Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/493371899D8210C336758D9D62D2B18B14A46846.cer
File:                     493371899D8210C336758D9D62D2B18B14A46846.cer (raw, json)
Hash identifier:          epqJ8sGdGgeoBaEBziha93vZDIifGZVZ+tDyyEeHqeA=
Subject key identifier:   49:33:71:89:9D:82:10:C3:36:75:8D:9D:62:D2:B1:8B:14:A4:68:46
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3E0DF25257985CA8D5585D8C6D14FC58BC651C1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/493371899D8210C336758D9D62D2B18B14A46846.mft
caRepository:             rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 24 Oct 2023 12:55:11 +0000
Certificate not after:    Tue 22 Oct 2024 13:00:11 +0000
Subordinate resources:    AS: 262606
                          IP: 177.101.32.0/20
                          IP: 2804:6c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:0d:f2:52:57:98:5c:a8:d5:58:5d:8c:6d:14:fc:58:bc:65:1c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 24 12:55:11 2023 GMT
            Not After : Oct 22 13:00:11 2024 GMT
        Subject: CN=493371899D8210C336758D9D62D2B18B14A46846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0c:e6:89:dd:d1:37:11:44:0d:f4:34:d5:c9:
                    c2:42:d3:65:6b:1a:9c:1e:d9:15:e8:84:91:a5:5b:
                    18:2f:f7:52:dc:14:dc:cb:71:b7:68:97:9f:a3:4b:
                    05:6e:a6:0e:d4:c1:07:2c:8b:0f:bc:8a:01:89:fc:
                    16:11:f0:f2:dc:7b:df:fe:7a:bf:0e:31:b6:83:a0:
                    2e:c7:1f:14:50:d4:bc:f4:37:f7:dd:d9:71:5f:cf:
                    8a:7a:51:13:69:62:16:88:7f:b2:d0:82:b7:21:ae:
                    b0:b2:b1:2b:3c:e5:c4:f6:d4:50:54:a6:f2:c6:59:
                    fb:3d:32:c1:1c:ce:f9:07:b6:d6:2b:91:ac:af:70:
                    9b:dd:fb:b5:09:1b:41:18:e1:70:52:26:53:4f:ad:
                    bb:c9:c5:77:73:c3:22:6b:fa:3c:05:6f:d0:7f:5a:
                    7a:92:83:09:52:fa:ea:6d:26:a9:fb:a2:19:82:f6:
                    de:11:12:6e:44:a2:3e:12:68:a7:72:8f:9a:38:fa:
                    0b:56:33:6a:f7:e3:0c:4c:36:1a:08:bb:b7:77:6f:
                    85:01:7a:38:bf:80:dd:57:49:a8:67:70:5b:4a:f5:
                    c8:c5:a0:ff:f2:79:08:65:63:58:b2:e3:5c:fd:71:
                    0f:07:e2:3b:87:c6:f6:95:62:2f:fd:33:75:d3:64:
                    d7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:33:71:89:9D:82:10:C3:36:75:8D:9D:62:D2:B1:8B:14:A4:68:46
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/ARJte1HchcCvgJPp88wqU3HBfqycLM583wuRzHULq4Dd/0/493371899D8210C336758D9D62D2B18B14A46846.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.101.32.0/20
                IPv6:
                  2804:6c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262606

    Signature Algorithm: sha256WithRSAEncryption
         7d:0c:9b:c3:e4:90:fc:17:e7:07:55:c1:01:5c:71:75:ae:a7:
         dd:42:5f:c2:4e:70:be:5a:d5:ac:fb:e8:dd:af:f5:fc:7d:17:
         1e:60:87:b7:5a:92:12:db:df:41:c4:6a:e9:0c:d4:1c:01:f2:
         36:bb:8d:18:4c:b3:ab:c1:19:a9:72:76:20:a6:ce:af:7d:2a:
         5d:60:79:f2:a4:8d:6e:23:2f:8d:18:ea:19:e1:6a:8f:fe:da:
         91:2a:60:99:ef:5c:a2:22:f7:ee:72:97:10:da:e5:ed:36:63:
         26:ba:1c:3d:93:aa:bc:a5:d8:e2:5b:1f:81:db:c3:ce:53:61:
         5a:da:30:bc:65:90:7e:38:5d:0a:20:0a:9a:2e:e1:ca:9c:70:
         5d:38:bc:eb:1f:63:0c:3a:4b:8f:e5:fc:1a:79:23:c0:8c:72:
         ec:f6:7a:1a:bb:d7:db:f4:f0:1e:31:cd:9f:f3:ab:65:70:0e:
         3c:b5:17:d8:5c:68:bc:c9:03:17:8c:c8:88:1c:8d:43:7f:76:
         99:c9:84:1c:37:f0:9c:9b:22:03:78:2e:f9:69:ed:44:37:ca:
         69:b4:02:14:44:d3:25:4f:c9:2c:07:6d:3a:f0:08:1e:d7:14:
         cf:18:27:4e:5d:e9:a7:d0:6d:e0:28:3c:1b:38:99:be:09:9d:
         84:da:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:19 2024 by rpki-client on console-fra.rpki-client.org