Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer
File:                     4502CD1B49644F16402D764130FC71B676EC91F0.cer (raw, json)
Hash identifier:          3zT3zjeoUrmL8wAtSx0nGj7IofM1S1g4QFJL+JVCfQA=
Subject key identifier:   45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5FE9F3086DEE8407A7FD8018748088904B3318FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/4502CD1B49644F16402D764130FC71B676EC91F0.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 11:40:08 +0000
Certificate not after:    Mon 23 Sep 2024 11:45:08 +0000
Subordinate resources:    AS: 262893
                          IP: 45.230.24.0/22
                          IP: 168.121.196.0/22
                          IP: 177.23.112.0/21
                          IP: 177.38.8.0/21
                          IP: 2804:6c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e9:f3:08:6d:ee:84:07:a7:fd:80:18:74:80:88:90:4b:33:18:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 25 11:40:08 2023 GMT
            Not After : Sep 23 11:45:08 2024 GMT
        Subject: CN=4502CD1B49644F16402D764130FC71B676EC91F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:9d:df:3f:88:ef:78:6f:8c:91:16:96:04:
                    75:96:90:09:e1:dd:59:fb:80:e5:ab:f9:72:c2:7b:
                    e8:cf:96:a2:ea:73:5f:b0:92:8f:d2:77:f2:46:7f:
                    49:87:5e:95:60:c0:02:d5:06:e2:b1:55:66:8a:36:
                    51:bd:dc:1c:49:d9:31:1a:38:8c:46:7b:04:0e:68:
                    f5:5a:76:02:cb:da:4e:8a:23:4d:5b:89:e1:b8:37:
                    59:f8:3e:39:4f:03:92:df:26:3a:5b:b3:92:9e:93:
                    ff:40:0f:95:e8:cd:28:77:1e:43:b4:8e:2f:cc:1a:
                    2c:a1:bd:2f:a7:15:78:5f:a4:c3:35:dd:e1:4f:0b:
                    96:6c:45:f5:38:93:08:8f:59:ee:75:39:d9:7e:be:
                    23:7c:5e:e1:f8:9d:cc:66:ca:63:32:37:35:e7:36:
                    b7:d7:ff:5b:e7:35:82:8a:91:b4:20:52:82:43:ae:
                    6a:bd:fb:3e:38:c8:6e:ba:7c:ef:df:13:82:a7:38:
                    b9:88:05:c3:03:3d:22:85:c1:05:01:2c:dc:3c:a3:
                    4f:2f:71:2e:40:5b:2c:34:51:8c:9a:3c:de:1a:e3:
                    db:50:36:32:2b:78:0e:35:2f:ec:64:9d:53:4d:74:
                    df:63:c0:f5:8f:ab:76:b3:1a:7e:d9:d5:cd:0b:34:
                    f9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/4502CD1B49644F16402D764130FC71B676EC91F0.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.24.0/22
                  168.121.196.0/22
                  177.23.112.0/21
                  177.38.8.0/21
                IPv6:
                  2804:6c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262893

    Signature Algorithm: sha256WithRSAEncryption
         97:70:a3:fd:98:f8:fb:b2:1d:cb:8f:37:76:75:49:a9:a8:e0:
         20:79:2a:05:a6:22:c1:78:05:19:31:7c:2a:91:3e:73:64:4d:
         3c:78:69:0a:9e:11:04:d5:08:0e:b5:6b:f4:98:c5:39:f0:eb:
         69:e5:eb:31:ee:1b:1e:1b:b4:5f:17:ae:39:25:f2:77:75:7e:
         8c:a6:85:fa:f7:9c:20:72:b1:da:05:d3:41:3a:9a:fe:6c:e6:
         ea:a8:66:dd:da:87:f2:28:be:0b:2b:83:7b:80:ce:70:62:03:
         c1:e2:e1:7a:fb:5d:58:54:99:2d:31:75:c0:7f:9a:2b:1d:46:
         09:4e:c2:fc:a3:27:55:b7:ff:80:ab:12:ab:f2:76:6c:b4:7d:
         35:6c:ce:16:27:65:6f:3f:d1:71:4e:98:d5:2d:97:90:28:31:
         a0:1a:5f:0a:80:0b:0f:56:03:5e:6d:ee:4f:a5:b8:98:ef:00:
         d9:9f:25:3b:d0:d9:38:12:69:a6:85:fd:4d:66:9a:8a:eb:82:
         c4:62:71:ff:76:da:ea:76:2d:de:b4:d1:16:65:f4:08:05:24:
         b6:48:ce:4f:3e:54:df:77:8d:eb:93:fe:90:26:09:ee:88:8d:
         f7:84:3d:bf:76:2d:31:91:35:79:70:5d:4a:99:ed:e8:0c:71:
         e6:cc:9f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org