Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer
File:                     4579E09F6F46B73500F1877C7F7BC8F0F677E607.cer (raw, json)
Hash identifier:          fy48Tnx0X3qLkOMpf1YOsOKRKHQjiQmHcA/3UwPCveU=
Subject key identifier:   45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2A966A7820FCA80F4C75B5164BFC8B557B0E588F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/4579E09F6F46B73500F1877C7F7BC8F0F677E607.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 23 Jan 2023 21:30:23 +0000
Certificate not after:    Mon 22 Jan 2024 21:35:23 +0000
Subordinate resources:    AS: 262992
                          IP: 138.121.220.0/22
                          IP: 138.122.236.0/22
                          IP: 160.238.220.0/22
                          IP: 168.227.44.0/22
                          IP: 168.228.128.0/22
                          IP: 168.232.116.0/22
                          IP: 177.70.128.0/20
                          IP: 177.87.144.0/21
                          IP: 186.219.144.0/20
                          IP: 186.233.72.0/21
                          IP: 191.6.80.0/21
                          IP: 201.149.120.0/22
                          IP: 2804:9c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:96:6a:78:20:fc:a8:0f:4c:75:b5:16:4b:fc:8b:55:7b:0e:58:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 21:30:23 2023 GMT
            Not After : Jan 22 21:35:23 2024 GMT
        Subject: CN=4579E09F6F46B73500F1877C7F7BC8F0F677E607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:37:bd:38:a7:16:07:de:ed:41:86:7b:4f:
                    78:65:ac:58:93:6d:66:75:fb:72:95:af:0e:ff:d3:
                    29:1b:79:2c:65:fe:5e:31:98:8b:66:08:87:5a:78:
                    90:64:4d:3f:1f:75:f0:1a:d7:4f:4f:2d:2b:24:5f:
                    30:2c:84:4e:16:e4:93:12:f7:a4:e0:ca:64:b8:7d:
                    74:a7:28:35:e7:2f:e3:f8:08:41:6b:59:3f:70:6b:
                    d6:29:c1:01:62:df:c4:27:e3:75:12:42:33:f0:92:
                    86:b8:95:66:d9:de:27:49:bd:e3:56:f6:5b:7b:7e:
                    ac:a1:24:48:c2:c2:e3:29:71:a1:00:cf:74:d4:0c:
                    bb:51:1d:b9:58:d8:8a:95:f3:c5:c4:eb:c3:2c:60:
                    67:71:03:de:d5:3a:ed:ca:f5:43:67:00:4e:70:3e:
                    eb:1f:74:c0:c3:50:f1:db:cd:20:21:79:54:85:0f:
                    4e:ea:82:e2:3a:8d:f8:11:c1:12:91:c9:95:d2:ce:
                    fa:73:43:8e:2d:3b:cd:2e:9b:f4:c0:c2:27:fb:0a:
                    b5:d8:59:da:57:a6:e0:4b:ad:41:89:81:21:ce:32:
                    fe:97:53:b6:d5:8a:ec:cc:55:5a:8e:e1:b9:30:3e:
                    4f:47:e8:89:58:56:db:2d:43:47:e7:17:09:87:b8:
                    04:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                45:79:E0:9F:6F:46:B7:35:00:F1:87:7C:7F:7B:C8:F0:F6:77:E6:07
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/1/4579E09F6F46B73500F1877C7F7BC8F0F677E607.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.220.0/22
                  138.122.236.0/22
                  160.238.220.0/22
                  168.227.44.0/22
                  168.228.128.0/22
                  168.232.116.0/22
                  177.70.128.0/20
                  177.87.144.0/21
                  186.219.144.0/20
                  186.233.72.0/21
                  191.6.80.0/21
                  201.149.120.0/22
                IPv6:
                  2804:9c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262992

    Signature Algorithm: sha256WithRSAEncryption
         b6:82:2a:3f:f8:a0:75:ec:f6:21:1c:eb:90:06:d3:4f:5c:b8:
         1c:ea:f8:f4:9d:75:a1:7e:9e:88:8a:47:1a:f2:5f:28:1c:04:
         cd:1a:b3:11:f4:77:8c:8f:b4:0f:b8:a2:db:ac:99:21:08:de:
         08:26:1d:52:d6:31:dc:02:23:95:54:8a:e6:1a:ad:ee:0c:3b:
         d1:a2:fa:a8:31:43:b8:3a:38:cb:19:3f:9c:40:01:f5:99:b0:
         bf:0d:cf:3e:d9:22:63:d8:fc:63:e2:9f:6e:83:24:ca:05:ca:
         35:ff:25:f0:3b:c2:1f:f7:cd:d0:78:9b:0f:3c:35:a4:31:dd:
         1f:15:90:7d:46:bd:a3:15:06:4e:8a:fa:bc:95:03:fa:cf:41:
         82:12:61:ca:e8:4b:19:dc:b9:90:15:87:40:af:1c:b8:05:03:
         1c:8d:98:46:51:b5:73:cd:fa:a9:45:ce:95:5f:44:79:43:68:
         a1:7c:56:57:ca:9a:60:d0:c1:08:f9:5e:b3:ef:d6:d5:cf:e9:
         97:68:15:ec:a4:c6:50:7f:39:89:2f:4d:b9:a6:68:68:1e:87:
         b8:1f:44:df:c4:b4:85:e3:b5:ab:5d:c1:a0:9e:1e:18:10:e8:
         4e:56:2c:d1:f4:32:d3:42:4d:bf:6c:b6:02:75:b5:16:69:c9:
         b1:ae:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:27 2024 by rpki-client on console-ams.rpki-client.org