Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/42713794BF677C50BCF40D5132CCA9FB8FF939FF.cer
File:                     42713794BF677C50BCF40D5132CCA9FB8FF939FF.cer (raw, json)
Hash identifier:          R+wD6VALrCcjNkTKmnMobNjUFuHUHfIz1QLTQMJhZgY=
Subject key identifier:   42:71:37:94:BF:67:7C:50:BC:F4:0D:51:32:CC:A9:FB:8F:F9:39:FF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4C0FA7743E11650A02C3FE412C29043730CDBAD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/42713794BF677C50BCF40D5132CCA9FB8FF939FF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 09:20:21 +0000
Certificate not after:    Tue 21 May 2024 09:25:21 +0000
Subordinate resources:    AS: 269276
                          IP: 45.182.88.0/22
                          IP: 2804:621c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:0f:a7:74:3e:11:65:0a:02:c3:fe:41:2c:29:04:37:30:cd:ba:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 23 09:20:21 2023 GMT
            Not After : May 21 09:25:21 2024 GMT
        Subject: CN=42713794BF677C50BCF40D5132CCA9FB8FF939FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ad:1b:3f:16:43:90:65:d0:03:28:eb:69:4d:
                    ec:43:bd:0a:13:54:07:ea:d7:25:70:fb:43:b3:ea:
                    b4:14:ff:bc:75:33:f3:ba:13:0c:51:78:bf:b8:c6:
                    a5:ef:46:10:a9:82:5f:83:43:3b:81:f7:96:db:c6:
                    26:6c:2b:6e:3e:9d:b7:a2:84:db:d2:d7:2b:9d:34:
                    3e:61:16:a0:d0:8f:45:e9:18:d8:16:44:68:df:c5:
                    6b:cd:2b:5a:d9:f1:28:32:76:d6:f7:50:c5:72:9a:
                    63:6f:aa:fe:57:f1:fe:ac:71:54:58:4e:db:30:8d:
                    22:68:c8:1b:fc:ca:74:6d:d1:99:4d:f5:30:05:16:
                    8b:af:74:cf:9d:a2:d9:b9:b1:bf:13:17:84:3c:30:
                    fc:91:19:c2:c8:eb:27:b4:2f:f5:aa:19:af:e3:2d:
                    cb:79:6d:d7:05:72:b9:45:bd:b1:21:0f:92:8f:31:
                    c6:9a:3e:b6:d0:d7:94:96:31:30:10:86:4f:4c:be:
                    ae:4f:ad:d3:3f:50:ee:f6:f9:27:03:1e:e8:72:51:
                    7f:68:1b:39:45:15:4a:76:01:0d:bc:15:67:cc:06:
                    49:9d:47:98:c3:4a:4f:9f:71:1b:56:6d:1b:ea:0f:
                    63:49:ff:b0:5b:77:1d:14:70:c7:df:1b:6d:e0:4c:
                    74:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                42:71:37:94:BF:67:7C:50:BC:F4:0D:51:32:CC:A9:FB:8F:F9:39:FF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/6x6GwSHWUKQr9H9suKr67AUfpCrpqxWKdQzfgmUZQjjW/0/42713794BF677C50BCF40D5132CCA9FB8FF939FF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.88.0/22
                IPv6:
                  2804:621c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269276

    Signature Algorithm: sha256WithRSAEncryption
         ad:4b:04:f4:31:ab:dc:90:99:65:11:18:02:9b:d9:de:0c:a9:
         77:ff:10:a6:fb:69:51:3b:69:5f:ef:a4:c5:ed:43:63:ca:dc:
         42:6a:48:28:06:bb:ca:84:ac:67:96:52:78:81:cf:e0:bf:02:
         4e:20:5d:a8:ee:7d:e5:a9:e2:c7:7c:97:89:55:48:52:50:62:
         e9:3d:11:87:d0:c4:36:c5:eb:f0:5e:86:e6:b6:3d:8a:2c:95:
         ae:0e:56:07:ff:c7:66:4e:88:2d:f2:c7:ba:fa:65:11:6c:72:
         a1:17:a3:bb:80:80:cd:46:85:8e:2e:1a:54:8c:d0:f0:71:48:
         31:41:f8:9e:fa:05:1a:bf:08:51:49:72:4e:c4:92:84:11:d1:
         4c:2c:5d:7a:9f:64:f8:b0:39:fd:fb:7a:cd:77:6b:f0:a7:67:
         b0:fb:64:da:d7:ed:73:58:cf:29:8f:0d:a4:ae:5f:47:78:01:
         1a:7c:2d:e3:ee:fb:89:4f:c0:82:a7:26:fb:23:57:c2:45:5d:
         d8:f5:5f:14:f7:ad:bf:b0:08:ce:f5:ab:84:72:de:af:9a:a2:
         a9:63:ba:38:9a:91:02:0d:74:db:08:6b:f0:c6:f0:10:b9:58:
         dc:f4:e5:7f:82:b5:a5:33:7b:5c:de:34:6e:aa:2c:94:6a:48:
         1b:23:17:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org