Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E8600CA4798A70EA54DA70A6ABD324A4AEFFB518.cer
File:                     E8600CA4798A70EA54DA70A6ABD324A4AEFFB518.cer (raw, json)
Hash identifier:          fS7Z6HW4/vpYScrtJyStHEMOBm0jh15rb3TIXLl4Qkc=
Subject key identifier:   E8:60:0C:A4:79:8A:70:EA:54:DA:70:A6:AB:D3:24:A4:AE:FF:B5:18
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       385326ECA9FDCCCD5E2E557652049856F64171FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Gz7gD1x56sh3PB1jrspc9LDU19UWgv2McSU78RvHoiid/0/E8600CA4798A70EA54DA70A6ABD324A4AEFFB518.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Gz7gD1x56sh3PB1jrspc9LDU19UWgv2McSU78RvHoiid/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 18 Jan 2022 13:40:17 +0000
Certificate not after:    Tue 17 Jan 2023 13:45:17 +0000
Subordinate resources:    AS: 267181
                          IP: 45.230.252.0/22
                          IP: 2804:4960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:53:26:ec:a9:fd:cc:cd:5e:2e:55:76:52:04:98:56:f6:41:71:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 18 13:40:17 2022 GMT
            Not After : Jan 17 13:45:17 2023 GMT
        Subject: CN=E8600CA4798A70EA54DA70A6ABD324A4AEFFB518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:20:b5:f9:ca:20:13:cf:81:da:c6:8e:42:
                    78:2b:5e:02:b5:cc:ed:c4:a7:52:17:19:6d:92:60:
                    09:a0:fd:81:a9:c7:6f:b2:12:9e:e1:cf:d6:76:d1:
                    41:2c:47:48:ad:5f:0a:d2:ca:b2:aa:4a:60:38:54:
                    29:c4:ad:9b:b6:5b:45:25:03:a1:be:b8:9d:6e:1f:
                    c2:75:db:f8:3e:83:5e:3f:7c:08:c4:8a:66:fa:ad:
                    93:6f:99:34:49:10:b3:13:7e:b9:04:5c:71:82:a9:
                    64:9c:4a:29:c5:02:6d:55:f3:3b:54:51:dd:09:32:
                    58:dc:c0:1e:ae:40:21:9f:f8:ae:4e:a2:06:c8:11:
                    ed:32:1b:02:b7:74:fb:4a:bf:65:4d:8b:bd:7c:5a:
                    49:42:12:35:3f:44:cb:a8:9f:f3:e5:41:15:b6:2a:
                    a3:6d:ab:06:d8:63:7f:57:eb:20:23:ae:17:b4:e5:
                    7d:af:69:b1:4b:fd:c0:c0:0d:2b:9d:eb:9e:41:20:
                    56:70:ac:85:ba:1b:5e:41:97:6f:18:e7:f2:93:68:
                    cf:57:b6:9b:e6:53:e3:e2:a1:8a:19:2b:00:04:22:
                    18:77:ac:86:bc:4b:a3:f1:70:38:87:00:85:f1:06:
                    b2:cd:68:c0:a6:6f:0f:7f:50:f1:4e:6c:77:e5:54:
                    23:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E8:60:0C:A4:79:8A:70:EA:54:DA:70:A6:AB:D3:24:A4:AE:FF:B5:18
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Gz7gD1x56sh3PB1jrspc9LDU19UWgv2McSU78RvHoiid/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Gz7gD1x56sh3PB1jrspc9LDU19UWgv2McSU78RvHoiid/0/E8600CA4798A70EA54DA70A6ABD324A4AEFFB518.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.252.0/22
                IPv6:
                  2804:4960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267181

    Signature Algorithm: sha256WithRSAEncryption
         31:9e:2d:b3:61:53:8f:d7:36:cc:c4:f7:af:52:08:6a:b1:11:
         52:3a:0a:d4:27:3a:89:2a:a3:fb:ea:84:78:15:41:39:2d:b6:
         92:8b:6c:3d:36:ee:af:8b:89:2d:08:3f:4a:ef:fa:b8:05:12:
         50:6c:e2:5f:f6:f4:98:71:26:60:dd:a5:42:ef:55:a3:7e:10:
         fd:88:56:e2:85:76:61:f2:b4:df:b7:fe:83:28:85:6e:5c:0c:
         5d:9a:53:ba:d5:82:35:0b:37:0d:5f:39:ed:f5:06:7d:22:b3:
         02:6b:05:b3:f2:cf:f7:66:f6:21:0d:cf:31:84:cf:e8:83:97:
         e5:87:3f:5e:a0:38:f0:51:bd:cd:dc:c1:90:30:55:00:7b:55:
         55:c9:aa:43:4b:b3:67:1d:34:24:b8:ed:8d:5b:3d:d0:b6:87:
         d1:20:1d:03:e0:c8:76:0b:14:46:d9:62:43:c3:14:91:bf:ff:
         83:f9:2f:62:6c:e1:76:92:c6:44:0e:56:53:80:fe:c7:ca:c0:
         48:74:6f:d1:ca:da:e4:35:b1:46:51:ad:65:69:6c:a9:0c:85:
         59:9d:26:92:87:60:f7:45:bd:f5:c9:67:ca:85:b1:6e:c8:25:
         8e:ce:f8:06:48:93:df:6f:f9:a2:ed:69:26:55:6b:e4:b7:de:
         37:49:90:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:35 2024 by rpki-client on console-fra.rpki-client.org