Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
File:                     D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer (raw, json)
Hash identifier:          sag3Xx1n38OW44d9sg3G3Nbr30XyJdG2zqt1X36DJUI=
Subject key identifier:   D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       413C7336F217A0A88DF3873BEB2EB02B8E469353
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 18:20:16 +0000
Certificate not after:    Thu 30 Jan 2025 18:25:16 +0000
Subordinate resources:    AS: 265181
                          IP: 167.249.132.0/22
                          IP: 170.233.36.0/22
                          IP: 2804:2bdc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:3c:73:36:f2:17:a0:a8:8d:f3:87:3b:eb:2e:b0:2b:8e:46:93:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  1 18:20:16 2024 GMT
            Not After : Jan 30 18:25:16 2025 GMT
        Subject: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:2d:22:d8:5e:b4:34:c3:56:ec:cd:c9:30:
                    7d:79:7f:94:d4:c0:ff:26:da:f2:90:36:66:c6:6b:
                    a5:85:5a:b7:5b:59:30:95:85:45:c9:79:56:8d:34:
                    cd:07:e6:2a:c3:0b:a1:cc:36:94:7d:c4:66:03:61:
                    b7:1c:c7:99:cb:ee:a4:3f:4d:c7:7f:14:28:b0:5b:
                    06:db:34:8b:97:75:19:20:97:1d:f7:54:c3:6f:d1:
                    6d:2a:1b:a8:6c:b6:a5:9a:e6:a6:6b:a1:c9:cc:2e:
                    1b:27:20:58:43:bb:4f:07:31:9d:b8:d8:d8:c6:a8:
                    f7:f3:31:4e:8a:ca:bc:ed:27:b5:c5:bc:01:d6:11:
                    8d:f6:f1:42:ae:78:79:06:c3:34:4c:ea:59:50:d7:
                    77:ef:a6:1f:a2:08:2a:35:50:5e:18:43:56:46:b4:
                    ee:95:d7:d7:80:05:37:1f:0d:22:87:88:31:be:67:
                    a5:f2:1a:ed:7b:3f:42:e7:1d:3e:d4:ad:53:13:e8:
                    57:b0:75:a3:0f:fe:a8:26:0a:57:19:44:fb:d7:80:
                    44:4f:a2:f2:41:62:ff:bb:3f:de:7b:c6:f5:09:10:
                    0f:e6:17:25:5e:89:c1:20:ce:ac:25:85:e9:43:b8:
                    ec:ca:fb:ea:ac:88:53:ac:82:d8:d5:14:5f:6b:40:
                    b6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.132.0/22
                  170.233.36.0/22
                IPv6:
                  2804:2bdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265181

    Signature Algorithm: sha256WithRSAEncryption
         43:01:fa:5f:71:42:de:43:12:78:bb:07:da:fa:bc:aa:29:88:
         b5:b4:20:06:dc:2d:d4:af:34:ef:c8:fd:c0:c6:18:53:e6:f2:
         c5:d0:da:28:e5:8d:2b:93:85:13:42:de:8c:72:a2:5e:88:b2:
         ac:7e:7c:b5:f0:ac:2f:23:a3:7f:7a:c0:dc:12:13:c3:96:09:
         8d:22:73:bc:a0:e1:06:ea:a7:ec:3b:c9:d5:f8:20:51:86:52:
         c2:74:e5:66:1c:f9:f6:2e:4f:83:13:48:9c:28:2b:6c:1e:49:
         a1:5e:3a:fe:87:2a:0d:3d:94:f8:24:42:16:6d:71:df:81:fc:
         53:af:50:6f:3f:28:93:10:29:20:2b:c3:5b:73:18:b4:20:cc:
         8d:6a:8a:93:4f:a9:de:d2:42:04:9f:1a:62:95:0e:ae:eb:97:
         d0:95:9c:ab:84:35:f2:1f:6a:a3:0a:fa:ef:38:ae:92:59:fd:
         62:04:6c:8f:29:0d:6a:69:3e:14:b4:c1:49:08:53:e7:1f:23:
         a1:13:2f:c8:ba:26:63:e0:f6:28:cd:47:fc:3d:f3:32:09:fa:
         2c:45:47:b8:92:42:0c:82:26:dc:db:f1:8f:0c:44:57:26:13:
         6a:a2:3f:82:02:06:08:21:f8:15:7f:fd:e1:b8:9f:45:a5:09:
         e3:e6:4d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:21 2024 by rpki-client on console-fra.rpki-client.org