Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.cer
File:                     E391D45BA9D3292DBFB22F4152439B03F59996F3.cer (raw, json)
Hash identifier:          m2rgUDe1dtAcMVCAuaNvfQ25XnqezRP/rXEJjzcMPV4=
Subject key identifier:   E3:91:D4:5B:A9:D3:29:2D:BF:B2:2F:41:52:43:9B:03:F5:99:96:F3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2A52A9F00B493B2F18C55DD9EE01793C41795388
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Mar 2024 20:19:42 +0000
Certificate not after:    Mon 24 Mar 2025 20:24:42 +0000
Subordinate resources:    AS: 269529
                          IP: 45.188.180.0/22
                          IP: 2804:6608::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:52:a9:f0:0b:49:3b:2f:18:c5:5d:d9:ee:01:79:3c:41:79:53:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 25 20:19:42 2024 GMT
            Not After : Mar 24 20:24:42 2025 GMT
        Subject: CN=E391D45BA9D3292DBFB22F4152439B03F59996F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:2c:94:fa:9c:43:85:da:40:b9:36:d5:8c:
                    5e:f0:5a:25:b3:84:d2:e3:72:15:9d:83:11:5e:f0:
                    da:ab:63:30:08:14:fe:da:00:5f:80:52:be:c4:1c:
                    e5:2e:08:50:e3:86:51:6a:85:12:c5:a3:85:1e:6f:
                    ba:6a:23:b2:7e:68:bf:82:a3:3f:04:a7:1c:19:7b:
                    ba:cc:53:96:6e:d9:ab:68:60:eb:20:67:f4:91:ac:
                    37:04:fc:dd:a2:4d:28:5b:06:3a:9f:bd:2f:43:ff:
                    d5:7f:85:dc:9e:4f:7c:b9:b9:30:fd:38:e3:05:21:
                    3e:86:c8:a0:de:f8:1b:f7:ac:bf:c2:66:61:87:84:
                    59:d2:4a:91:eb:6c:23:b5:8f:55:42:4e:41:b8:2c:
                    54:9d:f6:4c:db:9f:1c:85:7f:8e:22:d3:22:ea:84:
                    32:d4:c9:b2:4d:97:40:09:a8:c4:54:b6:36:e4:44:
                    b1:7c:76:e5:de:c6:a0:59:25:e1:05:dd:ab:93:3e:
                    28:de:4a:13:90:8c:67:7e:1a:b9:73:b7:e2:ca:50:
                    c4:2b:cc:e3:a1:93:18:9b:39:c8:28:cc:d1:1d:fb:
                    d3:db:0f:de:6d:bb:b2:4d:ea:79:a1:7a:1e:7f:28:
                    3a:47:e9:b7:f0:e4:d5:cc:0c:e7:c6:cf:0c:c6:53:
                    95:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E3:91:D4:5B:A9:D3:29:2D:BF:B2:2F:41:52:43:9B:03:F5:99:96:F3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3SAS8tzfZ1TBmAqS4uz3PPhQ1aNJc4umrxkZky1ATgjQ/0/E391D45BA9D3292DBFB22F4152439B03F59996F3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.180.0/22
                IPv6:
                  2804:6608::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269529

    Signature Algorithm: sha256WithRSAEncryption
         04:8a:e4:87:65:cb:9d:8b:ab:58:b3:bd:72:6d:06:da:18:cf:
         7d:61:53:6e:17:88:c2:68:63:9e:b7:aa:10:ab:2f:db:d1:13:
         a5:cf:44:16:65:62:db:1c:41:32:1b:a8:a0:bc:1f:4f:5c:93:
         3b:1e:a1:39:d7:27:fa:74:81:42:21:fe:c4:e7:47:15:cb:bf:
         41:51:e3:7f:d9:78:1e:40:a7:64:55:30:4d:d3:c5:df:30:8e:
         fa:0d:57:08:19:6f:24:8c:bd:57:7d:ba:ee:f0:32:19:e8:23:
         48:b1:00:cf:8a:0a:79:3c:b1:4d:ad:f9:8a:c1:eb:53:c2:0c:
         91:f4:97:66:db:bf:08:3c:18:bd:6c:61:19:0c:de:cb:5e:c7:
         04:67:b9:d6:fc:be:47:89:3c:f7:d9:1b:7c:a4:95:49:73:7b:
         f8:d6:66:04:b6:26:97:5f:8f:44:7f:e1:80:f8:e8:0b:4f:53:
         fc:9e:91:d8:94:a1:d1:9f:f3:c6:14:29:61:c4:db:92:c8:1a:
         d1:d9:8e:03:10:e8:20:53:df:cf:3c:c7:4b:99:7e:b4:97:4b:
         de:a4:ce:8b:fc:1b:21:70:d7:87:de:35:24:64:e5:bc:ad:77:
         89:40:cf:d3:21:b5:ea:e8:2a:38:c1:f7:d6:f5:da:c1:c0:d6:
         8f:18:ed:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:44 2024 by rpki-client on console-ams.rpki-client.org