Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/480044D1C1E80D367563D5778322A9B197E6E31C.cer
File:                     480044D1C1E80D367563D5778322A9B197E6E31C.cer (raw, json)
Hash identifier:          bz3SgkwV8LTHW3zNGvFlDuuiLtD9rfUjKwmnv7WWFoQ=
Subject key identifier:   48:00:44:D1:C1:E8:0D:36:75:63:D5:77:83:22:A9:B1:97:E6:E3:1C
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1483524D1D2DBA4E6B5F894AF65BCD66DAC43E4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/480044D1C1E80D367563D5778322A9B197E6E31C.mft
caRepository:             rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Jan 2024 22:10:59 +0000
Certificate not after:    Wed 01 Jan 2025 22:15:59 +0000
Subordinate resources:    AS: 268063
                          IP: 45.168.124.0/22
                          IP: 2804:5768::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:83:52:4d:1d:2d:ba:4e:6b:5f:89:4a:f6:5b:cd:66:da:c4:3e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  3 22:10:59 2024 GMT
            Not After : Jan  1 22:15:59 2025 GMT
        Subject: CN=480044D1C1E80D367563D5778322A9B197E6E31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a7:db:af:aa:6d:d0:47:78:f8:5f:d0:c3:7c:
                    5a:d3:c4:df:99:1b:78:80:7e:27:55:48:a6:d4:b3:
                    18:2e:63:3d:81:23:a4:40:0d:5a:49:d4:18:08:16:
                    0e:53:a5:70:9c:b5:0c:7b:c8:72:36:8f:e8:4f:36:
                    be:35:da:44:88:e3:e9:bf:6d:bb:ba:51:89:b7:ef:
                    3e:e8:d3:7e:66:9f:72:da:11:73:a8:90:28:ca:37:
                    d3:a9:dc:3a:ba:ce:28:5b:ea:69:d0:64:63:7a:36:
                    60:2a:db:4b:bd:0c:eb:a1:a3:2d:e8:f3:0d:3b:c3:
                    96:bc:cd:71:fd:04:43:16:50:12:28:81:d6:eb:93:
                    59:a4:be:26:0e:a5:51:48:78:4b:a8:ce:11:7a:13:
                    fa:3b:7c:45:7d:23:23:3f:ab:bd:7d:ca:a8:ef:54:
                    8c:57:bd:01:df:17:c5:d7:15:b5:f7:cd:e6:75:d0:
                    79:4d:b9:79:6f:82:9a:74:42:57:99:d0:fa:b0:df:
                    b8:b8:c4:6c:02:f7:b2:68:c3:af:02:69:e9:15:9e:
                    ea:da:bd:d2:e6:d3:53:7c:31:84:e1:ec:73:6d:6c:
                    88:f9:7b:b5:5a:0a:fa:4c:46:84:d0:05:c0:ff:3c:
                    7f:24:f4:bd:52:15:32:07:e8:7c:9c:aa:44:e2:fa:
                    5f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:00:44:D1:C1:E8:0D:36:75:63:D5:77:83:22:A9:B1:97:E6:E3:1C
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/480044D1C1E80D367563D5778322A9B197E6E31C.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.124.0/22
                IPv6:
                  2804:5768::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268063

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:ff:97:ba:88:d6:bf:d0:97:bf:1d:70:e5:83:6e:71:07:
         b0:17:9f:cc:ba:b5:2f:04:3c:bd:40:22:03:c4:fa:62:6b:8f:
         5f:19:19:e3:77:2c:4a:54:ba:a9:99:59:e7:3d:83:14:f5:1b:
         9a:07:28:e8:25:aa:03:11:d8:cc:a2:00:c9:f2:30:f8:36:7a:
         16:3a:89:24:0b:18:e6:6a:81:c7:42:ee:77:09:d2:f1:f5:eb:
         bc:0e:f6:3f:e5:c3:4a:0e:3a:19:2e:38:f7:ea:b3:c0:6d:0b:
         75:7c:6a:f3:0c:d1:78:53:67:91:35:20:d4:4d:68:ef:52:39:
         0d:e6:2d:09:d1:92:4a:92:d0:b8:bf:24:8b:02:ec:97:78:a6:
         8a:ab:6d:6f:32:af:8a:0e:9f:35:98:3c:7d:f0:7d:68:db:33:
         8b:08:c6:9b:5d:03:36:70:51:f9:9e:e0:ac:5d:eb:18:5d:95:
         52:ec:8b:87:ad:9b:7f:a5:4a:45:91:ae:be:8f:c8:9d:41:5d:
         0d:de:76:44:20:cb:1c:53:a6:53:42:f1:f6:e0:4f:60:60:c1:
         31:d4:c3:81:ba:6c:41:10:3b:91:6e:e9:55:12:ec:89:78:28:
         5b:48:b5:c7:fd:05:0e:71:05:e6:0b:66:2b:2e:63:39:1b:c1:
         be:f5:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org