Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4504054E9F641914E3EF0F436CCB1E127C868221.cer
File:                     4504054E9F641914E3EF0F436CCB1E127C868221.cer (raw, json)
Hash identifier:          +B2C3LXPxAm9Z5v1y51rBEr29ERZ8TzPYtph1fGs7xw=
Subject key identifier:   45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       62299B4A32CB17F1BAACE081EE56411DA2801A72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/4504054E9F641914E3EF0F436CCB1E127C868221.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 13 Oct 2022 20:13:09 +0000
Certificate not after:    Thu 12 Oct 2023 20:18:09 +0000
Subordinate resources:    AS: 28656
                          IP: 177.55.224.0/20
                          IP: 201.77.160.0/20
                          IP: 2804:33cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:29:9b:4a:32:cb:17:f1:ba:ac:e0:81:ee:56:41:1d:a2:80:1a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 13 20:13:09 2022 GMT
            Not After : Oct 12 20:18:09 2023 GMT
        Subject: CN=4504054E9F641914E3EF0F436CCB1E127C868221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:55:7c:0e:33:4e:44:2a:12:e5:49:8a:9d:
                    35:43:24:e8:ab:ef:57:40:24:a7:92:8e:c3:4f:67:
                    d6:3d:c9:a4:eb:a3:40:cd:62:1d:62:ff:8c:85:fe:
                    04:06:54:2b:7e:42:27:fe:6a:6e:43:fa:4b:8b:3d:
                    41:4e:7c:1d:36:b7:96:2f:7f:a9:2b:73:93:5c:57:
                    f0:b6:fa:00:df:58:13:66:8e:74:1a:8d:08:50:60:
                    6c:22:59:e1:49:8b:aa:ff:6d:41:42:46:0c:9a:5d:
                    3e:7c:4e:65:54:66:8d:a4:b1:29:3b:87:63:d7:49:
                    18:5b:b7:4f:94:6d:6f:15:27:68:08:c9:a0:f0:a7:
                    83:25:7a:31:af:ca:5b:97:28:5e:c1:20:1e:97:3e:
                    a0:df:76:5d:61:4f:3c:af:fb:eb:76:83:fa:16:b9:
                    e2:26:e4:1a:89:86:9e:7b:70:c2:b9:6b:82:2a:13:
                    c3:30:7a:96:31:f4:30:b8:ac:77:94:25:67:af:52:
                    1e:91:f2:8b:27:6a:91:b9:2d:a5:a1:49:30:2c:09:
                    77:89:81:84:71:b9:a0:b7:25:5a:e2:fa:a4:4f:73:
                    40:e9:68:26:1e:04:b1:d0:9d:10:26:29:3d:45:67:
                    9d:aa:0f:3d:05:da:f9:db:2f:a8:30:be:4e:b2:2b:
                    9f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:04:05:4E:9F:64:19:14:E3:EF:0F:43:6C:CB:1E:12:7C:86:82:21
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/0/4504054E9F641914E3EF0F436CCB1E127C868221.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.55.224.0/20
                  201.77.160.0/20
                IPv6:
                  2804:33cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28656

    Signature Algorithm: sha256WithRSAEncryption
         2d:e4:3e:c5:93:d3:f5:dc:f2:1b:88:42:9c:2f:b5:b8:4c:a3:
         a5:26:18:10:a6:d0:9f:41:0e:41:56:09:a6:09:46:c2:b4:3f:
         6a:41:63:3c:49:76:eb:30:da:40:10:99:31:83:03:29:a8:28:
         6b:36:34:39:a2:36:a6:d4:05:4b:9a:0d:7b:73:72:a4:dc:0a:
         10:d5:13:b6:5a:d9:d2:42:3d:f7:5e:58:71:98:ba:1d:2a:a2:
         6d:0c:29:aa:73:06:9c:57:d0:a8:82:4f:7a:37:81:8e:ff:9f:
         22:eb:f2:ca:94:17:07:50:66:19:48:f0:f6:ba:e0:9e:85:92:
         5b:bb:dd:e5:56:c5:90:86:fa:31:4e:41:93:c6:67:6c:ca:e6:
         23:b5:b3:52:c1:cc:99:da:ca:c0:83:7a:95:df:2e:7e:d7:8f:
         a7:58:69:af:6e:53:52:8e:99:84:9c:fd:f4:4d:28:d8:7e:7a:
         4d:18:11:e8:4f:aa:e5:20:31:f7:76:dd:94:1f:ab:9a:bb:9f:
         7d:d8:25:7c:0f:f4:75:ce:52:66:d8:e3:70:f3:7c:5c:12:5f:
         cc:39:08:9d:71:20:0e:ac:1a:5e:e5:18:a3:fd:d5:84:bc:4c:
         bd:df:86:9c:ec:27:c2:fb:00:b7:3e:32:47:f6:f7:0d:d5:72:
         84:e9:82:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org