Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/483787B7037C3DA540ACD3A5B893D65DA468956A.cer
File:                     483787B7037C3DA540ACD3A5B893D65DA468956A.cer (raw, json)
Hash identifier:          ucP+fOOh5X6warqWuIdrwep391v/Ky4FD6cYFzctYjY=
Subject key identifier:   48:37:87:B7:03:7C:3D:A5:40:AC:D3:A5:B8:93:D6:5D:A4:68:95:6A
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7DBBBB0DC671F2476F8E1FAE2D58946C6285B885
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/483787B7037C3DA540ACD3A5B893D65DA468956A.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 03 Feb 2024 20:55:17 +0000
Certificate not after:    Sat 01 Feb 2025 21:00:17 +0000
Subordinate resources:    AS: 270684
                          IP: 45.228.12.0/22
                          IP: 200.187.104.0/22
                          IP: 2804:6fc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:bb:bb:0d:c6:71:f2:47:6f:8e:1f:ae:2d:58:94:6c:62:85:b8:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  3 20:55:17 2024 GMT
            Not After : Feb  1 21:00:17 2025 GMT
        Subject: CN=483787B7037C3DA540ACD3A5B893D65DA468956A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:17:02:81:d3:da:9b:4f:4c:0c:e1:1c:1a:
                    a5:c7:50:82:91:a1:b0:87:1c:a3:87:24:97:a2:d8:
                    cf:b1:ce:17:22:0b:eb:63:15:0a:9c:3f:aa:6b:e2:
                    0b:e4:d6:b5:ad:61:2f:bf:9b:e3:00:ca:9e:f9:ff:
                    ee:cd:cd:fd:82:9d:f2:37:b2:d8:c3:83:d0:26:29:
                    8a:78:f7:e2:c2:ab:19:50:70:b4:43:17:75:fd:3f:
                    d9:01:18:26:f9:71:97:40:fa:dd:fc:f5:33:ab:52:
                    b1:69:1b:5a:ff:32:f9:29:3f:6a:a8:08:0b:5a:46:
                    f6:cd:2c:a0:a7:a9:3d:42:9f:12:5e:ed:1e:45:fc:
                    47:b1:87:db:b9:67:f0:e7:c2:41:e7:33:f5:a6:76:
                    99:d5:8a:65:48:7b:e1:5b:54:5b:91:44:68:49:4e:
                    3f:ab:aa:78:f8:d5:f0:fa:b7:f9:be:38:92:2c:ca:
                    4b:d4:fd:07:4c:06:dc:8b:3e:33:01:40:da:67:e4:
                    3f:e2:7d:20:45:76:dc:bf:20:60:8e:ca:f5:4b:87:
                    8c:d3:d3:ef:4d:bc:1d:bc:86:55:78:7e:c8:5b:31:
                    01:71:2d:97:9b:ff:75:d1:f2:8b:fa:4e:5f:32:58:
                    3b:a0:b7:36:1f:62:6c:40:84:67:e9:d5:f2:ca:53:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:37:87:B7:03:7C:3D:A5:40:AC:D3:A5:B8:93:D6:5D:A4:68:95:6A
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/483787B7037C3DA540ACD3A5B893D65DA468956A.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.12.0/22
                  200.187.104.0/22
                IPv6:
                  2804:6fc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270684

    Signature Algorithm: sha256WithRSAEncryption
         99:ec:ea:4d:a1:f9:72:11:46:3a:68:d1:9e:da:2e:1f:99:56:
         d2:58:8f:b2:90:d4:88:3b:ce:96:d7:11:4b:bc:38:3f:90:e2:
         a8:31:de:24:20:4c:c4:96:da:d8:07:14:52:89:01:20:31:f2:
         5f:24:1f:99:1c:8f:15:b6:4d:da:de:77:46:5e:c5:92:d5:41:
         91:52:75:2b:c7:f5:4f:45:43:25:52:03:ee:93:87:e7:4c:d6:
         d8:06:1b:2b:97:b1:3e:ac:c2:14:07:ab:22:ee:af:1b:b0:25:
         2c:a3:d7:dd:e4:fc:0a:4f:2f:d6:60:30:0a:8c:eb:8a:2c:2f:
         d4:de:9c:cb:67:4a:9c:30:84:68:bb:60:33:5e:51:d9:21:b7:
         f8:33:62:b6:92:cc:03:7d:ad:2f:6f:18:61:23:cf:e9:45:58:
         27:32:fc:ad:f3:35:4c:3a:66:a1:40:9c:db:0f:64:b0:2f:a2:
         ca:be:46:59:2f:3b:c2:28:b7:c2:3b:6b:f1:e9:b8:1c:5e:f6:
         20:79:0d:0b:ed:75:da:34:6f:72:00:e4:a9:33:48:f2:d3:b5:
         51:3e:a3:6d:89:d0:46:d3:e6:9a:c7:10:44:72:28:6a:e4:97:
         b6:c2:0f:45:70:9d:08:af:d5:3c:47:e0:1d:8a:d5:39:af:c0:
         c8:05:2c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org