Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
File:                     33C015248532BCE3959F73092749FDE164934402.cer (raw, json)
Hash identifier:          QOXbhsrls70xI5wXF3C4XEBiyFOJLrYNUzFXxIPzs+c=
Subject key identifier:   33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       488A1C499764B737B0CBDCFF3FC0DFD934286BD1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/33C015248532BCE3959F73092749FDE164934402.mft
caRepository:             rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 13 Nov 2023 19:03:15 +0000
Certificate not after:    Mon 11 Nov 2024 19:08:15 +0000
Subordinate resources:    AS: 267388
                          IP: 45.4.156.0/22
                          IP: 45.7.0.0/22
                          IP: 45.174.208.0/22
                          IP: 45.234.248.0/22
                          IP: 131.196.40.0/22
                          IP: 132.255.44.0/22
                          IP: 2804:4cbc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:8a:1c:49:97:64:b7:37:b0:cb:dc:ff:3f:c0:df:d9:34:28:6b:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 13 19:03:15 2023 GMT
            Not After : Nov 11 19:08:15 2024 GMT
        Subject: CN=33C015248532BCE3959F73092749FDE164934402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8b:3b:4b:54:6a:18:71:11:4f:5c:78:bf:31:
                    ad:c9:db:0a:80:b5:d4:48:53:e6:3e:66:aa:f7:21:
                    4c:01:be:d5:22:32:d5:87:46:50:4f:e7:75:80:85:
                    81:f4:7e:62:b9:66:3f:e1:b4:a6:69:50:20:e8:43:
                    45:bf:9f:b1:06:12:ac:41:bf:37:3b:db:09:fc:08:
                    8c:60:61:87:ed:3f:b5:ce:fd:ec:09:6b:cb:ca:da:
                    c8:89:a4:ac:53:f2:e4:52:85:5b:52:7f:a0:16:78:
                    cb:60:19:28:5f:73:2a:83:25:b3:02:ba:26:c9:42:
                    f0:18:3b:21:82:fb:e1:75:eb:df:0c:99:af:1c:6c:
                    48:02:54:68:a6:13:f8:0d:a2:01:0b:de:75:eb:5f:
                    ac:c5:dd:01:08:ac:a6:ac:f0:6b:d0:4d:7d:a7:f9:
                    93:85:0a:54:78:c6:f3:e9:d0:86:7f:56:11:fd:c3:
                    cb:47:6a:30:72:eb:99:64:55:bf:95:ab:d1:08:53:
                    22:78:fa:a0:98:fd:03:d8:5f:9e:b6:a5:b5:66:1a:
                    2a:87:f9:e7:de:51:f8:ae:9b:82:26:a9:4d:65:b4:
                    70:d4:dd:11:31:0b:2c:5d:bc:08:b6:13:00:ba:6e:
                    5e:2d:b6:73:20:89:18:c3:4b:9b:5c:6f:a4:4e:3a:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/33C015248532BCE3959F73092749FDE164934402.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.156.0/22
                  45.7.0.0/22
                  45.174.208.0/22
                  45.234.248.0/22
                  131.196.40.0/22
                  132.255.44.0/22
                IPv6:
                  2804:4cbc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267388

    Signature Algorithm: sha256WithRSAEncryption
         94:b2:f0:76:be:fd:24:66:47:57:ca:40:b8:4d:ed:4c:f2:c5:
         46:19:3a:2b:6d:14:05:da:2d:1a:36:38:4b:3b:f6:63:8b:ac:
         f9:3c:72:0f:70:57:dc:8e:56:8f:bb:37:25:6d:45:01:79:05:
         05:3a:a9:d1:77:f1:dd:1e:27:2d:f8:27:2b:51:34:f1:0d:0b:
         6d:3e:44:14:2b:9f:b3:41:e5:b5:59:e1:55:0f:14:3e:7e:b8:
         68:fd:01:37:6f:80:b3:02:c5:cb:03:f9:c1:fa:f9:28:a1:fe:
         91:2c:7e:e2:44:95:24:af:0e:9f:7c:5a:8f:8e:1b:b9:d7:dd:
         49:ee:65:69:e6:65:7c:f4:17:58:c0:e8:02:40:57:d0:a7:fe:
         d0:52:ca:b5:3b:a9:ef:01:be:70:3f:5f:38:2d:35:30:41:d4:
         e3:c7:12:ef:e3:f6:fa:39:95:71:5f:7f:05:bf:2e:8b:ac:b3:
         32:bc:f2:d0:0d:0f:a7:02:24:ae:92:65:f0:26:1c:f6:1e:ee:
         5d:12:8e:a0:eb:44:07:e8:85:6b:d4:38:28:e3:77:f7:4b:30:
         be:93:bf:a0:8e:4f:90:12:6d:f7:9f:02:83:87:66:ed:3a:3a:
         07:d0:5a:01:73:ff:ea:8b:d7:a3:ee:07:39:8f:d4:d8:c9:ae:
         fc:04:b7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:18 2024 by rpki-client on console-fra.rpki-client.org