Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/48C8061F5071A75BFD71388DAAD34A94EE1FB7DF.cer
File:                     48C8061F5071A75BFD71388DAAD34A94EE1FB7DF.cer (raw, json)
Hash identifier:          MV5oA2cizPOH+5T7pXAZZ0ZIXVSmYZxYdCyug6u+Xpg=
Subject key identifier:   48:C8:06:1F:50:71:A7:5B:FD:71:38:8D:AA:D3:4A:94:EE:1F:B7:DF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       05244DFACB71CA8516F3441DB8FEB677696F6F07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/48C8061F5071A75BFD71388DAAD34A94EE1FB7DF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 19:35:16 +0000
Certificate not after:    Thu 20 Jul 2023 19:40:16 +0000
Subordinate resources:    AS: 263914
                          IP: 138.185.128.0/22
                          IP: 2804:27a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:24:4d:fa:cb:71:ca:85:16:f3:44:1d:b8:fe:b6:77:69:6f:6f:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 19:35:16 2022 GMT
            Not After : Jul 20 19:40:16 2023 GMT
        Subject: CN=48C8061F5071A75BFD71388DAAD34A94EE1FB7DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:1e:d7:bd:1a:f9:10:80:df:30:5a:5c:cc:
                    25:e4:ff:46:36:38:dc:9b:7f:21:ef:7a:05:54:83:
                    dd:d4:c8:3a:93:f0:02:ad:a0:ad:da:c7:2f:44:91:
                    40:4a:f7:4f:41:e6:35:40:4e:58:13:fe:6f:7a:50:
                    30:13:a4:25:65:f1:a5:02:b5:01:7c:61:ca:b0:c4:
                    d8:18:84:09:52:25:51:c3:c3:cc:23:71:52:55:43:
                    0b:52:48:13:11:9f:f1:22:06:12:9a:68:95:fe:e6:
                    17:42:28:04:33:5f:ac:06:43:71:90:ca:0a:f9:98:
                    10:b8:92:50:22:be:15:e5:6e:48:ef:dc:41:74:a4:
                    9d:21:40:4d:93:e9:cf:2c:cd:51:4a:fb:6a:db:fc:
                    3d:c9:7a:9d:b6:4f:af:ac:93:11:31:e7:d0:fd:c7:
                    cb:73:b1:74:f8:3d:06:7e:9d:f8:bd:a7:21:94:be:
                    44:30:f2:b8:05:e1:a4:2e:f4:cb:6d:57:26:05:12:
                    b8:d9:7c:8e:4a:33:9a:23:8c:a9:db:2a:30:e4:f9:
                    6f:4c:47:b0:f4:d0:7e:d9:0f:2e:f3:f2:04:66:27:
                    2c:5b:72:de:83:e8:1a:13:3a:d9:2d:97:43:cc:e8:
                    14:f9:3c:53:ba:cd:57:cf:31:5c:2e:6f:10:90:16:
                    b4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:C8:06:1F:50:71:A7:5B:FD:71:38:8D:AA:D3:4A:94:EE:1F:B7:DF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BCnhu5Fw7A74tcpnftQxbw5SKd6ZKiejSrCzYjbKmaxM/0/48C8061F5071A75BFD71388DAAD34A94EE1FB7DF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.128.0/22
                IPv6:
                  2804:27a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263914

    Signature Algorithm: sha256WithRSAEncryption
         aa:05:56:fc:09:ee:6f:a5:f0:52:6d:29:9d:6b:99:7f:45:ce:
         b7:b1:0e:25:c5:4a:64:ea:e5:b7:0a:c9:c9:25:25:6b:7f:53:
         d5:d4:92:f9:8f:5f:19:34:65:4b:6f:be:7b:b4:2e:c8:c5:4b:
         94:82:c1:77:c2:6f:ad:78:2e:d9:21:76:49:a4:97:5f:3b:2f:
         19:17:99:82:fb:d4:16:43:22:d7:92:16:44:d2:ab:f5:50:a4:
         ca:9b:3a:c9:5b:ec:64:25:ec:9d:9b:d2:ed:9e:0b:d5:6e:39:
         c0:32:56:b7:9c:1d:ff:9f:e3:39:02:13:cf:3f:a0:b4:90:7d:
         43:ca:10:09:0a:51:26:5f:22:9d:a8:4f:2b:d8:e7:4b:8a:d3:
         fd:a6:6e:86:04:3c:a6:55:89:86:bc:4d:78:6e:5c:44:a9:77:
         17:37:43:06:a2:35:30:dc:a7:65:4d:85:30:c8:df:17:0d:d8:
         ea:9c:80:77:72:4f:48:89:b2:51:e9:90:b4:65:53:55:fa:4a:
         9f:da:2b:a8:f2:a2:ff:f3:62:66:b7:44:8f:8c:44:ce:cd:08:
         84:45:13:5a:ad:0d:02:69:88:8e:56:68:13:2f:37:cf:91:97:
         62:f1:76:a8:23:e6:09:ca:07:e4:39:c6:52:4f:3f:8e:03:36:
         1a:2b:bb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org