Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5.cer
File:                     49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5.cer (raw, json)
Hash identifier:          54724zBrjw81TkR7zUUJZK3tFUpKRvuvMH8QN8kWRxc=
Subject key identifier:   49:A3:A5:C0:1F:9D:FB:8B:55:30:42:0D:1E:C0:F7:72:F9:7A:F4:C5
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A0736B4C96709A78767719007E8B414712EAAD0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 12:23:56 +0000
Certificate not after:    Thu 23 May 2024 12:28:56 +0000
Subordinate resources:    AS: 271388
                          IP: 200.36.132.0/22
                          IP: 2804:7ab8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:07:36:b4:c9:67:09:a7:87:67:71:90:07:e8:b4:14:71:2e:aa:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May 25 12:23:56 2023 GMT
            Not After : May 23 12:28:56 2024 GMT
        Subject: CN=49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:9b:a5:ba:1e:45:fd:c2:c7:6c:2c:df:6b:
                    4a:af:71:2c:cc:3b:15:6e:7d:52:2c:40:ff:80:af:
                    47:3e:cb:d7:96:85:81:ad:6b:08:68:74:91:04:a7:
                    56:9c:73:d4:b7:15:0b:95:f0:05:5c:a6:5d:e9:e9:
                    8b:14:4c:4f:92:f7:81:17:11:40:10:dd:4e:c0:98:
                    22:d5:23:a2:6e:a8:94:26:48:d3:6c:d0:eb:5e:0e:
                    19:e1:48:77:fa:79:a6:8f:81:7e:25:6a:2d:68:4a:
                    3d:20:1d:77:33:5d:e3:2e:4a:c2:c7:da:d7:bb:83:
                    b6:c3:a6:b4:4d:13:5d:0d:07:be:f1:03:74:3b:be:
                    59:54:4f:66:02:5c:09:10:d9:9e:b5:19:91:8a:9d:
                    e5:17:9d:dd:ab:47:7e:a1:04:50:a7:28:5f:9d:bb:
                    b0:58:4a:ea:6e:f5:63:88:d2:bd:db:5e:f2:9c:72:
                    9f:6c:d2:c1:28:f6:78:3d:d9:e8:47:2c:f5:aa:87:
                    15:2a:78:50:44:fc:5d:c2:3d:b9:7c:c8:bc:f2:a6:
                    0b:b0:e4:21:1b:42:c1:66:3f:7c:89:a3:4f:6c:98:
                    23:97:d9:08:dc:f5:08:1a:bf:fa:8a:f1:fe:12:a4:
                    f9:99:36:d0:66:27:8f:61:36:81:c4:44:02:7a:82:
                    ba:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:A3:A5:C0:1F:9D:FB:8B:55:30:42:0D:1E:C0:F7:72:F9:7A:F4:C5
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GYFExock2FghYAVhXCiaXfTHQUGcMN5sctFjMC8HfgCv/0/49A3A5C01F9DFB8B5530420D1EC0F772F97AF4C5.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.132.0/22
                IPv6:
                  2804:7ab8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271388

    Signature Algorithm: sha256WithRSAEncryption
         12:b9:ce:85:12:5d:0d:70:bf:b7:cf:26:40:49:74:05:a8:88:
         1a:03:f0:d3:53:00:be:25:03:23:ce:eb:61:b7:a6:95:1c:ac:
         55:11:9f:e5:7f:45:98:bc:83:be:1e:33:01:32:bf:c5:a2:cd:
         a6:59:82:f7:7e:83:dc:2b:bb:74:a7:57:a8:07:b7:0a:69:b0:
         df:c6:0f:1c:f7:86:5a:ca:95:5e:97:10:0d:d0:6c:a3:3e:bb:
         5e:a6:a3:62:b0:ac:c8:c6:83:74:d0:9c:ac:6f:42:a8:6a:6f:
         19:2d:9c:cb:56:65:63:44:6e:b2:e3:f8:6d:46:12:66:e5:fe:
         60:b2:ee:70:63:1c:5d:55:1e:71:76:64:8f:6e:da:9d:ba:24:
         c9:48:d5:1f:17:ff:43:15:70:77:2b:11:4c:16:7f:88:28:bf:
         b8:84:57:e1:9d:65:8f:20:5c:d7:8d:df:66:a3:c2:44:de:26:
         4b:c2:65:fb:ea:93:7a:c9:20:14:21:73:d6:e1:4c:25:4b:d8:
         40:80:a8:d8:7f:ab:fb:57:7c:06:cd:e0:73:31:b4:94:3e:32:
         64:db:26:7a:33:72:1a:47:91:77:0f:75:1a:b6:11:c8:54:d1:
         e3:82:b8:e0:97:15:6e:e0:e3:0d:61:fc:5d:9c:a0:d4:a7:70:
         a9:74:46:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org