Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9.cer
File:                     0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9.cer (raw, json)
Hash identifier:          EAYowBC8ewWBl0iD3FD1lqLTL3YuS6aaXeRGWFf6pSk=
Subject key identifier:   04:90:D4:85:3D:AD:6E:AA:D5:AF:EB:92:65:E9:29:CB:49:94:DF:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3BA485F17A68001CDE413333B2194D230913CA8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 14:18:05 +0000
Certificate not after:    Thu 20 Jul 2023 14:23:05 +0000
Subordinate resources:    AS: 269556
                          IP: 45.187.196.0/22
                          IP: 2804:6668::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a4:85:f1:7a:68:00:1c:de:41:33:33:b2:19:4d:23:09:13:ca:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 14:18:05 2022 GMT
            Not After : Jul 20 14:23:05 2023 GMT
        Subject: CN=0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:82:36:b5:59:83:e6:51:80:c8:d7:03:12:78:
                    8a:77:69:f9:1a:2b:26:29:1e:e1:5a:a9:fd:3e:c1:
                    58:9e:e9:3c:13:b3:2d:46:02:7e:d1:ac:3f:06:b3:
                    f1:55:a1:c6:65:a1:89:e7:b2:80:a6:28:fa:da:bb:
                    af:86:98:e1:e8:18:0d:e6:03:dd:75:fa:48:e6:3b:
                    d6:4c:fa:77:22:af:53:1b:4a:b6:55:e0:0f:16:41:
                    9b:76:a9:1c:88:fe:53:6c:b8:9b:a8:20:de:b3:4f:
                    03:f1:be:52:00:82:9e:87:8f:4c:16:07:5d:f9:b6:
                    46:b1:56:99:5f:5d:1f:37:b1:55:27:57:e7:59:5b:
                    cf:ae:12:25:a6:75:7d:e5:d9:cb:23:ff:27:1b:3a:
                    7b:02:e7:2f:76:05:c3:fb:56:a7:1e:27:7c:f8:dd:
                    35:48:03:93:76:8e:93:f5:17:83:a3:8f:b3:4f:33:
                    35:1c:9a:6b:f9:2e:36:c3:9d:35:0c:e5:b3:2a:be:
                    7c:bb:96:15:b1:5d:2d:b8:04:8d:11:3b:f2:41:a8:
                    a4:f3:a1:20:0c:54:69:9a:f7:dd:56:38:ab:7a:e8:
                    d0:39:f4:08:0d:70:91:fe:db:9f:4f:c8:89:20:4d:
                    d7:56:5e:75:84:c1:d7:4f:a9:78:5a:ce:46:d7:32:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:90:D4:85:3D:AD:6E:AA:D5:AF:EB:92:65:E9:29:CB:49:94:DF:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D2HUtiDL2z2oTGneSJ15N77b7YeQev6AKrvyxjYdvLwp/0/0490D4853DAD6EAAD5AFEB9265E929CB4994DFC9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.196.0/22
                IPv6:
                  2804:6668::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269556

    Signature Algorithm: sha256WithRSAEncryption
         09:71:57:9d:76:f2:8f:fa:c0:09:ef:b1:6b:fb:28:46:94:c2:
         ac:19:53:a5:54:b7:84:15:38:78:16:74:88:57:4e:69:d8:ee:
         3c:d8:06:06:0c:2e:b0:97:79:a5:a1:80:04:d0:da:1d:3e:ff:
         67:f2:36:48:e7:c2:50:dd:3a:6d:61:f6:92:c7:08:1c:cc:6c:
         ad:e5:f0:a2:27:8d:e9:93:0e:03:66:44:b1:22:c8:c3:a1:1d:
         c9:28:36:44:44:4b:16:3a:8e:36:5f:61:17:78:a4:dd:98:16:
         10:80:53:50:21:11:cf:92:3c:7a:92:ce:db:ed:60:ce:d6:4c:
         8c:ac:c5:58:63:11:ee:35:8c:b8:97:2d:5d:d2:f9:c8:86:1c:
         15:cf:6d:57:44:dd:10:b0:50:01:f0:c8:f9:56:d9:26:cb:28:
         63:9b:5c:45:3f:91:3b:66:fb:f5:40:a0:9c:ed:31:25:70:2c:
         6c:1d:09:6f:c6:a7:6e:ab:1c:87:51:0d:8c:08:e7:ec:63:47:
         da:c6:9a:fc:ea:80:65:ef:b6:22:bd:f4:19:59:dd:fd:d7:a9:
         26:6d:8f:f3:c9:a9:73:80:8d:f6:fc:61:89:da:7e:ee:96:5b:
         91:7d:22:6f:cd:7d:42:32:f5:97:d6:b0:e5:7e:d8:7b:f1:ed:
         6c:87:75:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:15 2024 by rpki-client on console-fra.rpki-client.org