Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D543B4EC77A49985F4D5C92C06195CDAE41CDD49.cer
File:                     D543B4EC77A49985F4D5C92C06195CDAE41CDD49.cer (raw, json)
Hash identifier:          +KgobACQc6aLPS6NYSdWLOqj/Xw2dVckKfJ8tpkuoHs=
Subject key identifier:   D5:43:B4:EC:77:A4:99:85:F4:D5:C9:2C:06:19:5C:DA:E4:1C:DD:49
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1AE824763EDC8E1F5E04A0774BEF2BB93DEE94EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/D543B4EC77A49985F4D5C92C06195CDAE41CDD49.mft
caRepository:             rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2024 20:29:12 +0000
Certificate not after:    Tue 14 Jan 2025 20:34:12 +0000
Subordinate resources:    AS: 270892
                          IP: 200.115.64.0/22
                          IP: 2804:730c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e8:24:76:3e:dc:8e:1f:5e:04:a0:77:4b:ef:2b:b9:3d:ee:94:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 16 20:29:12 2024 GMT
            Not After : Jan 14 20:34:12 2025 GMT
        Subject: CN=D543B4EC77A49985F4D5C92C06195CDAE41CDD49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:59:58:6b:9a:58:cf:66:ab:35:bc:9d:dc:
                    0b:d3:b5:e4:0c:02:cc:f1:9b:fc:ad:ec:36:b7:b9:
                    c0:b9:42:72:b6:d0:fb:c7:5f:d0:c5:07:95:84:06:
                    e7:87:cf:8d:3f:fa:fb:c7:2e:00:f3:64:a8:b3:36:
                    67:37:74:26:e8:d7:d7:74:c5:da:82:45:1f:26:36:
                    c6:04:72:40:64:71:dc:5a:de:47:e8:97:3e:ab:e4:
                    cd:e1:46:8a:a2:41:31:0a:70:e1:62:8e:d3:35:65:
                    00:07:36:35:b1:aa:a1:7a:c7:d6:e9:3d:87:48:1b:
                    6f:5e:27:1d:1b:ba:30:94:de:dc:dd:7c:49:bb:8a:
                    02:40:1c:f3:63:1c:54:e9:08:d0:40:23:f6:e7:e8:
                    f7:7a:b4:8a:bb:7f:40:c5:a3:b2:b1:4c:28:5d:ff:
                    2a:57:19:f0:84:0f:a7:4a:22:b5:e2:ab:cd:a5:95:
                    57:47:2b:23:99:60:73:63:fc:0d:0f:e5:82:c9:42:
                    d0:26:ad:16:72:5e:88:b3:db:b0:bf:03:4f:20:19:
                    a7:10:4d:87:bf:f0:fc:eb:c9:a0:53:3e:90:3b:90:
                    60:02:b4:1e:4a:90:6d:a1:c2:cd:17:45:7e:c4:93:
                    67:e4:e3:61:ea:e5:29:ff:80:f9:71:fe:0e:e8:26:
                    72:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:43:B4:EC:77:A4:99:85:F4:D5:C9:2C:06:19:5C:DA:E4:1C:DD:49
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/zmifjf37mnPqsJzfc7ZebzZCPA7GXAK7YLS6XGj7aCE/0/D543B4EC77A49985F4D5C92C06195CDAE41CDD49.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.64.0/22
                IPv6:
                  2804:730c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270892

    Signature Algorithm: sha256WithRSAEncryption
         6e:bf:78:40:c2:d4:00:cc:8c:c8:a2:d8:df:74:ce:96:f3:61:
         eb:e6:2e:ad:03:ec:84:51:3c:55:71:fb:80:93:f3:35:77:ad:
         80:6c:b5:43:85:f0:d5:d1:14:3e:f0:9d:91:4e:67:c6:49:3c:
         7f:c5:cb:3c:c8:59:65:01:4d:2a:d1:01:fb:ee:1e:41:b3:70:
         fe:d3:85:4d:59:cc:5e:ae:94:43:c0:a5:0f:12:86:eb:63:fb:
         1b:19:b6:f7:06:3d:33:37:bb:7d:b3:fc:c1:76:18:cb:d0:f1:
         e9:83:ff:c8:56:c4:83:fc:6f:b9:63:89:1d:0e:7e:76:ac:6a:
         23:f9:de:5e:88:34:f9:8b:a2:23:8d:08:95:7c:8e:1c:16:dc:
         82:33:22:b3:57:fd:37:97:f2:7d:83:e5:1d:87:c0:da:00:89:
         75:bf:eb:02:a2:a8:7b:77:86:4c:d1:e3:81:6f:9b:34:5e:34:
         f3:34:26:ca:c5:a0:e9:e0:dc:0a:5b:ae:db:8a:c9:ca:42:c0:
         41:3f:da:f4:13:5e:fe:b5:16:90:bb:8a:04:5e:23:15:42:14:
         2b:50:51:70:ab:03:d0:6d:e0:a5:cb:9e:1f:e8:74:a8:26:68:
         3e:12:3f:e7:ba:bc:80:98:7a:0b:bc:1f:bf:fd:16:8d:4c:68:
         e8:b1:55:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:34 2024 by rpki-client on console-fra.rpki-client.org