Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer
File:                     E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.cer (raw, json)
Hash identifier:          tvLC9vWSKYmH2mlohKaD5fwHmudgBCHmNcFRKmy08vc=
Subject key identifier:   E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2275A11389324CE7CC9E95AD802D8F0D24677A9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 21:13:53 +0000
Certificate not after:    Thu 06 Mar 2025 21:18:53 +0000
Subordinate resources:    AS: 52913
                          IP: 167.249.4.0/22
                          IP: 170.150.76.0/22
                          IP: 170.246.164.0/22
                          IP: 177.23.168.0/21
                          IP: 179.127.40.0/21
                          IP: 190.109.80.0/22
                          IP: 2804:1088::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:75:a1:13:89:32:4c:e7:cc:9e:95:ad:80:2d:8f:0d:24:67:7a:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar  7 21:13:53 2024 GMT
            Not After : Mar  6 21:18:53 2025 GMT
        Subject: CN=E0626FB8C39A95F9AA766E296D3F64784A5EEA2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:2c:10:80:30:b7:7b:f1:4d:d6:24:2d:3a:
                    cb:df:c6:9e:07:50:7a:18:3a:53:50:37:57:00:90:
                    39:c9:a5:89:01:e2:90:3e:db:2c:7b:0b:eb:af:23:
                    0c:f4:b8:43:23:95:41:56:d9:62:65:4c:6f:f2:70:
                    b1:43:16:8e:2f:bc:4c:48:63:5d:be:33:3c:5f:fd:
                    d2:b1:09:b0:ee:42:95:2c:36:0c:64:75:40:25:44:
                    6d:f7:c8:da:bb:7b:b5:90:37:47:db:9f:07:6b:62:
                    96:00:a4:a2:15:1c:15:f4:8e:11:8e:47:7c:4b:ca:
                    14:04:00:4a:77:a5:f9:f4:aa:e6:cc:e4:db:64:2c:
                    d1:70:79:94:93:46:48:24:28:9f:10:34:13:4b:9f:
                    ab:c9:a1:91:c6:44:e9:3f:47:46:b9:8e:fa:d4:27:
                    98:bb:39:e3:ee:51:e9:85:2d:93:bf:0f:50:99:06:
                    dd:aa:63:1d:0a:e4:30:9a:1f:74:25:bf:db:03:f2:
                    f4:60:fd:ba:39:33:dc:1a:f7:10:07:ea:b6:35:02:
                    63:ad:04:59:20:ab:7d:4c:fd:c9:14:cb:d9:4b:4f:
                    aa:33:41:c7:6c:58:bb:e9:8a:da:b2:c6:af:0f:aa:
                    0c:13:17:19:6c:61:1b:2f:72:37:32:0b:73:25:b0:
                    5b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E0:62:6F:B8:C3:9A:95:F9:AA:76:6E:29:6D:3F:64:78:4A:5E:EA:2B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SVwRaxD3SwZpEtuLdFMLcNzwaC3FBurWUANdW7m4LNr/0/E0626FB8C39A95F9AA766E296D3F64784A5EEA2B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.4.0/22
                  170.150.76.0/22
                  170.246.164.0/22
                  177.23.168.0/21
                  179.127.40.0/21
                  190.109.80.0/22
                IPv6:
                  2804:1088::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52913

    Signature Algorithm: sha256WithRSAEncryption
         0b:1f:8b:27:31:16:ea:ab:95:df:60:af:a6:ea:18:1c:86:97:
         4e:d3:0e:76:b2:3d:78:93:62:3c:c7:68:36:67:a9:47:c5:f9:
         6d:51:14:62:c4:ec:6c:4f:fa:c0:bb:58:7c:cd:97:24:f9:70:
         2d:d2:f9:fb:7d:4c:f8:55:7f:11:f4:7e:49:1d:80:a7:49:6c:
         4d:3f:7a:ab:2e:30:33:a4:2a:de:74:ee:aa:76:08:c9:26:38:
         e0:61:2e:3f:54:af:0e:52:90:b3:4c:9b:cd:ab:4e:22:03:62:
         b3:5b:0c:92:d3:3e:39:bc:c7:66:7d:63:83:77:62:4b:0d:13:
         87:13:8e:0c:61:a6:6d:85:2a:d3:1d:57:dd:67:1a:d2:d2:e8:
         8c:45:b0:f7:9e:7d:89:cd:4b:3d:23:fb:d3:33:09:7c:57:ee:
         d4:79:17:cc:45:6f:1f:b9:85:8c:cd:76:c2:71:07:ad:50:cd:
         17:df:26:c9:00:07:88:7d:64:48:b9:7b:da:56:8c:57:d7:e2:
         5d:39:24:a1:17:a4:5c:7c:4f:06:ca:7e:07:86:df:ed:ca:92:
         17:14:6a:c4:32:df:b8:9b:aa:89:da:6d:18:17:7c:54:f6:34:
         fb:36:fa:f6:5e:91:84:4c:64:2b:88:1b:d4:6c:0b:5d:ba:69:
         f9:4c:bc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org