Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/0492D2BDAB3E63EC451E4728A9F1CB4F01035AAE.cer
File:                     0492D2BDAB3E63EC451E4728A9F1CB4F01035AAE.cer (raw, json)
Hash identifier:          ke/7A2ntiMHih3t2D9migcr0xQPFo/duk+18W5c/DE0=
Subject key identifier:   04:92:D2:BD:AB:3E:63:EC:45:1E:47:28:A9:F1:CB:4F:01:03:5A:AE
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7D982E0C75EB9EDDF3E6AE3C22ACFD5128B13CEE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/0/0492D2BDAB3E63EC451E4728A9F1CB4F01035AAE.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 17:48:13 +0000
Certificate not after:    Mon 16 Sep 2024 17:53:13 +0000
Subordinate resources:    AS: 263972
                          IP: 138.255.128.0/22
                          IP: 2804:28a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:98:2e:0c:75:eb:9e:dd:f3:e6:ae:3c:22:ac:fd:51:28:b1:3c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 18 17:48:13 2023 GMT
            Not After : Sep 16 17:53:13 2024 GMT
        Subject: CN=0492D2BDAB3E63EC451E4728A9F1CB4F01035AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:09:af:63:12:17:74:2b:53:08:83:18:d2:f5:
                    b4:b4:80:bc:99:08:a1:f0:04:91:a1:0a:be:47:d4:
                    b3:85:03:5c:50:02:d7:d1:81:0a:74:f0:4a:9b:5e:
                    6d:c1:56:10:34:21:52:2e:89:b9:6d:39:9b:0e:20:
                    14:36:f4:75:a7:f9:6a:d2:97:df:47:1c:c6:8a:45:
                    c1:e7:e6:d4:b8:14:4b:54:a4:8a:39:c1:55:58:8f:
                    f0:2f:b0:7b:23:31:b2:4e:7f:45:dd:7f:52:36:96:
                    08:44:f9:8e:64:73:bf:8e:65:3a:92:c6:5e:ee:f0:
                    3b:63:74:a8:19:08:a7:25:c6:e5:35:c8:0d:7c:99:
                    68:64:89:29:a9:a4:db:73:bc:45:8e:70:d5:b5:8e:
                    b6:a9:38:07:d0:14:5a:00:b1:f9:27:c5:70:f1:08:
                    e4:d2:de:3d:a8:0f:3e:0a:31:dc:98:8d:f8:79:6c:
                    b0:5e:f4:f2:e6:60:75:0c:92:8b:f6:9c:34:5c:0e:
                    e7:62:91:78:25:e2:a9:36:bc:8e:bd:ae:35:28:4b:
                    a3:ee:6d:bd:7c:68:3e:69:e7:7d:ee:ed:a5:f3:6c:
                    55:32:67:e5:57:7d:cc:58:cb:64:70:44:cd:e1:55:
                    89:05:b6:82:d7:55:aa:22:07:56:57:c2:ba:84:ce:
                    f0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:92:D2:BD:AB:3E:63:EC:45:1E:47:28:A9:F1:CB:4F:01:03:5A:AE
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6HhgxA9pdAmqECaVicMN26JbQSWWqJJUbMP9sPRvMsmg/0/0492D2BDAB3E63EC451E4728A9F1CB4F01035AAE.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.128.0/22
                IPv6:
                  2804:28a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263972

    Signature Algorithm: sha256WithRSAEncryption
         a8:3a:ff:47:26:67:ea:2a:df:fc:58:4f:52:32:2c:34:d6:db:
         1b:fc:55:8e:2d:b3:b7:cb:1c:c7:b3:34:70:61:e4:29:35:94:
         ad:77:1c:59:9c:e4:ff:5d:e4:4b:74:f5:20:0b:83:d7:02:80:
         67:66:44:89:04:b2:ab:e6:ab:92:03:a1:a3:27:a6:8c:fd:14:
         a7:b0:4c:c1:41:42:2c:c0:49:06:ee:4c:b3:05:cd:8e:a9:45:
         98:ec:7b:2c:e6:36:c4:33:ff:0e:25:ad:33:49:f2:82:82:a6:
         c0:35:8b:7c:6f:4b:a9:a5:b2:da:0b:eb:cb:26:43:09:2a:e9:
         40:d0:bf:9d:07:c5:96:bf:42:71:f1:88:04:66:b3:f2:6a:81:
         62:e8:43:7f:79:58:af:ba:e3:bc:32:64:57:44:65:0b:d0:2e:
         25:a2:98:48:37:24:74:66:90:47:df:3b:e9:96:a2:69:9d:10:
         8e:a6:3a:f5:7e:64:f9:4c:90:79:27:30:25:b2:fb:51:6c:45:
         cc:c2:dc:ba:be:46:ca:bc:5b:c3:2e:04:ae:f1:72:ad:42:f5:
         40:d8:1b:92:a2:15:a9:59:c5:6b:8b:1e:6d:17:f2:b9:34:18:
         53:cd:39:e8:e1:cf:ce:7c:bb:eb:28:e3:d3:91:3f:d7:67:8b:
         c4:22:bb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:14 2024 by rpki-client on console-fra.rpki-client.org