Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/49A86DB203F3D0341FBD071E223C5A8AF29411B8.cer
File:                     49A86DB203F3D0341FBD071E223C5A8AF29411B8.cer (raw, json)
Hash identifier:          sNTD+QmHyoYQ7ArnXNDUiUDRkdmOAQB648Zbdz7CVZY=
Subject key identifier:   49:A8:6D:B2:03:F3:D0:34:1F:BD:07:1E:22:3C:5A:8A:F2:94:11:B8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       31C3900BA4119BA8CAA9504A38E71F7DDF1FE46D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/49A86DB203F3D0341FBD071E223C5A8AF29411B8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 23 Sep 2022 19:51:43 +0000
Certificate not after:    Fri 22 Sep 2023 19:56:43 +0000
Subordinate resources:    AS: 262972
                          IP: 179.124.248.0/21
                          IP: 186.227.152.0/22
                          IP: 2804:ec0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:c3:90:0b:a4:11:9b:a8:ca:a9:50:4a:38:e7:1f:7d:df:1f:e4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep 23 19:51:43 2022 GMT
            Not After : Sep 22 19:56:43 2023 GMT
        Subject: CN=49A86DB203F3D0341FBD071E223C5A8AF29411B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:86:bb:63:ba:ed:1b:62:2f:b6:50:24:27:
                    95:60:aa:a2:96:3d:c3:1e:df:1e:94:83:54:be:9b:
                    d2:e5:ef:33:49:ff:3e:ad:52:76:75:50:a3:99:69:
                    ac:63:6a:87:19:85:9b:cb:0c:a1:83:e2:71:35:b5:
                    d4:60:25:63:1d:30:05:2d:ac:80:75:47:84:4b:4b:
                    c5:fb:eb:f9:13:c0:8e:17:53:a8:31:ec:15:fd:d5:
                    f4:3e:b6:42:1f:9f:8d:b8:39:06:09:ea:21:47:1f:
                    59:72:8b:04:44:b8:fa:33:8c:fd:0d:b6:b5:b0:de:
                    66:f8:6f:a8:14:01:f3:d5:56:19:e9:08:85:87:ad:
                    a0:a0:5b:e9:3a:36:95:c7:4d:e6:c6:3f:64:fe:72:
                    17:dd:92:3e:a8:72:1a:5c:ad:0f:1a:45:a4:e6:3c:
                    67:99:eb:b7:e4:95:b3:9b:9c:1f:75:83:67:38:45:
                    d3:78:0f:83:80:f7:e9:2c:b8:ea:8b:df:3a:45:ba:
                    d8:f9:4a:f9:26:20:b3:ba:e8:7f:67:d2:de:65:e9:
                    a9:57:d8:82:fe:dd:5d:aa:6b:a4:83:d7:9d:53:80:
                    76:ff:2e:d5:b5:af:34:aa:b6:c6:b2:4b:93:70:d5:
                    38:b0:3a:d8:6d:b4:c4:34:d2:f3:92:b9:3e:95:53:
                    e5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:A8:6D:B2:03:F3:D0:34:1F:BD:07:1E:22:3C:5A:8A:F2:94:11:B8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HuTh6NovnoQ995xjEE1TNpbUqdfG7PWiyjYPeN6nbuFn/0/49A86DB203F3D0341FBD071E223C5A8AF29411B8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.124.248.0/21
                  186.227.152.0/22
                IPv6:
                  2804:ec0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262972

    Signature Algorithm: sha256WithRSAEncryption
         52:45:ae:4c:9e:56:52:17:e2:a9:61:cd:07:59:7b:91:07:01:
         5f:0a:6f:49:75:a4:1f:8e:32:91:9f:ca:b5:13:f0:7e:cb:4c:
         db:08:1f:32:02:c3:9b:f6:a4:df:86:00:b3:50:8c:31:9d:17:
         f0:ab:bc:b0:a8:fb:01:2c:f1:c2:36:f6:d0:ac:41:92:ea:ea:
         5d:bd:a8:ed:3b:a3:7b:02:3a:23:ca:9f:7f:87:c8:63:8e:8f:
         39:4a:b6:c3:8e:97:e8:a4:e3:0f:63:e4:4d:8a:ab:7d:64:d3:
         9a:bb:ce:44:78:9b:e5:cf:0a:2e:60:06:70:df:c9:5b:bf:9e:
         d7:02:53:ba:b0:6a:2a:ea:17:d7:d8:e2:bd:52:80:b6:6a:a1:
         5b:ce:5a:55:4e:1b:07:ed:d7:f9:83:cc:ee:c4:46:c1:f9:3d:
         3b:ff:e7:79:86:a4:87:2d:4f:cb:a2:f3:89:80:83:b7:8e:cd:
         ad:f0:d5:e6:87:58:93:c4:29:13:6d:dd:9c:46:e2:bd:ea:ac:
         c9:83:0b:4a:2b:87:3c:82:41:90:27:f4:c6:e8:09:f7:38:35:
         e7:d6:c1:aa:41:b9:87:cf:3f:17:65:23:2c:e2:45:19:5f:bf:
         13:c3:43:be:d5:55:8d:28:d1:8e:2a:be:bb:74:0f:35:f3:57:
         bc:09:81:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org