Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/DAE2341ECECC35E3C1ED956DC635B6B853DE2C21.cer
File:                     DAE2341ECECC35E3C1ED956DC635B6B853DE2C21.cer (raw, json)
Hash identifier:          Pl/MUxuDjbKN36OTX5rxXxiyWByOpX7vMS4LHC8yut0=
Subject key identifier:   DA:E2:34:1E:CE:CC:35:E3:C1:ED:95:6D:C6:35:B6:B8:53:DE:2C:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3150E26596C620161E206ECBA6C3F21F784F3428
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/1/DAE2341ECECC35E3C1ED956DC635B6B853DE2C21.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 14:15:14 +0000
Certificate not after:    Tue 25 Feb 2025 14:20:14 +0000
Subordinate resources:    AS: 265016
                          IP: 170.84.164.0/22
                          IP: 2804:3174::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:50:e2:65:96:c6:20:16:1e:20:6e:cb:a6:c3:f2:1f:78:4f:34:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 27 14:15:14 2024 GMT
            Not After : Feb 25 14:20:14 2025 GMT
        Subject: CN=DAE2341ECECC35E3C1ED956DC635B6B853DE2C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ab:8b:c9:f1:f9:0a:9f:f7:04:48:a2:b8:8d:
                    5c:f6:78:90:85:d2:30:23:f7:32:af:c8:df:74:da:
                    97:2a:a6:54:9b:e3:89:cd:c4:f3:99:18:65:af:c6:
                    de:5a:68:78:c9:28:37:a5:a2:23:46:35:bd:c7:e7:
                    2e:38:73:78:b1:fe:e8:fa:c7:7b:72:98:fd:13:4e:
                    87:49:9c:08:1a:84:21:67:71:c4:c7:e7:48:fd:87:
                    9e:ce:48:4e:0b:8c:51:65:67:06:ae:85:3e:96:d0:
                    00:b7:77:67:93:8f:68:c4:7e:1b:dc:08:37:e3:22:
                    f4:42:cc:69:a9:09:ee:51:c7:de:9b:f3:f5:83:5e:
                    10:0c:58:e8:46:2a:b8:7a:ad:1a:f7:0d:e4:4d:1b:
                    63:0a:02:51:ae:6d:80:22:f6:f9:40:a0:9b:b9:e8:
                    f0:52:67:c9:4f:60:2b:63:3d:a9:4d:fa:55:14:94:
                    f7:06:30:48:99:56:95:13:e6:7e:f5:91:39:a8:5f:
                    73:b7:77:14:af:c5:b8:8e:32:9d:b3:0b:b8:51:ee:
                    2d:52:91:f3:91:f9:be:02:8d:7f:26:50:46:d0:19:
                    e0:16:0a:2c:d4:54:08:18:4b:4b:4a:33:dd:59:b6:
                    a8:32:4d:af:c5:bc:93:16:17:dc:09:34:84:45:fb:
                    62:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                DA:E2:34:1E:CE:CC:35:E3:C1:ED:95:6D:C6:35:B6:B8:53:DE:2C:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HGrcBHeffHMv5Rm8o7F2XJ3dLBtBZ9Jk58Jce1bhfUXd/1/DAE2341ECECC35E3C1ED956DC635B6B853DE2C21.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.164.0/22
                IPv6:
                  2804:3174::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265016

    Signature Algorithm: sha256WithRSAEncryption
         4b:c9:59:61:55:c3:5f:f6:4b:a0:cf:ea:60:80:6d:f2:db:d0:
         f4:1a:e9:73:19:89:bc:6b:a2:d8:ab:06:91:e7:e6:63:ec:75:
         f4:93:5b:85:f2:42:78:43:3c:38:bb:f2:12:0c:22:2c:b2:3b:
         26:ad:3c:b3:1a:ee:1d:3a:1d:cc:4f:bc:55:e8:18:d1:a4:16:
         90:31:29:ea:0d:e3:d3:fa:e0:d9:1a:61:ea:df:42:92:78:00:
         49:56:61:8c:94:47:76:0f:ae:80:30:ca:b2:c3:72:7e:fe:70:
         29:9a:b1:3b:0a:de:9a:1c:ac:b5:19:e4:15:14:f5:8a:69:60:
         08:98:db:0a:6f:b7:5b:a6:54:4d:5e:8c:48:32:6d:1d:eb:d0:
         89:d4:20:f0:a2:c7:c6:e9:d6:d6:80:0b:cd:62:f3:17:a6:f9:
         a1:e0:3d:51:fb:2f:c1:cf:14:fa:a8:43:6b:ad:c7:78:0e:6a:
         68:cf:cd:48:25:52:9c:9e:bc:7e:9d:15:55:cc:e0:ed:fd:ab:
         6c:5a:ca:68:1f:32:46:71:aa:8d:ac:b3:3b:b7:dd:58:e8:93:
         eb:79:ed:df:1b:28:c8:3e:51:f5:1c:9c:f3:47:3f:53:d9:27:
         72:e5:bc:c1:0e:e2:f1:0c:25:32:84:43:16:a5:9c:e5:64:23:
         3e:6e:69:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org