Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/497F436C4E5116B17795A157B3836383F68E21D5.cer
File:                     497F436C4E5116B17795A157B3836383F68E21D5.cer (raw, json)
Hash identifier:          egewj4zgEJ9xD1ofgxWEy8iKpmi24DYNLrH2iN8UjIU=
Subject key identifier:   49:7F:43:6C:4E:51:16:B1:77:95:A1:57:B3:83:63:83:F6:8E:21:D5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       70467B14A2D1FF12FE6DF8335E06CC0CEF72172E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/497F436C4E5116B17795A157B3836383F68E21D5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sun 01 Oct 2023 01:54:34 +0000
Certificate not after:    Sun 29 Sep 2024 01:59:34 +0000
Subordinate resources:    AS: 267218
                          IP: 45.231.196.0/22
                          IP: 2804:4a18::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:46:7b:14:a2:d1:ff:12:fe:6d:f8:33:5e:06:cc:0c:ef:72:17:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct  1 01:54:34 2023 GMT
            Not After : Sep 29 01:59:34 2024 GMT
        Subject: CN=497F436C4E5116B17795A157B3836383F68E21D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:2e:8e:69:dd:71:5f:d5:6a:c5:28:82:30:
                    a4:c9:a8:88:79:ea:97:55:71:b2:a5:72:b5:6d:e0:
                    23:f8:86:8e:c5:ad:e7:43:55:b4:bd:9a:07:f0:3c:
                    2b:ff:82:d3:a5:69:1a:a9:d8:e8:b6:34:f6:1f:7b:
                    c6:bb:4e:c9:11:b8:80:dc:2e:3a:7f:5f:16:8e:4e:
                    53:8d:34:96:ce:0f:34:e4:1d:58:e4:cf:38:07:b4:
                    a3:55:76:40:34:ef:75:41:64:53:3e:97:fb:b4:db:
                    dd:e9:16:7f:f2:fc:93:d9:77:be:1e:d1:97:83:60:
                    38:cd:d5:a4:8b:5b:57:e2:64:c5:c3:be:b7:9b:8e:
                    dd:86:5e:8f:d7:4d:cd:4a:01:de:97:27:ac:82:13:
                    f7:6e:ce:48:e9:7b:c6:a7:43:12:70:37:ca:e2:81:
                    13:c7:2a:98:2b:52:8e:85:e0:b2:0b:48:7c:bd:a2:
                    ce:e7:03:c9:41:5e:3b:b6:b7:99:9c:4c:df:7a:58:
                    57:1e:5d:4a:05:2a:64:62:fe:24:ad:61:f3:19:a4:
                    b5:b9:0a:d9:7d:59:7a:bc:5e:af:2e:67:9d:bb:2b:
                    d1:b9:a1:41:2a:53:90:90:03:c6:10:67:e6:3d:2c:
                    64:1f:ab:c1:a5:d1:a3:39:cf:cc:42:3f:22:7e:d3:
                    54:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:7F:43:6C:4E:51:16:B1:77:95:A1:57:B3:83:63:83:F6:8E:21:D5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/497F436C4E5116B17795A157B3836383F68E21D5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.196.0/22
                IPv6:
                  2804:4a18::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267218

    Signature Algorithm: sha256WithRSAEncryption
         6d:8b:44:ee:8b:16:d4:f8:27:55:42:4f:58:a0:eb:e8:b9:a6:
         8e:4c:a5:3c:5b:71:02:0c:92:5e:d9:28:2d:1a:6b:09:13:82:
         d6:e8:c9:c6:fe:0b:41:ed:94:e0:d7:91:5c:4f:03:ae:76:97:
         33:9d:ca:d3:c8:52:23:72:5e:ab:af:1d:d4:3c:f3:c4:7b:7e:
         63:5c:a2:d9:79:9d:30:4f:99:96:c4:ce:8b:77:36:cd:7e:3e:
         fa:95:28:25:87:7f:48:b7:c4:ee:f0:f1:76:eb:c6:d5:98:8c:
         6e:b4:c5:fd:62:6a:b9:0f:d1:1e:95:a0:d0:93:1e:3e:82:a2:
         e0:3a:12:74:bd:9a:2e:9d:13:55:e5:ff:fc:84:f5:30:30:91:
         ec:d6:12:54:cf:a7:45:da:d0:3b:31:16:01:ac:ab:35:ad:27:
         b4:dc:94:ef:bf:d0:a1:6e:fa:97:48:7b:e5:27:e0:80:6f:b0:
         12:08:8d:57:a2:27:ae:3e:ea:d2:82:a5:a0:20:21:6e:8c:ca:
         85:84:44:6e:5e:31:a3:ee:7d:69:30:3b:e7:2a:3e:c7:8e:2a:
         57:dc:fe:1e:97:b2:3b:f5:f3:c3:f9:6f:07:d8:6b:12:d1:4e:
         32:07:5f:6b:da:8a:bd:87:35:31:3b:c3:53:03:67:19:38:c1:
         03:7a:05:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org