Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.cer
File:                     468DA4BD4B56C002A350399568E4DF9A59150F9E.cer (raw, json)
Hash identifier:          U1IP1GtGGspVXI34LKDEa83r8UetXJCswmnGCbv0Vcg=
Subject key identifier:   46:8D:A4:BD:4B:56:C0:02:A3:50:39:95:68:E4:DF:9A:59:15:0F:9E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       15D01757C9AAFDBBB330383BFB40BC1337A2A208
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 07 Jul 2023 14:44:13 +0000
Certificate not after:    Fri 05 Jul 2024 14:49:13 +0000
Subordinate resources:    AS: 269047
                          IP: 45.178.208.0/22
                          IP: 2804:5ea4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d0:17:57:c9:aa:fd:bb:b3:30:38:3b:fb:40:bc:13:37:a2:a2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  7 14:44:13 2023 GMT
            Not After : Jul  5 14:49:13 2024 GMT
        Subject: CN=468DA4BD4B56C002A350399568E4DF9A59150F9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:31:f5:33:76:e9:7f:80:d4:24:e6:86:cd:d2:
                    e4:0b:c2:6e:24:b4:c6:65:26:0b:4e:69:5a:b4:d9:
                    32:1c:1b:52:70:16:54:38:ab:f8:34:92:38:9d:3f:
                    79:d2:df:f6:a6:bc:fd:f2:5f:10:46:41:c5:33:e4:
                    11:d7:cf:e9:ef:6d:fd:85:9c:3c:38:db:0b:22:11:
                    df:9c:70:62:88:67:d0:8a:2e:06:58:d1:93:7e:f3:
                    36:24:9d:67:46:3d:0a:6c:d2:1a:51:a5:29:ac:11:
                    a5:bb:a7:ca:50:c2:a5:2f:03:54:bb:2f:b6:30:52:
                    ff:e9:f2:b0:2f:2b:de:ea:bb:a1:a9:16:8e:43:7c:
                    7a:5a:05:73:ea:74:f1:c6:92:6e:7c:cc:ba:15:53:
                    eb:d4:24:01:52:80:51:1c:28:6f:54:6e:56:f1:fe:
                    b0:2b:8a:f9:5b:d2:d1:a9:b1:33:3e:78:5a:e8:7f:
                    9f:92:de:bd:4b:70:e1:0e:f4:35:18:9b:a6:c2:65:
                    5d:75:39:d8:57:20:b8:15:c3:67:eb:f1:eb:39:dd:
                    02:6a:13:f7:91:16:47:40:6d:2c:88:0d:e5:7d:de:
                    ae:dc:78:8b:52:44:3b:74:c6:35:81:24:6c:d2:d8:
                    8e:71:6f:4a:03:96:7d:e7:2f:ca:4e:87:33:ee:ae:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                46:8D:A4:BD:4B:56:C0:02:A3:50:39:95:68:E4:DF:9A:59:15:0F:9E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2n44VJSayG2Cfg1tcq1WDecJb9bVVzivwBpE5GPkN6ej/0/468DA4BD4B56C002A350399568E4DF9A59150F9E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.208.0/22
                IPv6:
                  2804:5ea4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269047

    Signature Algorithm: sha256WithRSAEncryption
         94:66:cc:99:4d:9e:8c:19:1b:28:28:b9:42:7a:0a:44:84:61:
         fb:00:00:47:f1:35:1e:b5:8e:d6:b2:a2:ac:32:92:89:ea:0d:
         16:32:0d:ad:3d:b5:a8:ec:94:0c:79:31:cd:f9:66:10:da:89:
         25:9a:6a:c8:59:86:34:01:b1:23:b9:89:e0:9e:de:5f:9d:c3:
         25:0e:c2:a0:e5:98:0d:7f:5b:39:0b:e6:43:3b:96:60:ea:33:
         af:fe:5c:24:fb:20:52:79:24:d3:a8:5e:45:43:cb:18:22:57:
         5c:86:02:47:73:3c:dd:0c:7f:e2:91:83:0c:26:1b:66:bd:a3:
         9d:42:a4:84:1d:b4:b8:5a:16:fd:20:8d:8b:56:87:7d:a7:a4:
         70:e6:4e:10:2f:45:7c:d8:c3:65:06:3c:8f:15:59:5c:96:a2:
         44:3a:97:be:5f:17:f8:5b:dd:f3:16:5d:d6:34:1d:cc:92:13:
         9f:c0:c9:49:92:7a:6e:1a:9c:76:07:c8:3c:8f:88:82:21:7b:
         42:1d:2e:3b:2e:ba:45:e6:cc:02:e3:00:be:75:d8:00:b9:32:
         be:07:02:e9:56:4c:8d:44:97:07:1b:65:b5:48:54:47:ba:c1:
         f4:c6:c7:52:1e:1e:79:6d:2f:0f:e5:3e:36:5c:48:a8:50:55:
         37:62:67:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org