Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.cer
File:                     F2CB4D8C555C5C75560EAC12733A3547001E9332.cer (raw, json)
Hash identifier:          DZxzJCcvmrLIzda3YiI3fgs7L/uNpCvuF84rz1PgWT8=
Subject key identifier:   F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2E1E181C8A9378DF010910F42150B46110C2D5CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.mft
caRepository:             rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 Oct 2023 21:15:08 +0000
Certificate not after:    Tue 29 Oct 2024 21:20:08 +0000
Subordinate resources:    AS: 270935
                          IP: 190.103.148.0/22
                          IP: 2804:73c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1e:18:1c:8a:93:78:df:01:09:10:f4:21:50:b4:61:10:c2:d5:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 31 21:15:08 2023 GMT
            Not After : Oct 29 21:20:08 2024 GMT
        Subject: CN=F2CB4D8C555C5C75560EAC12733A3547001E9332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2d:ab:a9:4c:90:12:24:ce:c8:bf:1d:23:52:
                    f5:02:8e:e1:ee:35:74:3c:e7:34:29:64:ee:3f:e3:
                    7f:1a:ad:dc:ff:76:bc:b0:6a:3c:e8:a0:55:b5:92:
                    29:b1:7e:10:92:58:c9:65:8e:44:ae:7b:c3:92:e5:
                    ff:87:e1:af:64:7f:3c:a1:02:7b:cc:bb:e8:9d:4a:
                    45:e7:6a:2f:28:13:c7:5e:22:66:4f:5e:42:02:ad:
                    94:cc:4d:f7:90:ca:06:a9:7d:ec:0a:42:a6:7e:2e:
                    f8:a0:ac:89:69:61:b2:04:70:cf:19:d4:55:2f:2d:
                    b1:20:ee:bd:64:cc:cb:b2:b0:c7:2f:42:55:7c:6b:
                    4e:bf:69:46:32:89:2a:a3:85:37:cd:45:be:41:71:
                    3c:ae:ac:85:7d:9c:48:34:b2:3c:fe:5f:b7:f0:2e:
                    4b:f7:09:74:54:2b:ff:42:d9:48:f2:0d:9e:bb:05:
                    9e:75:93:3f:8c:c2:34:8d:2a:60:e5:ca:10:2d:01:
                    d5:6c:c5:5e:88:c2:7f:a3:90:48:c9:62:dc:d9:3d:
                    f2:b3:23:7e:b4:c7:b7:c5:cb:99:d4:78:32:b6:7a:
                    03:b0:08:5e:10:46:75:23:95:e3:c8:d8:36:1a:9d:
                    cb:5c:5c:7d:c8:6b:20:d2:19:e2:09:c8:ce:a3:e5:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F2:CB:4D:8C:55:5C:5C:75:56:0E:AC:12:73:3A:35:47:00:1E:93:32
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/3Yjd1zQqZnsGutBd7sT1bxQTg43sNm1Q68yATve1Qegn/0/F2CB4D8C555C5C75560EAC12733A3547001E9332.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.148.0/22
                IPv6:
                  2804:73c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270935

    Signature Algorithm: sha256WithRSAEncryption
         71:4c:11:e2:89:0c:1b:ca:cb:b1:80:91:92:2c:28:b8:7f:26:
         51:04:1f:92:4b:6b:ea:ee:26:19:7a:70:44:eb:e1:b2:8b:e1:
         aa:fd:95:9e:67:fe:6c:c0:66:6a:5e:05:bf:36:8e:7a:4a:50:
         8f:9e:69:b8:7c:bf:06:e9:93:76:01:54:c1:30:9e:db:01:1c:
         9f:37:1d:62:6b:26:91:81:28:ba:e6:a2:6f:36:09:b8:fc:a5:
         b5:96:65:6f:9a:ca:17:82:b8:5a:a6:e0:69:14:51:3d:aa:20:
         82:0e:7e:98:53:a8:0a:cc:88:fd:f3:26:4a:b1:fe:5c:5e:42:
         ed:39:ff:e1:d8:0d:f4:e0:57:1a:e4:c4:02:e3:97:23:cf:11:
         5a:20:e0:ab:f8:d6:2f:ba:1f:7f:fc:11:52:6f:dc:fa:9d:67:
         8d:36:0c:ea:82:25:35:2c:67:68:19:8c:19:18:e5:02:e3:dd:
         8b:43:82:23:4a:7d:24:dc:52:3b:f7:1f:36:28:cb:2b:46:c3:
         aa:4c:81:39:d8:3a:b3:02:99:b9:cc:6e:d6:05:1e:58:a7:8d:
         cf:3d:ad:cd:2c:fe:b8:3a:0e:46:fa:a2:53:39:a4:9c:19:45:
         e2:ca:70:e5:b7:87:1f:a9:df:89:62:c0:26:dc:1f:92:3f:a4:
         aa:93:f2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:22 2024 by rpki-client on console-fra.rpki-client.org