Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.cer
File:                     489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.cer (raw, json)
Hash identifier:          eEHZkRSUW5uR9FIb4ppC2WcZP+mllfGcpHgpf+M5O4E=
Subject key identifier:   48:9C:8F:0A:8E:BB:2E:30:A2:4E:0E:C9:1B:9B:B8:31:17:F5:F6:40
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       432E5768779D26109E1A3FD52F4971094F18EC45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 05 Jul 2023 17:53:12 +0000
Certificate not after:    Wed 03 Jul 2024 17:58:12 +0000
Subordinate resources:    AS: 270724
                          IP: 189.51.32.0/22
                          IP: 2804:7064::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:2e:57:68:77:9d:26:10:9e:1a:3f:d5:2f:49:71:09:4f:18:ec:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul  5 17:53:12 2023 GMT
            Not After : Jul  3 17:58:12 2024 GMT
        Subject: CN=489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9b:f8:fd:63:bb:c8:c6:19:66:02:14:16:74:
                    10:66:0b:3e:5d:59:97:b7:97:1d:bf:92:00:fa:e2:
                    41:af:46:06:b0:a4:84:8e:cf:e2:3a:82:28:2e:86:
                    e5:61:29:5b:62:6a:dc:0b:7e:38:ee:01:b0:e2:0c:
                    fc:7e:e7:24:0a:37:e0:24:2a:d0:bc:f9:b2:22:f2:
                    71:a5:32:a4:e4:9d:9c:64:9a:fb:05:4d:d6:73:35:
                    70:fd:5e:65:6c:e5:f6:b8:41:7f:12:6c:71:4a:88:
                    24:17:46:d8:ed:9e:3d:23:cb:8d:a0:7c:4b:7a:6b:
                    95:56:73:94:b1:9f:64:c1:bf:1f:5a:74:80:a7:e2:
                    e6:0a:ca:97:c2:f8:0f:1c:10:04:85:a2:8b:9a:91:
                    2a:5f:1d:4e:46:37:83:b0:5b:37:f0:aa:d5:d8:23:
                    fa:95:8b:8b:f7:48:07:c2:aa:0d:ae:27:0e:b3:8f:
                    45:c8:83:79:e0:c8:81:75:72:46:a9:2c:72:24:91:
                    3a:16:8f:99:6a:fc:b4:cf:39:17:aa:96:22:44:25:
                    61:9d:9a:5d:2f:84:19:2d:d6:5a:dd:13:09:4c:d8:
                    ae:86:e9:dd:51:6e:74:ab:bc:4f:9a:21:5c:80:da:
                    44:59:e7:d5:00:66:f3:0c:85:02:41:71:5e:a8:71:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:9C:8F:0A:8E:BB:2E:30:A2:4E:0E:C9:1B:9B:B8:31:17:F5:F6:40
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9Ff1J97VmJJdc5Wc51j1K5BBuwURa5de1SqJC9KLSWRY/0/489C8F0A8EBB2E30A24E0EC91B9BB83117F5F640.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.32.0/22
                IPv6:
                  2804:7064::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270724

    Signature Algorithm: sha256WithRSAEncryption
         4e:20:eb:09:51:ce:ea:db:b3:1a:f7:9b:c4:4f:2c:19:d9:65:
         23:47:68:74:f6:70:ef:28:2d:08:ee:67:77:d9:48:c6:6c:1c:
         60:4d:ee:41:c7:d2:3e:f1:7f:78:b0:f8:e1:59:70:e3:c2:a4:
         6e:f4:a2:89:69:76:ea:dc:ef:75:07:f7:83:d3:bd:d0:8f:d1:
         be:fc:c3:d2:40:8f:28:b0:ff:f4:4d:aa:d0:fe:86:36:3b:55:
         3e:46:d9:5b:d7:0c:83:f1:b2:08:72:93:8c:a5:73:5a:a9:a8:
         c3:3a:b0:25:3c:53:98:65:3d:eb:62:b4:f2:c8:51:f2:80:89:
         55:ac:21:b8:f8:87:4a:16:8e:bc:5a:1b:b5:e1:90:55:28:dd:
         05:67:06:c6:9c:85:e8:d6:6d:12:e1:c1:e5:7a:ad:8f:d0:db:
         cb:0a:ea:af:83:3d:88:59:a3:8d:e5:a9:6f:9a:67:6c:c0:3f:
         bd:8c:29:e6:54:b7:8d:8d:59:14:45:e5:58:71:9a:9f:82:2a:
         70:2c:f1:6b:3d:18:19:b6:50:d9:e2:30:90:e8:ec:fa:e9:b5:
         3f:a9:32:9b:83:51:b5:e8:75:bd:4f:55:41:1a:a2:2d:73:c6:
         42:4f:52:b0:bd:36:7f:0f:69:00:a9:0d:be:f9:b5:e0:60:c8:
         13:4c:52:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org