Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4A335983F05F0176EAF9D4FEB2B3D9ABF3AF876A.cer
File:                     4A335983F05F0176EAF9D4FEB2B3D9ABF3AF876A.cer (raw, json)
Hash identifier:          KIsQU+gu7QQzwT155u3qPI0ZeluywZF0zD1MDakzuFE=
Subject key identifier:   4A:33:59:83:F0:5F:01:76:EA:F9:D4:FE:B2:B3:D9:AB:F3:AF:87:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       20B97BFCE03A9F7AEBC71ABEC175BC61BFC163F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/4A335983F05F0176EAF9D4FEB2B3D9ABF3AF876A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 03 Jun 2023 15:43:28 +0000
Certificate not after:    Sat 01 Jun 2024 15:48:28 +0000
Subordinate resources:    AS: 264278
                          IP: 138.121.48.0/22
                          IP: 2804:2564::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b9:7b:fc:e0:3a:9f:7a:eb:c7:1a:be:c1:75:bc:61:bf:c1:63:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  3 15:43:28 2023 GMT
            Not After : Jun  1 15:48:28 2024 GMT
        Subject: CN=4A335983F05F0176EAF9D4FEB2B3D9ABF3AF876A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:83:e1:22:28:3f:a4:a9:e9:9f:b3:e7:93:18:
                    28:b9:07:95:8d:f9:d5:39:ac:8f:73:1d:46:ec:75:
                    ce:ae:ac:6d:5f:17:60:fa:7a:6d:f9:fe:d7:a5:b7:
                    da:41:2e:25:74:86:50:a0:df:a6:a7:f8:4a:46:5d:
                    59:f6:79:92:52:57:c9:b0:f0:d9:98:75:12:56:28:
                    ec:b6:52:6f:21:b8:5c:1e:db:28:8c:2c:52:c6:be:
                    14:bd:bb:66:7f:20:84:5b:93:6c:82:a5:09:33:3a:
                    3c:a4:29:a9:a4:fa:f1:3b:e8:c4:cd:55:de:f2:b0:
                    80:63:27:36:44:b0:5a:79:e7:b4:64:63:88:e0:72:
                    e2:e5:50:68:03:05:b6:ca:6a:f1:64:8a:47:70:29:
                    e3:da:c5:20:e7:ec:17:be:39:76:04:58:60:d6:e5:
                    21:55:85:08:22:db:0f:bc:b1:01:0a:ab:3c:22:c5:
                    28:0c:1c:76:fd:a3:91:47:3c:2a:8c:c4:18:a3:8c:
                    18:48:48:21:89:31:b9:72:a9:7c:68:11:6d:e4:2d:
                    80:1d:da:4c:bc:05:22:61:70:7c:97:32:8d:bd:fc:
                    a1:91:cc:6c:8c:3e:2d:86:32:25:27:54:d4:af:f7:
                    0b:ff:a7:1d:80:f5:64:08:a9:90:d5:be:63:17:0f:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:33:59:83:F0:5F:01:76:EA:F9:D4:FE:B2:B3:D9:AB:F3:AF:87:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DXBzztpsovkg2QCXEbrUu8ziPe7AYYrG1CovsYBBis4P/0/4A335983F05F0176EAF9D4FEB2B3D9ABF3AF876A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.48.0/22
                IPv6:
                  2804:2564::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264278

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:c3:98:5e:86:f4:dd:17:6c:8f:6b:5b:6f:27:1c:3d:b9:
         d8:f6:45:33:98:60:b5:38:17:f6:90:ba:30:d7:60:01:f1:67:
         64:13:f1:6d:57:e5:a3:34:79:6d:b4:95:c5:14:85:0e:07:d6:
         1f:88:04:35:bf:8e:65:1b:af:93:4d:93:c0:1b:00:ed:f0:fc:
         8e:3a:3a:79:53:81:f8:cf:98:a1:95:73:eb:dc:b7:7d:c1:7f:
         78:4f:49:1c:4e:d0:3b:cd:cc:16:1b:ef:b1:85:90:2b:c2:f1:
         a5:ed:32:64:97:1f:95:56:68:01:0a:8e:d3:21:f8:72:a3:22:
         c3:9f:03:e8:5a:63:d4:e9:34:7e:5b:ca:98:a2:38:21:87:76:
         79:ff:6c:94:81:89:d4:ed:6f:70:fd:70:67:45:51:fc:67:89:
         9c:ca:5d:c5:aa:da:73:49:51:54:d6:66:cf:5f:66:2c:2d:86:
         8d:17:b1:1a:82:c1:62:d8:b9:25:0d:56:2c:7d:84:c4:38:2f:
         a1:9b:f8:45:71:f5:06:76:9d:12:2c:a5:64:70:f8:c7:d6:e3:
         58:5d:64:cc:1d:2a:d2:bc:9c:63:ff:af:18:02:91:ad:82:dd:
         48:8e:2b:61:5d:0c:91:df:f1:fd:69:e7:17:21:ff:dd:7c:56:
         f4:c7:11:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org