Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.cer
File:                     D596B96A1DCB205F276BFCEF3F65B233325D0788.cer (raw, json)
Hash identifier:          U00+L0TwyzdNlWNYQqBYJs8bVedaubX4MQFTAMPHMC0=
Subject key identifier:   D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4D3FCE4DEA255EB4BFA7F322527387EDB3663F73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 19:01:09 +0000
Certificate not after:    Mon 03 Mar 2025 19:06:09 +0000
Subordinate resources:    AS: 264524
                          IP: 138.0.0.0/22
                          IP: 170.247.36.0/22
                          IP: 2804:20f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3f:ce:4d:ea:25:5e:b4:bf:a7:f3:22:52:73:87:ed:b3:66:3f:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  4 19:01:09 2024 GMT
            Not After : Mar  3 19:06:09 2025 GMT
        Subject: CN=D596B96A1DCB205F276BFCEF3F65B233325D0788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:71:1f:e8:aa:4b:fe:fa:3b:dc:83:04:e8:
                    ae:16:98:83:1e:71:1a:1e:7f:b3:f3:d0:da:33:5d:
                    21:e9:95:e2:d6:b9:be:f2:ce:5c:d4:d2:12:b1:b1:
                    19:e8:9f:0b:e9:12:40:a0:a6:c2:c5:07:8f:20:fb:
                    56:3b:3b:0b:6d:a2:c2:b4:d9:2d:79:95:60:e2:fa:
                    57:48:2b:88:e1:09:68:05:86:c7:16:8f:6d:27:4e:
                    0f:1d:4c:c3:d3:72:10:24:dc:b8:fd:73:f5:fe:6c:
                    30:09:79:62:31:c5:82:07:8f:89:11:1d:de:68:e5:
                    0e:7b:f6:d7:24:2e:fa:8b:6c:f4:44:d2:11:9b:08:
                    e1:7a:91:79:c7:ba:2b:a7:9d:fd:18:09:c6:bb:73:
                    f7:5a:55:e9:94:fa:80:03:e4:db:cf:b5:86:5c:e3:
                    e3:55:c3:5e:18:20:d5:15:e6:3d:6f:46:92:fc:f8:
                    b4:f1:ef:8a:fa:02:af:a3:d2:cb:a2:2e:c9:0c:ce:
                    f8:de:0f:fe:d1:e1:4a:7a:3d:6a:37:c0:23:5c:df:
                    08:4b:f3:22:03:eb:c7:61:d2:9a:07:4f:23:03:05:
                    10:aa:99:84:60:9f:73:23:df:c4:9c:cc:f0:a7:5e:
                    97:0b:67:d0:06:c7:69:98:25:4c:43:f3:bf:b9:1f:
                    ab:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D5:96:B9:6A:1D:CB:20:5F:27:6B:FC:EF:3F:65:B2:33:32:5D:07:88
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GADfChpdaDt6nEy4NrLryiMegDBDnJWGyd98tpVSLhL8/0/D596B96A1DCB205F276BFCEF3F65B233325D0788.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.0.0/22
                  170.247.36.0/22
                IPv6:
                  2804:20f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264524

    Signature Algorithm: sha256WithRSAEncryption
         16:71:31:d5:92:86:58:d4:55:26:6b:6b:a5:6f:ba:e0:3e:68:
         d0:d8:88:e9:0b:ec:59:0e:6d:c9:0c:f5:16:64:26:63:19:49:
         a9:ec:ac:2f:d3:6b:98:16:1c:2b:10:80:f3:73:83:0e:70:c0:
         b9:38:c9:90:58:38:38:f4:b3:5e:de:cf:15:24:fa:f6:2d:39:
         85:1e:92:2d:8e:43:92:d2:9c:36:dc:6a:a0:6d:27:16:70:90:
         b5:11:8a:cb:57:59:da:13:be:31:81:2e:67:98:60:ed:62:b9:
         e3:71:fe:cd:5b:4f:68:dd:b0:20:c7:ae:16:f5:7a:fb:47:ca:
         c2:a1:60:08:55:ac:a0:11:4c:dc:77:26:51:ed:b5:78:1d:60:
         5a:a6:fa:70:3b:75:e5:8b:0f:04:4f:35:3b:2b:c0:9d:83:b7:
         6c:81:62:36:05:6d:83:b7:2c:18:5a:0a:6f:4b:13:a6:55:61:
         7e:cb:8a:ec:5e:0f:df:6d:7c:93:73:a2:aa:16:1a:95:e4:a4:
         57:b7:2f:f9:e5:34:1a:bf:b4:8e:f0:d1:c7:c6:f4:9c:91:fa:
         d8:85:97:01:9f:4c:8f:72:87:26:f8:9f:a3:6f:7c:45:08:44:
         d9:c7:fe:60:cc:00:52:8c:a0:4a:94:58:08:51:ab:9e:d6:ab:
         e7:97:90:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org