Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/049ED983B496D90D20BCA0EB1BA5E4522C735D56.cer
File:                     049ED983B496D90D20BCA0EB1BA5E4522C735D56.cer (raw, json)
Hash identifier:          V96ZgOOkBzc2B9UESlZVu1gEibBKLKTSN5wJ3+vdg9M=
Subject key identifier:   04:9E:D9:83:B4:96:D9:0D:20:BC:A0:EB:1B:A5:E4:52:2C:73:5D:56
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0A2B5844819E47AF613E965E88598E70603D4A39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/049ED983B496D90D20BCA0EB1BA5E4522C735D56.mft
caRepository:             rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 28 Dec 2022 19:57:21 +0000
Certificate not after:    Wed 27 Dec 2023 20:02:21 +0000
Subordinate resources:    AS: 267168
                          IP: 45.230.132.0/22
                          IP: 2804:492c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2b:58:44:81:9e:47:af:61:3e:96:5e:88:59:8e:70:60:3d:4a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 28 19:57:21 2022 GMT
            Not After : Dec 27 20:02:21 2023 GMT
        Subject: CN=049ED983B496D90D20BCA0EB1BA5E4522C735D56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f4:73:dd:2d:5c:a2:8e:b9:37:8c:2f:d0:bb:
                    41:1e:46:55:8f:03:a9:d8:9c:2e:04:ed:e0:2d:fb:
                    dd:8d:07:9c:12:9f:09:a5:34:76:d9:98:1d:c4:ed:
                    20:52:6d:ec:87:8d:78:98:0e:b1:63:2a:5b:37:de:
                    21:f6:cd:5c:9a:b3:e8:74:fb:2d:ee:28:a6:bf:05:
                    61:2f:d7:60:7b:f6:0b:03:79:a2:be:07:fb:1d:2e:
                    9a:99:47:34:b7:b3:2e:d8:2e:fc:55:cc:a4:b5:c0:
                    ea:bb:52:6a:b0:a9:6e:4f:02:23:10:d1:42:99:0f:
                    b5:56:45:c1:b9:d0:f0:49:47:18:88:e2:6a:9c:7b:
                    82:c7:34:84:02:9a:2e:00:01:6a:18:cb:82:e0:7c:
                    f6:d1:10:b2:5a:f5:df:9c:e4:fc:a6:ec:b5:6a:09:
                    df:2e:6d:33:1b:ae:fb:03:87:9d:f9:19:6e:11:a0:
                    60:1d:b6:6d:ce:cf:5b:d2:6f:b0:a0:a7:87:1e:63:
                    9e:24:d6:b9:b3:cf:59:e5:eb:5b:a9:ca:39:3a:90:
                    49:ae:84:db:f6:0e:66:29:3b:5c:1f:94:16:b2:41:
                    96:f5:02:a8:0d:8c:02:fa:62:07:12:b2:f5:4e:c7:
                    f8:64:93:ad:6b:37:01:ea:0a:ff:78:7a:75:df:19:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                04:9E:D9:83:B4:96:D9:0D:20:BC:A0:EB:1B:A5:E4:52:2C:73:5D:56
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/B86LBjoWhVBVj7kLtGqrEKBRAGpeq8QiogrGr1KGGEFr/0/049ED983B496D90D20BCA0EB1BA5E4522C735D56.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.132.0/22
                IPv6:
                  2804:492c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267168

    Signature Algorithm: sha256WithRSAEncryption
         b7:4a:5a:6c:cd:27:3c:3d:fc:f2:27:63:86:8d:4e:aa:e3:3a:
         b4:bc:16:32:77:80:9a:9d:c1:b3:63:f2:0d:cb:37:19:96:98:
         74:33:53:d3:c6:c4:b4:00:64:80:95:a6:64:d6:bd:95:17:ab:
         a6:14:25:86:02:44:69:ae:a6:4a:fa:a1:7e:ee:0a:46:44:38:
         49:0f:34:c7:99:34:90:a4:21:22:74:b5:dc:32:16:44:1d:06:
         c7:b5:e0:7f:9d:8d:36:b7:60:31:1f:73:e5:dc:27:34:6e:bc:
         3c:ce:91:ed:57:86:07:7f:50:df:02:6d:7d:96:ff:68:58:54:
         b3:4f:20:db:07:04:69:dd:6a:75:43:67:d6:7b:bf:d8:11:e1:
         81:d6:65:2e:b0:26:80:90:29:92:e7:e5:11:ba:ce:50:4f:9c:
         57:d8:50:42:c1:57:90:ef:ab:1b:7f:6b:ab:e0:ba:56:df:3c:
         58:95:d1:51:a9:98:50:ec:ba:f8:b5:4a:10:4f:2a:36:12:0a:
         cb:83:67:64:dc:7f:f6:ac:79:ee:0e:fa:e4:34:f8:c3:ad:16:
         bf:9c:51:80:8b:ed:72:6f:c6:d7:c9:18:a7:bc:51:fe:ef:31:
         c0:8b:fc:fc:91:d2:4e:57:54:75:ff:96:9e:5d:be:d1:50:5e:
         9c:fb:13:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:19 2024 by rpki-client on console-ams.rpki-client.org