Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/47A4483760A1452D9F016AA73A83FD906D296F2F.cer
File:                     47A4483760A1452D9F016AA73A83FD906D296F2F.cer (raw, json)
Hash identifier:          9SJ7k0B208pLe30kSBN2g9dL04dTA64mJlJTzRYglbA=
Subject key identifier:   47:A4:48:37:60:A1:45:2D:9F:01:6A:A7:3A:83:FD:90:6D:29:6F:2F
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       5E52B8B649BE3DDC7A0BC051CB09C092FD9448CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/47A4483760A1452D9F016AA73A83FD906D296F2F.mft
caRepository:             rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 21:23:58 +0000
Certificate not after:    Wed 25 Sep 2024 21:28:58 +0000
Subordinate resources:    AS: 269163
                          IP: 45.181.24.0/22
                          IP: 2804:6060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:52:b8:b6:49:be:3d:dc:7a:0b:c0:51:cb:09:c0:92:fd:94:48:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 27 21:23:58 2023 GMT
            Not After : Sep 25 21:28:58 2024 GMT
        Subject: CN=47A4483760A1452D9F016AA73A83FD906D296F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:3a:7f:c1:c1:c3:f8:71:e2:96:6c:d0:ba:
                    9b:9f:df:d2:3e:cb:2b:37:78:b3:ec:93:d9:f8:27:
                    f8:bb:59:8e:f3:86:41:4f:38:d1:54:74:13:3a:58:
                    fc:42:9c:75:4a:a6:2a:c0:5f:81:7f:1a:b8:ec:8c:
                    e3:cb:55:ae:41:a2:b1:87:c1:6b:6a:b4:81:ab:a4:
                    fd:0e:de:ba:a7:2d:66:20:7f:bf:71:3a:a3:82:72:
                    25:e6:de:38:e4:5d:79:7d:a3:4c:ae:fe:ab:2b:30:
                    b4:6c:2a:6f:dc:78:e8:d7:5b:90:42:46:c2:8e:df:
                    60:1a:37:d7:71:a0:f8:1f:df:6f:d6:c0:85:ce:ec:
                    f4:89:d0:b0:31:ca:5f:1b:21:a5:55:ae:eb:4c:ff:
                    da:a3:90:05:07:98:17:1d:fe:7b:55:b2:7a:c9:b4:
                    89:da:63:60:53:fe:ba:14:92:af:70:fa:fb:12:da:
                    cf:32:64:11:fa:f4:e7:50:8f:33:c3:5d:8d:e6:4f:
                    ef:4c:b4:31:37:8a:5f:40:51:5e:36:98:30:c2:f7:
                    dd:b9:4b:cb:d8:43:18:d0:34:de:7c:e1:de:b0:e6:
                    c0:3a:20:45:52:f7:f5:6e:80:33:23:8d:ed:b4:4b:
                    50:d7:f8:57:a7:99:1c:c0:a4:61:13:70:d1:8b:62:
                    af:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                47:A4:48:37:60:A1:45:2D:9F:01:6A:A7:3A:83:FD:90:6D:29:6F:2F
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/4N7NiQAMV1gyxryzkyL1794XoWxHqhZicVgzT7mb8q3z/0/47A4483760A1452D9F016AA73A83FD906D296F2F.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.24.0/22
                IPv6:
                  2804:6060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269163

    Signature Algorithm: sha256WithRSAEncryption
         38:b5:93:ac:84:68:91:96:bf:0c:20:bc:5d:e0:78:cf:94:62:
         a3:aa:fb:38:7f:6a:c2:85:b0:cf:04:76:16:10:84:c1:a4:35:
         df:0f:c1:5a:22:98:28:78:e6:96:8a:70:5a:53:ad:23:ec:d5:
         58:2e:ea:99:84:43:79:19:cc:48:80:cf:a3:de:7a:50:85:01:
         e5:37:cd:7a:88:de:69:87:08:86:86:87:5f:72:92:33:3a:86:
         b9:ea:85:df:b6:8a:8c:d0:e8:4b:40:c9:a2:11:15:78:17:dd:
         8f:bb:77:6d:19:13:c2:2d:bd:be:f7:af:23:87:32:c6:23:67:
         70:ab:49:34:ac:ce:91:89:78:5b:61:c8:9a:d6:54:1c:11:8b:
         d2:b1:91:83:21:bf:3b:74:64:dd:a5:99:cb:e6:65:f6:69:17:
         6f:b7:85:8e:76:44:e3:bc:23:fb:6c:3d:f7:0f:34:21:f2:6e:
         64:05:1d:82:f9:35:09:63:da:17:61:ab:0f:68:e8:fc:5e:61:
         1d:ff:1c:7f:0c:73:1a:22:77:b2:4c:34:18:58:e5:63:3b:9e:
         9e:e5:05:e9:c0:bd:41:71:4f:02:00:c1:07:2a:e7:4a:c6:45:
         32:ef:4a:43:68:8e:75:59:f0:83:4b:1e:08:ed:60:5d:52:50:
         13:2a:d4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org