Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4891F57DBB2768074589743169F42E5C0BD91C7B.cer
File:                     4891F57DBB2768074589743169F42E5C0BD91C7B.cer (raw, json)
Hash identifier:          mSNicIxwUpeTeHcUSAQBX1a/xX5Gi6a/o1jssZlZjVM=
Subject key identifier:   48:91:F5:7D:BB:27:68:07:45:89:74:31:69:F4:2E:5C:0B:D9:1C:7B
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7020401FC59216CF0F69C72D3CD0BA41A75663E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/0/4891F57DBB2768074589743169F42E5C0BD91C7B.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Jun 2023 14:36:17 +0000
Certificate not after:    Wed 05 Jun 2024 14:41:17 +0000
Subordinate resources:    AS: 265279
                          IP: 167.250.24.0/22
                          IP: 168.195.144.0/22
                          IP: 2804:2d64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:20:40:1f:c5:92:16:cf:0f:69:c7:2d:3c:d0:ba:41:a7:56:63:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jun  7 14:36:17 2023 GMT
            Not After : Jun  5 14:41:17 2024 GMT
        Subject: CN=4891F57DBB2768074589743169F42E5C0BD91C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:5a:6f:41:de:d3:ab:2d:53:80:41:d2:b6:
                    27:ac:e6:b7:7c:99:fe:f4:1d:48:33:9a:9c:1d:d2:
                    3f:de:32:9f:a7:7e:a9:10:4e:88:4b:86:fc:28:88:
                    dc:49:67:b9:3e:57:45:3b:5d:57:a1:e6:cb:19:76:
                    68:4f:d9:2e:12:69:c6:71:ea:57:72:85:e1:5c:29:
                    91:94:6b:15:0b:4f:b0:14:07:98:77:63:82:c1:04:
                    a8:26:5c:2e:d5:b7:ed:4d:36:77:bc:c0:13:52:8a:
                    e4:3b:77:93:b0:79:13:ce:10:bc:63:79:5c:07:ea:
                    9c:bc:9a:6c:37:9c:e3:23:13:e9:d1:b9:65:8b:3e:
                    14:ee:1a:df:13:fd:a5:c7:d6:03:af:06:9f:91:0e:
                    67:83:14:1c:31:19:bb:1f:48:2b:24:af:d5:39:ee:
                    de:03:e7:8a:90:2f:65:4b:95:b3:f3:30:c0:b7:a7:
                    33:e4:ca:7c:4d:15:24:a5:92:75:a3:a3:97:83:ee:
                    2e:15:11:ad:90:f8:09:88:41:2d:3d:c2:ec:27:fa:
                    d8:ae:cb:26:6d:e3:7b:72:f9:34:b9:54:72:c4:44:
                    c8:71:0b:ee:4a:5c:37:d6:9f:48:57:c3:8e:80:22:
                    b0:46:ce:5c:53:56:58:c0:4b:4b:11:00:45:f9:e3:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:91:F5:7D:BB:27:68:07:45:89:74:31:69:F4:2E:5C:0B:D9:1C:7B
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/0/4891F57DBB2768074589743169F42E5C0BD91C7B.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.24.0/22
                  168.195.144.0/22
                IPv6:
                  2804:2d64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265279

    Signature Algorithm: sha256WithRSAEncryption
         4b:df:d6:81:c4:79:44:80:ec:91:b3:92:d0:f5:50:1d:32:30:
         5e:a3:47:b7:74:b1:1d:7c:ef:cc:d9:92:6f:2a:c3:0a:67:e0:
         7f:ed:b9:a6:40:a4:3a:9a:39:f4:4e:e7:bd:71:f0:fd:6b:f2:
         40:b1:40:2a:d7:2f:e3:e4:31:e9:8e:b6:b1:58:17:a4:71:58:
         a0:0d:9d:07:25:67:c4:6a:1e:16:cb:45:96:79:06:bf:24:51:
         be:cc:21:a2:63:72:1a:ec:60:db:d4:3c:f2:1d:4e:ca:67:ad:
         95:d0:76:cf:28:d9:db:c3:3c:53:15:68:27:d3:c9:27:5d:f7:
         95:fb:31:5b:cc:97:bc:b9:7f:e5:30:36:27:d7:4b:22:03:ea:
         8a:e5:2f:72:2c:d6:95:5f:de:3b:8f:28:c2:1d:bb:cb:a2:50:
         60:83:71:c8:64:c2:fa:e6:69:df:d2:ab:82:a8:ce:b8:57:11:
         f8:10:bf:f5:18:39:c0:92:46:68:a7:49:6f:d0:04:70:82:aa:
         0b:27:19:ec:f7:2b:50:5d:24:65:21:e7:0c:5b:8d:13:51:34:
         7b:55:71:bf:ae:c0:36:d1:fd:bc:32:e1:b3:09:0f:72:4a:3a:
         49:69:6f:7e:3c:ab:c7:73:0c:ad:ce:d6:1c:d2:d5:87:ba:6d:
         4a:c6:59:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org