Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.cer
File:                     48D3C8BE2C029255BE6D6F2956AF74681B8370F9.cer (raw, json)
Hash identifier:          7cLFlIE25B3POKZMnIrVH0ewWfsR7MNTrkc87BrUGck=
Subject key identifier:   48:D3:C8:BE:2C:02:92:55:BE:6D:6F:29:56:AF:74:68:1B:83:70:F9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4A235CA5BC62425A3DF1741027A8F1320F76A8A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 Oct 2023 14:16:45 +0000
Certificate not after:    Thu 03 Oct 2024 14:21:45 +0000
Subordinate resources:    AS: 53246
                          IP: 170.150.40.0/22
                          IP: 177.21.96.0/19
                          IP: 191.242.160.0/20
                          IP: 2804:358::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:23:5c:a5:bc:62:42:5a:3d:f1:74:10:27:a8:f1:32:0f:76:a8:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  5 14:16:45 2023 GMT
            Not After : Oct  3 14:21:45 2024 GMT
        Subject: CN=48D3C8BE2C029255BE6D6F2956AF74681B8370F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:61:37:be:57:9a:1a:a5:7a:f1:4d:30:9c:c1:
                    c8:c8:34:4a:69:23:9c:f1:4b:ca:37:ea:b6:c0:81:
                    a5:99:43:be:b5:12:3b:a6:e5:98:8c:96:37:4d:21:
                    98:f7:37:be:90:e3:71:34:d4:94:03:e9:df:5c:83:
                    3c:cd:10:62:1a:dd:98:45:18:f2:31:bc:cd:6d:a4:
                    be:f7:40:a9:1b:e7:a3:a6:66:9a:2e:5a:24:73:9b:
                    49:46:6d:ac:36:47:98:23:94:d3:92:d9:5f:94:ff:
                    f3:10:33:dd:38:21:d6:0c:25:08:a5:b2:e7:34:88:
                    91:1c:b6:4e:db:ab:88:34:55:a9:36:5f:84:3b:6b:
                    97:79:d4:ce:72:d3:5e:44:44:ae:f8:47:fd:e9:87:
                    20:d3:f4:35:6a:d0:46:9b:21:e3:9e:4a:87:71:f5:
                    b5:ce:32:c0:81:70:07:25:86:72:f3:22:0b:6f:f2:
                    75:62:6f:70:a5:6b:d3:85:40:19:00:09:5c:44:fc:
                    c5:a8:55:ae:9b:bc:6c:c9:ff:0b:82:b4:b4:4c:9a:
                    64:ed:1b:50:99:a5:19:92:11:b6:15:1d:35:e6:86:
                    b8:55:aa:75:c0:bc:b5:93:73:f7:64:b5:ab:00:44:
                    af:25:a5:47:b0:6c:bd:47:bb:23:6d:db:54:3f:99:
                    1e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                48:D3:C8:BE:2C:02:92:55:BE:6D:6F:29:56:AF:74:68:1B:83:70:F9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/0/48D3C8BE2C029255BE6D6F2956AF74681B8370F9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.40.0/22
                  177.21.96.0/19
                  191.242.160.0/20
                IPv6:
                  2804:358::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53246

    Signature Algorithm: sha256WithRSAEncryption
         40:9e:6c:46:73:d9:14:24:29:e4:bd:55:dd:9b:4b:33:af:d8:
         bc:5a:7e:ae:f9:a1:a7:26:32:95:82:86:46:2d:1d:cd:46:63:
         89:96:72:90:8e:ea:25:bf:02:cc:9e:45:c4:bf:b8:21:88:92:
         73:b3:d1:36:f5:ca:32:14:05:cd:25:f4:ae:1b:2f:ec:a0:6d:
         9c:25:e2:c1:a1:ff:d9:3f:13:9e:7b:04:4b:2c:6b:33:83:d9:
         70:73:6e:90:f6:35:14:98:9f:a4:76:d7:12:8b:f3:a1:fe:c1:
         c9:dc:61:26:4d:8c:bf:c2:f2:e6:dd:8a:86:8d:5d:cf:36:55:
         1f:f3:17:e1:0c:cc:73:7a:bc:92:01:8f:23:06:c0:d3:5d:f0:
         bc:66:4c:6a:7c:a6:11:7e:1c:5e:d1:05:66:f8:be:8d:55:ac:
         b1:d8:4f:ac:35:96:f4:59:26:7b:3d:90:c5:3f:72:64:9d:0b:
         4d:84:1f:6b:93:58:dd:30:25:73:3a:2f:db:ae:18:fc:11:42:
         96:79:64:70:6f:fb:cb:92:94:d8:bd:1d:eb:54:ee:a8:66:1f:
         68:78:5c:3f:e0:8a:d1:ec:92:58:27:c1:bb:47:5d:3a:1e:ed:
         41:c6:89:8b:06:4e:4e:60:e4:65:08:50:5c:0c:17:48:fb:41:
         06:f6:b7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org