Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0274CB786FE88F246949779650596431EF87E5E4.cer
File:                     0274CB786FE88F246949779650596431EF87E5E4.cer (raw, json)
Hash identifier:          yFL4lgCmZF4Gb37CaJ7ir+kXiPFOSEp5PeoHvujFDxA=
Subject key identifier:   02:74:CB:78:6F:E8:8F:24:69:49:77:96:50:59:64:31:EF:87:E5:E4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       28C31716BC4F2EF958EF380DA09790060037BFB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/0274CB786FE88F246949779650596431EF87E5E4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 17:16:37 +0000
Certificate not after:    Thu 18 Apr 2024 17:21:37 +0000
Subordinate resources:    AS: 268308
                          IP: 45.238.4.0/22
                          IP: 2804:4f28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:c3:17:16:bc:4f:2e:f9:58:ef:38:0d:a0:97:90:06:00:37:bf:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr 20 17:16:37 2023 GMT
            Not After : Apr 18 17:21:37 2024 GMT
        Subject: CN=0274CB786FE88F246949779650596431EF87E5E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d8:2f:e1:34:43:b9:a3:9a:e6:79:5b:73:64:
                    f5:91:24:03:73:af:c8:71:ad:c8:21:df:97:31:f7:
                    ff:15:34:c5:84:f6:61:4f:28:7f:e8:72:99:67:75:
                    f1:96:69:9a:24:6d:f3:cc:87:69:9e:77:cc:1c:be:
                    ce:d2:63:6e:42:55:94:d2:7d:ea:8f:db:c5:7b:4a:
                    97:d2:73:d5:3a:70:39:dd:26:1c:f4:b5:64:46:be:
                    ea:67:c9:72:08:c9:f0:4e:00:20:12:1b:7f:7a:41:
                    e4:0b:2b:ed:c5:64:cf:ac:c3:82:86:77:90:e2:4c:
                    66:af:6c:53:58:7b:bf:7d:d2:2c:7d:5c:46:54:6b:
                    72:19:fd:44:9d:c8:18:75:ac:b5:85:3d:22:04:d2:
                    ee:5b:d5:cd:96:4c:35:93:b8:50:10:93:8a:6d:1b:
                    44:05:f7:72:40:62:05:53:b1:20:40:7f:02:42:fa:
                    d0:d3:4d:a7:5e:c8:93:21:7c:df:11:40:06:63:34:
                    25:c9:c7:eb:1f:aa:6b:d2:a9:4f:98:6f:b2:f1:90:
                    05:ba:28:3a:4e:1c:ff:63:f6:83:38:c3:bb:8a:ed:
                    42:e5:d8:6c:4b:3e:9b:cf:81:eb:ac:a1:f6:40:1b:
                    99:5c:b7:47:20:f7:f0:58:5d:59:b0:12:e2:fe:a6:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                02:74:CB:78:6F:E8:8F:24:69:49:77:96:50:59:64:31:EF:87:E5:E4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/0274CB786FE88F246949779650596431EF87E5E4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.4.0/22
                IPv6:
                  2804:4f28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268308

    Signature Algorithm: sha256WithRSAEncryption
         88:43:8b:3c:04:a8:46:28:73:10:8d:ce:c3:fa:93:66:26:0b:
         93:35:6b:60:36:e6:21:df:89:81:a6:c8:d1:fe:bd:7b:6c:bc:
         44:37:f8:7e:00:5e:13:1a:b2:f6:46:0e:df:64:9f:f7:bc:5e:
         db:2c:86:cf:71:c7:5b:ba:2c:f6:8d:ad:72:f6:e4:37:51:ef:
         91:06:1c:b2:7b:14:b3:14:9d:50:b2:08:64:a1:90:43:fe:3c:
         71:16:86:2a:97:db:b5:fc:dd:a7:0e:80:fc:2d:84:a2:32:48:
         00:90:c2:f6:cc:c3:a2:ef:f5:90:20:9a:c7:86:2f:c1:01:61:
         9e:61:6a:55:f1:30:d2:2c:4f:8e:a6:57:b3:6d:17:39:2e:c9:
         f4:e9:6a:5d:1d:0b:c0:cf:eb:87:39:79:e4:8f:1d:91:19:66:
         37:e3:39:7c:1b:fb:ac:6a:a7:c0:69:0d:e3:fc:72:60:57:0c:
         d4:8e:6d:d4:83:b6:45:66:48:31:31:f9:a9:5e:42:5c:89:c5:
         24:4f:d8:3e:3a:f3:73:ba:15:fa:f9:d0:89:5a:5a:4a:19:c3:
         ca:b1:1f:88:75:cd:6e:51:80:05:9c:06:ac:e7:58:cb:1f:e7:
         fe:3b:6b:80:72:9d:c3:1b:bb:25:87:14:ac:7d:c9:ad:d9:e0:
         7b:9d:6b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:18 2024 by rpki-client on console-ams.rpki-client.org