Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/451763EEA73AF05AA3138E10173C59B220D0046A.cer
File:                     451763EEA73AF05AA3138E10173C59B220D0046A.cer (raw, json)
Hash identifier:          C1f2BYY9k/bsORMJW3hCZ0zsWw4C7o1QOfFJuKpWtFQ=
Subject key identifier:   45:17:63:EE:A7:3A:F0:5A:A3:13:8E:10:17:3C:59:B2:20:D0:04:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7405C627E1261A1C54679BA1EABD7F82344CDBF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/0/451763EEA73AF05AA3138E10173C59B220D0046A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 07 Dec 2023 18:06:31 +0000
Certificate not after:    Thu 05 Dec 2024 18:11:31 +0000
Subordinate resources:    AS: 262621
                          IP: 131.0.44.0/22
                          IP: 177.86.32.0/22
                          IP: 2804:720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:05:c6:27:e1:26:1a:1c:54:67:9b:a1:ea:bd:7f:82:34:4c:db:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 18:06:31 2023 GMT
            Not After : Dec  5 18:11:31 2024 GMT
        Subject: CN=451763EEA73AF05AA3138E10173C59B220D0046A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:f7:3d:76:66:28:61:05:21:f6:07:3d:3a:
                    35:f7:7c:da:99:ab:0c:84:5d:ee:83:d3:b6:6f:98:
                    05:7e:46:29:02:78:58:10:c2:21:4a:f8:ad:ca:02:
                    bb:2f:90:ca:61:c2:56:77:53:41:48:d2:47:e0:66:
                    92:0e:87:54:54:17:7f:01:af:58:bd:e4:34:5b:2d:
                    ec:ec:9a:ca:c0:74:c0:08:6a:cf:ee:77:44:66:a7:
                    53:1e:33:0b:a3:25:c9:2e:fd:cb:77:ee:6e:cd:21:
                    5c:8e:20:22:f9:a4:cf:22:6b:58:ba:8c:0d:9b:bf:
                    bf:a0:1d:76:9d:14:ff:7b:27:96:64:09:c2:5c:de:
                    2b:03:44:7d:b1:72:af:1c:04:3c:98:d5:aa:88:8a:
                    c1:11:09:38:f9:e8:cf:13:2b:5e:db:72:72:a8:eb:
                    95:41:c0:ee:f4:8b:17:36:10:98:49:a5:56:fd:f0:
                    2d:84:11:0f:16:82:fd:a9:68:9e:c2:69:d5:2a:20:
                    f1:a0:ec:af:df:47:8e:85:70:a1:06:ae:1b:5d:dd:
                    ac:e8:8e:4a:4e:48:e4:fe:3b:a9:8c:6c:94:9f:b0:
                    07:b0:a3:71:d9:82:fb:be:1a:b8:59:17:74:54:33:
                    3e:a9:b7:9b:60:f9:cd:69:55:c1:fb:b5:9a:59:a4:
                    f1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:17:63:EE:A7:3A:F0:5A:A3:13:8E:10:17:3C:59:B2:20:D0:04:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GXhikirREKLmfSjjdEfrySdUobhU2XTuvsXjPr7viM8e/0/451763EEA73AF05AA3138E10173C59B220D0046A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.44.0/22
                  177.86.32.0/22
                IPv6:
                  2804:720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262621

    Signature Algorithm: sha256WithRSAEncryption
         ae:bd:14:00:a8:6f:f3:a7:35:30:29:57:db:df:59:2c:3a:bd:
         2e:47:21:e5:da:c4:ec:c0:6a:ac:23:1d:99:b2:15:f8:8a:75:
         6a:ec:bc:63:83:e7:b1:7b:da:ea:fd:ec:4e:fa:a2:29:1f:eb:
         44:66:74:2c:c9:70:9d:0c:a0:e0:0a:74:c3:35:f2:e7:dd:44:
         90:c6:4d:95:27:47:ff:6c:06:dd:23:be:29:f3:47:ec:99:a0:
         d9:e2:0f:7f:44:d3:10:b7:ea:e0:df:a8:94:83:c1:48:ff:42:
         2a:60:e3:67:4e:3c:f1:4e:17:70:cd:4b:a1:d0:c2:70:0a:85:
         42:19:5e:9b:66:06:cc:57:42:3d:7b:b6:f6:49:67:cf:40:21:
         1d:e9:02:5c:e5:dd:4f:38:c6:8e:31:a4:b0:9a:69:fc:ef:e0:
         89:42:a6:97:81:40:bf:c8:92:4b:24:15:fb:85:20:f6:8d:cd:
         ff:87:56:43:7e:2b:f6:7f:c8:89:89:b6:d2:b9:f1:ec:6e:8b:
         ef:f6:3b:5d:4c:9a:eb:8e:6a:c4:1e:06:6b:e8:a8:76:94:f0:
         cf:41:40:97:47:da:b7:a5:f3:ae:e3:ab:c8:af:a0:5b:7b:6f:
         ef:ca:a7:54:66:41:3a:37:06:61:db:53:26:22:4a:f0:7b:65:
         0e:44:80:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:38 2024 by rpki-client on console-ams.rpki-client.org