Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer
File:                     496659D2A113157B4BED7E1189FFAEA19CE9E6F4.cer (raw, json)
Hash identifier:          5Gq30M3xVwvCYx8fVvlueHGlg5/nZvCSbl1KMzOaSQs=
Subject key identifier:   49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       43B2B4378C0EE8E66A9E49631A18B84C851DF15B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 17:05:10 +0000
Certificate not after:    Tue 17 Dec 2024 17:10:10 +0000
Subordinate resources:    AS: 263604
                          IP: 143.202.112.0/22
                          IP: 177.71.88.0/22
                          IP: 2804:fcc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b2:b4:37:8c:0e:e8:e6:6a:9e:49:63:1a:18:b8:4c:85:1d:f1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 19 17:05:10 2023 GMT
            Not After : Dec 17 17:10:10 2024 GMT
        Subject: CN=496659D2A113157B4BED7E1189FFAEA19CE9E6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:fe:61:83:59:71:b4:2c:c3:91:dd:0e:46:
                    b3:9f:1e:de:be:0d:81:38:56:2f:80:29:16:c5:a3:
                    8b:d0:f6:12:f3:60:d5:24:94:0b:8d:2b:ce:d2:ac:
                    f2:43:02:34:f3:1e:ef:2e:a0:82:7b:85:8a:4f:76:
                    f4:fd:cb:15:03:1c:e6:68:5a:8b:0d:b0:a0:7c:69:
                    84:74:aa:a3:de:67:58:98:1e:a8:b6:f2:26:d9:78:
                    74:96:e9:49:f0:e3:58:7e:eb:2e:41:a5:bd:ec:08:
                    6d:dc:33:ff:08:c3:ef:72:a0:05:be:4f:ff:ae:6e:
                    8d:d3:45:4e:57:ad:dc:98:cc:3f:dc:b6:b0:b4:c0:
                    9c:1d:79:be:95:1d:0e:cb:f8:b5:c4:8e:2f:4d:93:
                    27:5e:61:58:c7:f0:94:a0:71:84:12:77:7d:7f:a4:
                    14:bd:7d:4f:bd:29:63:6a:1c:74:b4:19:61:61:dc:
                    71:37:9d:1b:ea:c9:d3:7f:45:90:6b:0b:5d:42:2e:
                    46:62:bd:5f:85:2f:d9:9e:50:eb:0e:80:a9:f6:b9:
                    a9:ca:4b:94:f2:ce:ab:a2:c2:83:64:1a:d2:81:8e:
                    32:56:e7:42:73:6d:8e:f5:c8:30:cb:3c:56:b7:70:
                    7d:a5:ed:37:60:30:22:66:b1:0b:44:8c:67:d1:3b:
                    33:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:66:59:D2:A1:13:15:7B:4B:ED:7E:11:89:FF:AE:A1:9C:E9:E6:F4
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/496659D2A113157B4BED7E1189FFAEA19CE9E6F4.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.112.0/22
                  177.71.88.0/22
                IPv6:
                  2804:fcc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263604

    Signature Algorithm: sha256WithRSAEncryption
         02:e8:54:aa:e2:72:d8:87:73:45:4a:17:0f:67:65:ef:b9:58:
         cc:51:ab:50:43:62:59:74:c6:d4:bf:ce:64:76:2f:d1:82:ef:
         33:ed:f2:76:b4:24:fb:66:c0:ce:20:22:5e:bf:4c:b7:98:73:
         f4:d1:d3:79:38:b9:cf:f3:5a:1c:39:ab:91:28:af:12:37:de:
         e6:26:8b:d8:e1:4f:04:2f:34:2a:78:bf:05:76:1e:f0:34:9a:
         15:48:c5:a1:95:c1:6d:91:97:b9:1b:af:9e:af:0a:88:83:d6:
         b1:b9:3d:d9:62:aa:f1:6e:fc:bc:b3:db:93:a6:2a:18:0b:b9:
         bb:13:02:c2:f9:94:08:fe:a4:1a:32:51:fc:b0:cd:17:48:f0:
         16:0d:9a:85:98:f3:d0:0c:83:60:38:e9:91:8d:24:dd:54:f7:
         6c:df:4a:64:39:97:d5:24:19:05:b9:67:2b:07:b9:3a:be:df:
         91:46:cd:9a:7c:83:a6:ec:6f:ae:f9:ee:a6:9c:58:17:8d:36:
         2a:c8:68:af:35:a8:ef:ac:f9:2c:f5:05:37:38:d4:12:b9:54:
         01:d1:5c:9e:fe:52:31:34:f0:b4:51:1e:19:65:34:9b:4c:50:
         9c:0a:a5:c7:16:81:9d:f9:08:0b:c4:f3:00:b0:d0:ed:25:84:
         3e:37:b7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:15 2024 by rpki-client on console-fra.rpki-client.org