Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/E96EF73B6181F48C2A229A16A95A87451D09F435.cer
File:                     E96EF73B6181F48C2A229A16A95A87451D09F435.cer (raw, json)
Hash identifier:          dud6MYP5yF1hwS/RvJCFZBSWPoGr5Td4b7aTMy/o10M=
Subject key identifier:   E9:6E:F7:3B:61:81:F4:8C:2A:22:9A:16:A9:5A:87:45:1D:09:F4:35
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       59F979A5384316BB94AD66BFCF5E1FE883BB79F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/E96EF73B6181F48C2A229A16A95A87451D09F435.mft
caRepository:             rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 02 Jan 2023 22:55:15 +0000
Certificate not after:    Mon 01 Jan 2024 23:00:15 +0000
Subordinate resources:    AS: 263950
                          IP: 138.255.0.0/22
                          IP: 2804:2840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f9:79:a5:38:43:16:bb:94:ad:66:bf:cf:5e:1f:e8:83:bb:79:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  2 22:55:15 2023 GMT
            Not After : Jan  1 23:00:15 2024 GMT
        Subject: CN=E96EF73B6181F48C2A229A16A95A87451D09F435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:31:4e:5f:c0:d9:b4:ff:9c:54:61:22:75:ec:
                    7b:e6:e2:5d:55:a4:41:84:57:0e:a0:7c:a2:13:44:
                    89:75:67:8e:85:b0:ff:82:95:5e:a3:87:92:ae:6d:
                    f8:87:81:ad:20:f2:e1:76:c8:9b:40:47:4e:a2:40:
                    c7:ec:75:5c:4c:80:02:a6:20:fc:28:de:54:60:8d:
                    a4:d7:f4:16:79:4a:a0:c9:1f:50:65:1f:83:4a:a7:
                    10:84:6c:da:c3:7d:45:eb:a2:25:f2:18:02:32:2a:
                    2e:b0:fb:c3:99:36:fe:cf:8d:b6:52:77:9b:14:ff:
                    bb:bc:65:d3:3a:03:3f:07:c9:6f:16:09:1e:44:ad:
                    86:53:9f:ef:4d:61:ea:93:06:b1:a1:8b:11:e6:e4:
                    a8:7a:f7:c1:6e:21:c1:23:49:45:b8:46:94:e4:cd:
                    74:f4:26:61:2f:ef:2f:09:91:74:a2:6b:ce:2c:20:
                    f8:0d:e3:0c:77:b4:f5:9f:6d:9c:74:04:e0:ce:af:
                    14:7f:57:97:10:80:fe:55:d2:2f:42:ce:71:dd:58:
                    15:55:69:e3:d9:0d:ac:74:ba:15:7e:09:a3:e7:e5:
                    09:3c:92:eb:73:5f:94:b9:e3:b1:c1:54:5a:47:ed:
                    bc:20:af:b3:47:39:b8:6e:4f:b4:47:c3:c0:3f:fd:
                    db:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                E9:6E:F7:3B:61:81:F4:8C:2A:22:9A:16:A9:5A:87:45:1D:09:F4:35
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/1rkrmu44o66wAPvYC81Gmq2uE37YFv4gRZCNboiyD3c/0/E96EF73B6181F48C2A229A16A95A87451D09F435.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.0.0/22
                IPv6:
                  2804:2840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263950

    Signature Algorithm: sha256WithRSAEncryption
         70:34:97:72:00:af:86:74:c6:f6:df:33:c7:ce:78:e5:0e:c1:
         6c:2e:8b:a5:49:ff:05:89:d2:05:1d:0f:28:81:c9:62:33:10:
         aa:cd:f3:19:1b:47:71:a4:2b:6d:c3:2c:dd:65:18:3e:3b:d4:
         6e:b2:3b:3e:aa:e5:ff:59:50:b0:e2:4b:a8:8e:12:4e:ac:1a:
         8b:83:bf:b3:e8:c4:a5:fe:fe:7e:e5:7b:a2:f1:98:3e:55:c2:
         6d:a5:2f:e1:3f:14:5e:ff:6d:6c:87:73:19:0f:12:81:12:38:
         22:02:23:38:0b:dd:2a:c7:0b:7c:1c:92:8a:ea:4a:c8:fa:63:
         4f:59:b7:8c:f3:4d:b4:53:1b:f7:68:bb:04:86:70:3d:f4:2f:
         7e:9c:58:18:7e:1d:9a:e9:2b:9c:8a:76:7c:99:7b:ee:4f:09:
         eb:0e:08:5a:c9:00:dc:0e:35:9b:31:a2:44:d8:3b:b8:9a:8e:
         b2:5d:ee:c4:ec:91:05:1d:dc:34:76:9d:da:89:79:b8:4f:7e:
         42:1e:d2:8c:54:4d:a1:cb:80:2d:bf:8c:e4:86:6e:7a:0a:94:
         d8:47:e8:c1:41:bb:b8:f5:36:fd:5d:04:90:fc:b4:92:bc:f8:
         db:20:fc:8c:41:a4:2b:46:88:1d:b1:5d:c9:2a:6f:20:70:0f:
         e0:af:fa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:18 2024 by rpki-client on console-ams.rpki-client.org