Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/49B64BAD592AFF93811E833FB944B7DA58E67068.cer
File:                     49B64BAD592AFF93811E833FB944B7DA58E67068.cer (raw, json)
Hash identifier:          /trbGBMIABhd07jJ3qCibwrvk69kyOX9Kfl5uyEzyZw=
Subject key identifier:   49:B6:4B:AD:59:2A:FF:93:81:1E:83:3F:B9:44:B7:DA:58:E6:70:68
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       494E14064C05F155E094B73FE274C75BFF80F8C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/49B64BAD592AFF93811E833FB944B7DA58E67068.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 10 Oct 2023 02:30:07 +0000
Certificate not after:    Tue 08 Oct 2024 02:35:07 +0000
Subordinate resources:    AS: 269590
                          IP: 45.189.136.0/22
                          IP: 2804:66e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4e:14:06:4c:05:f1:55:e0:94:b7:3f:e2:74:c7:5b:ff:80:f8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 10 02:30:07 2023 GMT
            Not After : Oct  8 02:35:07 2024 GMT
        Subject: CN=49B64BAD592AFF93811E833FB944B7DA58E67068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:7d:b2:d0:08:e7:42:16:1a:cc:3c:0a:c2:
                    a3:d9:7a:c5:0f:fe:b4:37:f8:bd:97:2e:b5:0e:6d:
                    8e:76:1b:f6:76:86:b8:72:71:1f:7d:0f:b3:23:56:
                    93:f0:ca:86:a7:b3:97:06:55:0f:03:26:e3:64:a5:
                    f8:b0:4c:75:7c:ae:bc:c2:97:b0:cb:0e:3e:1f:a9:
                    e3:a7:2c:c9:ac:1e:65:89:5a:51:7e:56:4e:1d:59:
                    18:d7:8c:a5:14:6a:47:9d:98:5b:20:a6:18:21:a5:
                    c7:dd:9b:06:dc:ae:86:30:b3:8e:6c:19:5c:d7:6a:
                    4c:37:18:b3:24:db:74:77:1e:31:38:32:9d:9f:e6:
                    fd:15:06:a1:06:5a:e4:b6:66:e9:5b:5c:aa:eb:01:
                    07:2d:f9:8f:7f:97:fc:7f:20:d0:1a:bf:cf:90:b0:
                    2e:c1:92:06:e0:2a:70:e4:12:f7:6f:bf:66:01:f4:
                    87:da:61:97:4a:f0:b3:3e:8c:56:69:cd:1c:a5:39:
                    6c:af:ec:56:ff:d6:f4:3e:f8:a3:85:af:c0:c0:22:
                    48:9d:33:9e:99:e7:4b:3b:05:a9:f0:9e:da:74:12:
                    18:ea:90:6c:dd:69:78:27:36:4e:9a:f1:3a:12:07:
                    c9:de:0c:6c:15:34:ab:35:a2:65:44:40:6a:e8:5b:
                    4a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:B6:4B:AD:59:2A:FF:93:81:1E:83:3F:B9:44:B7:DA:58:E6:70:68
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9YNy9pUfScMNGH1SmZLmyaTMPUuW7opCRBJghzE2LfFj/0/49B64BAD592AFF93811E833FB944B7DA58E67068.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.136.0/22
                IPv6:
                  2804:66e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269590

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:26:3d:2b:6b:47:b2:13:8b:7c:57:cd:96:a8:3a:61:34:
         c9:fd:be:38:bd:5c:5c:c2:b2:9f:e9:c7:fa:de:3f:0f:9a:0e:
         b5:ad:d2:de:87:cb:dd:b9:d7:c8:66:b4:c0:53:27:b9:4e:c1:
         db:69:15:68:20:90:28:a7:fa:ef:0d:57:44:61:5e:86:a5:36:
         9c:dc:e9:56:a6:b9:a1:39:a5:b4:b2:01:09:dd:91:ee:90:db:
         b2:3a:cd:2b:91:b2:2b:37:6a:7c:07:5b:97:f0:a5:80:08:96:
         91:99:b7:e9:2e:d9:3b:b0:59:c4:28:39:8e:ff:e4:72:df:6d:
         91:aa:9a:bc:51:e9:9c:51:f1:a6:32:b1:aa:58:ca:c0:e2:0d:
         62:be:01:d0:b3:6c:86:97:1b:c3:e5:ac:65:71:b5:c1:d0:43:
         3d:5a:54:56:b7:1e:90:05:25:6f:75:2f:57:24:cd:ac:54:fe:
         21:dc:d6:41:94:47:89:cc:b3:56:58:3a:77:89:91:8c:2f:a4:
         f3:9d:0b:b3:f1:0b:aa:84:f3:a3:32:cc:20:ab:1b:5b:61:e5:
         08:99:4e:a4:2d:40:e8:5f:f9:0d:6f:fa:cc:86:a9:cd:5f:09:
         8a:d2:59:6e:9b:d6:68:74:5f:5d:dd:ee:bc:d9:8b:d0:91:ba:
         2a:b8:33:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org