Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/41CC1149A395221179532F4A07FA147494164BDB.cer
File:                     41CC1149A395221179532F4A07FA147494164BDB.cer (raw, json)
Hash identifier:          L8YxF4uQyaksHtlDC0kFYxJgw0cfwFu3g4l3uxs8r/A=
Subject key identifier:   41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6EDB00A7CF7BC4EA35D81FD482F74763B2DD0FB5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/41CC1149A395221179532F4A07FA147494164BDB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 24 Jul 2023 12:35:11 +0000
Certificate not after:    Mon 22 Jul 2024 12:40:11 +0000
Subordinate resources:    AS: 268518
                          IP: 45.162.128.0/22
                          IP: 2804:5270::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:db:00:a7:cf:7b:c4:ea:35:d8:1f:d4:82:f7:47:63:b2:dd:0f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 24 12:35:11 2023 GMT
            Not After : Jul 22 12:40:11 2024 GMT
        Subject: CN=41CC1149A395221179532F4A07FA147494164BDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:3d:a6:6b:66:07:41:aa:41:5f:b2:be:39:
                    fc:61:e3:78:9e:3c:1c:b3:89:05:5c:13:f2:21:24:
                    be:33:29:a6:fe:6c:05:7a:30:99:59:ef:53:78:80:
                    3c:2d:e6:45:8e:91:d3:77:81:51:b8:ca:ff:4d:de:
                    99:f5:f1:e7:ea:92:fa:04:60:4f:ce:13:60:f0:39:
                    fd:db:f9:95:6f:79:25:5a:e5:10:ef:28:b3:43:0c:
                    e1:58:93:d1:ad:65:38:06:7e:05:67:ef:eb:f4:49:
                    6d:4b:ff:5d:53:05:b8:fd:82:bf:f8:10:d1:d1:d6:
                    c3:46:1b:3a:fb:c2:24:39:f1:d8:47:73:eb:e7:00:
                    6e:51:78:3f:b6:e2:01:eb:b7:f9:3e:5d:56:0e:de:
                    2b:14:ab:da:d8:2d:bc:6a:67:da:d9:42:72:b2:a1:
                    29:98:dc:63:4b:6a:e4:48:ff:5a:7d:df:19:38:eb:
                    12:4a:86:67:87:9d:a1:6d:ca:86:1c:3d:ce:33:e6:
                    99:36:97:79:38:e3:db:9f:dc:47:a4:66:94:90:b9:
                    2b:33:00:48:99:40:91:13:6d:61:5b:9d:c1:b2:81:
                    fd:e3:74:09:e2:eb:93:45:dc:e2:bb:23:5d:2c:0f:
                    3d:34:1a:a5:4a:b7:70:13:fa:95:b4:45:7f:cd:d8:
                    b3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                41:CC:11:49:A3:95:22:11:79:53:2F:4A:07:FA:14:74:94:16:4B:DB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BCAPXUVodSa2VKjMX1XaTA93vvtr7NBWbfXdd2BLrKQu/1/41CC1149A395221179532F4A07FA147494164BDB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.128.0/22
                IPv6:
                  2804:5270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268518

    Signature Algorithm: sha256WithRSAEncryption
         6e:62:2e:7b:8d:1b:c2:6b:16:c3:17:78:19:fa:77:1c:be:0b:
         58:26:b5:ce:33:6d:e4:00:18:fb:d6:03:a8:11:95:02:bc:de:
         04:75:b4:e7:84:e1:25:42:5e:85:0e:d2:aa:9e:d1:fc:a4:e7:
         64:c1:04:49:eb:cd:2b:e8:b6:f4:ae:db:d6:e7:b0:76:2f:71:
         95:55:ec:8b:e5:da:55:a8:15:88:7e:78:cc:f8:55:5a:ef:8f:
         06:87:51:aa:fa:23:3f:d0:0b:fe:62:3d:ef:ac:cc:9a:54:a8:
         0a:38:b7:e1:9b:1f:a4:f0:08:dd:81:6e:2a:19:21:06:6d:ce:
         9b:e3:4c:bd:35:17:10:c8:f5:a1:b6:8b:35:2b:c0:5a:c1:45:
         ef:18:ac:fc:8c:3e:af:24:2f:58:11:48:db:a6:7c:3f:3d:36:
         00:b9:0c:91:05:5d:d5:98:02:10:97:c9:06:5d:a2:ee:4a:90:
         3f:08:ed:9e:49:05:99:74:5a:3a:dc:c6:a5:07:23:34:79:8f:
         39:7c:00:d9:24:9b:1e:ec:fb:fa:f2:03:81:0a:05:ef:c7:d9:
         6b:82:ef:8c:a2:63:e8:9e:66:dc:bd:44:9d:37:0f:29:5a:1f:
         ef:42:ce:90:e9:b7:e2:4b:70:dc:ec:5a:58:7d:12:fb:8f:97:
         af:92:34:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org