ec:17:72:62:
         3b:05:09:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org