Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4508DC626CB59812F43AA010BC538A434ABD6FED.cer
File:                     4508DC626CB59812F43AA010BC538A434ABD6FED.cer (raw, json)
Hash identifier:          lPCzmkKvuKGaHsKwS5l6vexFhoxw1A4sctcMcoNvyjQ=
Subject key identifier:   45:08:DC:62:6C:B5:98:12:F4:3A:A0:10:BC:53:8A:43:4A:BD:6F:ED
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       04BEC33BFF058B198148839754072991A731DFE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/4508DC626CB59812F43AA010BC538A434ABD6FED.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 14:25:23 +0000
Certificate not after:    Fri 26 Jul 2024 14:30:23 +0000
Subordinate resources:    AS: 266948
                          IP: 45.225.192.0/22
                          IP: 2804:45c4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:be:c3:3b:ff:05:8b:19:81:48:83:97:54:07:29:91:a7:31:df:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 28 14:25:23 2023 GMT
            Not After : Jul 26 14:30:23 2024 GMT
        Subject: CN=4508DC626CB59812F43AA010BC538A434ABD6FED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:63:0d:05:70:b5:63:7c:be:7c:51:bd:d5:
                    73:08:df:53:d2:4c:6e:b1:bf:e9:f5:c8:93:52:9b:
                    b5:0a:e1:aa:4f:06:d7:6f:e8:43:0f:b5:4d:a7:59:
                    69:a8:85:16:4c:33:a8:1c:4f:06:7e:c4:3b:e1:e1:
                    86:7f:30:82:72:64:3d:de:60:ef:54:74:1c:04:8d:
                    28:a1:91:18:c2:1c:dc:3c:cf:74:57:d7:a1:0f:7b:
                    36:06:10:b2:c7:85:a2:b6:2d:95:cb:49:73:bc:ff:
                    1b:a9:f9:16:38:7c:71:7a:12:f2:9b:95:26:45:58:
                    7d:fc:0a:bd:da:a8:f9:c5:77:36:af:53:29:ec:33:
                    90:a6:87:30:3e:e4:9b:c3:04:cf:ce:9f:a0:1b:dc:
                    2f:73:a8:c4:55:d0:36:2a:a8:3a:e2:6d:df:89:da:
                    ae:f2:2c:52:3f:47:06:ef:56:bd:5f:b9:9e:7f:1d:
                    bb:26:15:7e:15:d2:65:3e:5f:66:6c:fd:80:6e:18:
                    db:8d:85:3e:85:b6:41:68:b7:b3:fc:55:16:8d:a1:
                    1d:98:ab:5b:c2:f4:56:fb:73:31:f4:84:74:ba:ff:
                    b3:18:4d:8d:b1:14:f6:17:e4:cb:f6:5b:e5:39:82:
                    87:ee:a5:27:6f:81:8b:5e:ef:f0:be:b8:21:40:a3:
                    5e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:08:DC:62:6C:B5:98:12:F4:3A:A0:10:BC:53:8A:43:4A:BD:6F:ED
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FuJc42oiVMpjNH85MwG3mq95UuaDochXG38bZnMtmcZH/0/4508DC626CB59812F43AA010BC538A434ABD6FED.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.192.0/22
                IPv6:
                  2804:45c4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266948

    Signature Algorithm: sha256WithRSAEncryption
         3a:70:33:1a:9e:76:8c:67:26:b7:1d:94:70:b8:be:3a:7a:3b:
         8b:83:1f:24:ab:65:5d:16:46:dc:19:44:22:c3:7e:a4:e0:bb:
         e1:f1:78:ac:c8:4f:f6:f4:05:c9:4b:91:f4:62:e5:90:aa:6f:
         df:da:83:24:8a:3e:a7:38:cf:01:c2:b9:b3:3f:f4:bb:a8:9f:
         02:41:51:24:ac:95:28:29:0e:50:9a:49:e8:79:17:b5:ea:e5:
         24:6d:89:67:89:e0:15:90:fe:ef:91:1e:3d:8f:86:f3:e8:00:
         0f:65:97:73:eb:33:a3:2a:e6:cb:08:40:84:ce:a3:46:8c:38:
         08:af:e3:f4:70:83:9e:78:c9:20:40:01:1e:d7:64:e9:57:d0:
         29:61:5a:ad:4d:7b:7d:5a:03:15:11:25:48:2a:7b:08:f9:7c:
         fd:10:16:8a:24:8c:03:01:a9:ef:a0:60:2c:bd:60:7e:09:12:
         0a:07:bb:d0:e8:44:bd:98:b3:d0:e4:1e:c5:d2:c9:18:0b:fe:
         c4:4c:c6:06:5d:af:18:62:aa:fa:39:92:3b:89:3b:f7:8b:1b:
         89:64:28:ca:dc:03:f4:4a:f2:e4:08:19:cd:31:e6:34:a6:6b:
         5b:01:32:dd:5e:81:bd:c1:5f:c0:25:19:34:99:12:45:ca:43:
         a8:a6:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org