Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/48469D9D89C528933B8C832F0845184B72554526.cer
File:                     48469D9D89C528933B8C832F0845184B72554526.cer (raw, json)
Hash identifier:          LuUoEdNk5JBF/4+u+GfPc0In2NzmI9nYZ7S+q4/+npU=
Subject key identifier:   48:46:9D:9D:89:C5:28:93:3B:8C:83:2F:08:45:18:4B:72:55:45:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6DCDEC0E3A334C08AEAAB72A73E4B655593540AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/48469D9D89C528933B8C832F0845184B72554526.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 30 Jun 2023 15:23:15 +0000
Certificate not after:    Fri 28 Jun 2024 15:28:15 +0000
Subordinate resources:    AS: 266342
                          IP: 170.239.80.0/22
                          IP: 2804:3654::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:cd:ec:0e:3a:33:4c:08:ae:aa:b7:2a:73:e4:b6:55:59:35:40:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun 30 15:23:15 2023 GMT
            Not After : Jun 28 15:28:15 2024 GMT
        Subject: CN=48469D9D89C528933B8C832F0845184B72554526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:b8:a2:10:bf:22:b5:ef:53:0f:9a:12:cc:
                    29:4b:ea:57:12:f2:2c:18:de:a1:51:09:26:8c:30:
                    ce:a4:ed:f4:d5:e8:d0:88:6f:2f:c9:b1:06:45:c1:
                    1f:77:c1:85:cc:a0:f6:df:72:7e:f4:69:a7:e4:88:
                    82:00:51:94:13:b1:9b:49:ac:0a:f3:0c:22:19:91:
                    22:a1:a6:ef:7e:7c:6e:bf:05:9b:f0:71:ee:41:69:
                    3b:25:02:a2:43:d3:0e:78:ca:1c:30:f0:26:db:24:
                    2a:d1:a4:0a:c3:2f:6b:fa:5a:2c:f5:5a:f5:98:8c:
                    8c:4a:9c:c5:35:92:49:4d:c7:a0:68:1e:c6:6a:c6:
                    b7:12:6d:cf:7d:ba:e4:76:10:9d:0f:ea:fc:97:3a:
                    40:18:b3:f1:41:5e:bd:dc:2c:9a:d5:ba:63:5d:6f:
                    67:2c:c9:21:8f:16:70:ec:08:aa:be:62:21:7b:15:
                    de:91:16:81:9a:d7:c3:dc:80:cb:1d:3b:4c:15:38:
                    e7:87:91:5a:79:8b:1e:f3:cb:7c:0e:7c:08:fb:ff:
                    9c:dc:be:68:f3:c5:cc:b1:27:f9:ad:b5:cc:79:41:
                    67:83:42:fd:91:c7:50:3e:fd:77:ee:06:f8:21:89:
                    31:a3:60:52:6e:0b:d6:e7:bf:a5:a2:7d:fa:66:25:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:46:9D:9D:89:C5:28:93:3B:8C:83:2F:08:45:18:4B:72:55:45:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CWGEwbDANqF75dLCtyAFGHf7C83mX7FBQZ7Uh95i4c5v/0/48469D9D89C528933B8C832F0845184B72554526.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.80.0/22
                IPv6:
                  2804:3654::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266342

    Signature Algorithm: sha256WithRSAEncryption
         36:63:b0:b5:03:9e:3d:76:db:a8:de:64:c0:8f:26:8d:0c:3a:
         6e:c7:95:b6:74:3f:d3:37:a3:89:55:04:86:9b:7c:13:8e:cb:
         a1:5e:79:a6:c4:fb:f1:de:a0:62:48:97:dc:ef:18:d4:63:b8:
         ca:eb:29:f9:ef:dc:02:6e:2a:cc:7a:55:f8:bc:2b:d3:47:3d:
         8b:c2:c2:f3:cf:98:0b:5d:56:87:cf:41:da:bf:11:d2:19:b6:
         08:ea:0a:8c:2a:12:50:5a:65:7e:db:7b:94:86:96:c5:0e:74:
         23:3c:04:b1:22:7d:5f:c7:94:82:05:27:11:56:0e:c5:63:83:
         f7:30:a2:9a:8a:81:2c:2c:06:71:25:af:f0:a8:b7:7d:cd:de:
         a4:35:12:4b:7b:31:fc:72:f1:fa:f6:8e:f7:d3:e5:f5:34:f6:
         d2:c6:d9:54:8f:52:2f:c0:54:e9:83:6b:c8:39:5d:3d:95:56:
         65:bb:51:ea:ed:b8:7e:9b:1a:39:c1:af:b0:fd:69:a4:16:76:
         2f:34:90:3d:90:31:45:86:94:a4:ed:76:88:dc:63:f0:01:83:
         2b:8a:4c:ff:cc:b9:04:51:b0:d3:05:f3:7b:87:d0:63:f9:d8:
         90:13:af:bf:e3:3c:3b:73:22:a3:ae:86:58:38:c7:9c:65:8c:
         f1:61:02:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org