Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/488250699EA593A12DBCA068B1EB47DFCD0FAC3E.cer
File:                     488250699EA593A12DBCA068B1EB47DFCD0FAC3E.cer (raw, json)
Hash identifier:          n76OXVpRRf7XQd6QHpRo8W/IQKcRT2ejbALPR9NHkU0=
Subject key identifier:   48:82:50:69:9E:A5:93:A1:2D:BC:A0:68:B1:EB:47:DF:CD:0F:AC:3E
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       71B16963674E8629AD291C5279F2A6093E45092E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/0/488250699EA593A12DBCA068B1EB47DFCD0FAC3E.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 22:08:28 +0000
Certificate not after:    Tue 23 Jul 2024 22:13:28 +0000
Subordinate resources:    AS: 265378
                          IP: 168.194.44.0/22
                          IP: 2804:3328::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b1:69:63:67:4e:86:29:ad:29:1c:52:79:f2:a6:09:3e:45:09:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 25 22:08:28 2023 GMT
            Not After : Jul 23 22:13:28 2024 GMT
        Subject: CN=488250699EA593A12DBCA068B1EB47DFCD0FAC3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:1e:0c:9f:91:1a:c3:0d:20:dd:2c:5c:fb:
                    fe:58:51:3e:40:cb:fd:e4:7d:28:ce:be:f9:d2:3b:
                    cd:72:b5:54:9f:a7:45:70:9c:0c:15:af:fd:db:54:
                    33:6c:72:5a:7d:44:8a:33:68:c8:fd:3f:90:07:c0:
                    73:ab:19:b3:7d:f6:75:57:36:bc:b3:7a:b3:6e:44:
                    52:f7:b7:fa:83:36:41:1d:6c:e8:1a:c5:9c:55:64:
                    5d:80:bc:93:22:93:7b:09:25:7b:ca:39:7e:91:d0:
                    9b:72:3d:98:d2:78:99:ee:71:c8:fe:ab:fb:85:ac:
                    3b:0e:67:b3:a3:46:f7:98:fd:d3:b9:47:a7:31:63:
                    1e:3f:47:33:a2:aa:a5:58:11:7a:ef:c1:1a:fe:d4:
                    88:42:26:7b:2a:c2:de:3b:56:4b:0d:8d:6d:24:9f:
                    72:46:f6:59:86:83:7a:d7:62:b8:19:bd:ca:10:1c:
                    ed:9f:0b:ea:58:07:34:6e:b1:9d:c8:19:75:2e:cc:
                    67:36:a0:00:2a:c4:57:37:83:a2:a8:5c:83:72:71:
                    a4:e9:53:78:52:ab:61:b9:76:bb:db:1b:41:63:47:
                    34:a7:1e:56:ab:50:a0:6d:6f:98:6e:6f:9b:bd:eb:
                    16:89:bd:3d:54:e1:80:a4:83:c4:2c:bd:e5:8a:4a:
                    1f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:82:50:69:9E:A5:93:A1:2D:BC:A0:68:B1:EB:47:DF:CD:0F:AC:3E
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9nqRqsxQ6XUoRcgdro2BY7BjMJBDuHbQrJScZAwvU36U/0/488250699EA593A12DBCA068B1EB47DFCD0FAC3E.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.44.0/22
                IPv6:
                  2804:3328::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265378

    Signature Algorithm: sha256WithRSAEncryption
         3a:8e:bc:78:0e:b9:c4:ca:32:26:85:7a:1f:65:4b:02:32:98:
         0e:62:4f:9a:53:cb:a0:b0:d5:cb:48:4b:87:59:be:7a:2e:da:
         68:c7:b7:7a:47:12:c4:92:b7:e2:f4:28:4f:da:b3:e0:3d:b4:
         8a:d4:02:a6:70:5c:d4:c3:10:5c:ca:63:4f:98:9d:ab:39:3a:
         e1:2d:c1:32:5d:e5:07:53:86:22:59:fe:9f:06:87:81:3f:58:
         ea:90:91:e6:a2:a9:5a:8d:73:57:28:c4:c9:fc:95:5b:da:bf:
         83:67:e1:47:7a:83:f0:d4:b9:05:28:8d:e9:e2:a8:41:ca:ab:
         4c:83:b1:74:b4:0c:c9:4d:87:52:98:eb:4b:09:59:45:9c:08:
         97:15:1b:89:85:39:4a:48:ed:87:6a:9b:75:eb:21:14:8f:a7:
         95:dc:b7:82:65:2b:e9:a2:31:08:c7:7a:3c:ca:e2:61:9a:dc:
         43:ad:95:8b:d7:56:49:2d:24:07:f0:53:50:2f:d1:5c:ea:2d:
         22:8e:17:8f:9c:72:ac:83:93:f8:7e:92:9f:d2:12:ac:31:9d:
         75:8e:de:d7:9f:12:79:30:f5:ec:74:06:d4:01:6c:b0:04:c7:
         84:e6:d9:ec:d3:71:9c:92:72:3e:f5:1e:2f:c2:44:3e:f3:64:
         3b:0f:8b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org