Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.cer
File:                     F296B143778F1DB13805ABCD379BEFAFAD6C3E41.cer (raw, json)
Hash identifier:          I9mk2aDOXa6hN6NNKldvJ9gf1vopqlzRP76//3KI5FM=
Subject key identifier:   F2:96:B1:43:77:8F:1D:B1:38:05:AB:CD:37:9B:EF:AF:AD:6C:3E:41
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20EB313374BEC13A96E39F3AD1D0D54E91A95850
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 21 Jul 2023 13:21:45 +0000
Certificate not after:    Fri 19 Jul 2024 13:26:45 +0000
Subordinate resources:    AS: 268938
                          IP: 45.174.10.0/23
                          IP: 2804:5ce8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:eb:31:33:74:be:c1:3a:96:e3:9f:3a:d1:d0:d5:4e:91:a9:58:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 13:21:45 2023 GMT
            Not After : Jul 19 13:26:45 2024 GMT
        Subject: CN=F296B143778F1DB13805ABCD379BEFAFAD6C3E41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:de:f0:b0:2b:58:56:ce:ac:0f:88:63:cb:bc:
                    41:61:95:13:74:94:a8:ca:24:16:48:54:f0:1b:83:
                    6a:d1:d0:40:55:52:c0:dc:e8:6a:9e:63:4f:19:99:
                    82:91:df:50:b7:fc:53:7d:44:b0:fe:b6:2d:3a:91:
                    90:c1:77:23:5c:79:f2:92:ca:3f:e2:db:b6:09:94:
                    0e:5c:1a:06:d1:47:4c:3d:53:2a:bc:2b:73:e6:79:
                    80:ab:b9:7f:f3:a9:08:4e:e1:16:31:90:34:e8:8a:
                    93:83:16:70:10:d7:1b:f9:8a:9f:aa:47:92:41:56:
                    75:be:d7:61:78:6a:52:ba:85:e4:f7:55:2d:39:c2:
                    11:c7:f0:1f:d2:45:14:ba:22:58:c1:5d:02:8a:15:
                    b1:c5:94:07:a2:f8:f2:15:8a:5f:00:73:c8:26:e7:
                    dc:2a:d1:a5:2e:24:6a:a0:4c:52:9e:37:2c:b8:43:
                    88:ae:4a:fa:b8:e9:26:ce:c1:1e:55:30:2c:20:24:
                    c6:d2:6b:58:65:0b:16:ef:38:a0:ae:ac:cf:8a:23:
                    41:97:64:5e:85:ec:4f:c0:81:fd:26:f2:b5:20:ca:
                    0b:0f:51:59:87:1e:dc:4d:dc:58:ed:2b:06:28:25:
                    b1:f1:b4:ec:79:75:a7:2a:aa:67:70:75:cb:85:62:
                    ef:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:96:B1:43:77:8F:1D:B1:38:05:AB:CD:37:9B:EF:AF:AD:6C:3E:41
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/F296B143778F1DB13805ABCD379BEFAFAD6C3E41.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.10.0/23
                IPv6:
                  2804:5ce8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268938

    Signature Algorithm: sha256WithRSAEncryption
         09:0d:0b:90:07:d2:06:5d:42:c7:64:83:ed:f5:31:a1:28:8d:
         df:da:8c:1b:9a:7c:fe:74:85:5d:99:5b:b4:17:78:d5:ea:58:
         12:61:f0:43:3f:18:ea:44:1c:09:e8:1a:f9:33:1c:e2:1c:d7:
         14:cd:64:ab:e0:af:02:fd:75:8f:8d:7d:c4:5a:00:a0:fd:27:
         90:e3:be:bf:d1:cc:92:97:fa:11:14:53:48:5b:d6:7b:95:1c:
         69:39:37:d5:f3:e5:d9:bd:ca:34:65:c6:99:c4:6f:aa:7f:51:
         dd:64:cc:a6:7f:89:02:14:93:9b:c6:0c:03:37:ad:99:a1:5d:
         7f:ab:4d:a4:25:ca:2e:ae:2e:d4:ad:ef:fa:0a:dd:d9:75:8c:
         3b:2d:b4:19:2d:78:11:7e:aa:22:1f:d3:11:0c:a6:80:6d:58:
         11:e2:67:4a:54:0e:e7:5f:db:88:2d:69:d8:d4:2a:27:cb:b8:
         9e:e0:e8:c7:9d:c3:ca:2a:5d:e3:ee:83:9b:4c:23:83:b1:69:
         ff:f4:89:a9:0e:19:1d:78:ed:6e:63:b7:10:84:57:f7:9f:e0:
         64:fd:20:b7:2a:2f:ba:b8:fd:e2:24:08:01:37:b0:bf:81:2e:
         15:5e:bb:95:2b:ff:9b:26:50:0a:72:19:de:46:3e:64:4d:85:
         8b:9f:6d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:19 2024 by rpki-client on console-ams.rpki-client.org