Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/49BB9F7CDC627D70A85ACFA0923F628A7FA048C8.cer
File:                     49BB9F7CDC627D70A85ACFA0923F628A7FA048C8.cer (raw, json)
Hash identifier:          /EcPK5FHLgr+TX2obNwW6bscvMDQ71pADHMaFctX5Z8=
Subject key identifier:   49:BB:9F:7C:DC:62:7D:70:A8:5A:CF:A0:92:3F:62:8A:7F:A0:48:C8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C639918D27C81923B19A0AAA140C3D81D248488
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/49BB9F7CDC627D70A85ACFA0923F628A7FA048C8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 03 Jan 2024 11:41:52 +0000
Certificate not after:    Wed 01 Jan 2025 11:46:52 +0000
Subordinate resources:    AS: 28201
                          IP: 45.7.212.0/22
                          IP: 45.191.168.0/22
                          IP: 45.231.8.0/22
                          IP: 45.235.116.0/22
                          IP: 131.161.4.0/22
                          IP: 138.59.20.0/22
                          IP: 138.117.204.0/22
                          IP: 138.121.64.0/22
                          IP: 138.185.24.0/22
                          IP: 168.181.80.0/22
                          IP: 168.195.64.0/22
                          IP: 168.227.8.0/22
                          IP: 170.239.192.0/22
                          IP: 170.239.220.0/22
                          IP: 170.254.160.0/22
                          IP: 177.125.80.0/20
                          IP: 177.152.160.0/20
                          IP: 177.221.72.0/21
                          IP: 179.189.96.0/20
                          IP: 181.225.180.0/22
                          IP: 186.216.128.0/20
                          IP: 186.251.200.0/22
                          IP: 187.1.48.0/20
                          IP: 187.17.240.0/20
                          IP: 187.73.0.0/20
                          IP: 187.86.64.0/20
                          IP: 187.108.48.0/20
                          IP: 189.90.240.0/20
                          IP: 191.5.80.0/20
                          IP: 2804:5c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:63:99:18:d2:7c:81:92:3b:19:a0:aa:a1:40:c3:d8:1d:24:84:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  3 11:41:52 2024 GMT
            Not After : Jan  1 11:46:52 2025 GMT
        Subject: CN=49BB9F7CDC627D70A85ACFA0923F628A7FA048C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:d9:64:d5:26:ec:b3:31:c2:dc:70:8c:db:
                    06:b6:75:c1:60:72:5f:97:62:fc:78:ae:1f:a2:1e:
                    73:a1:d8:85:e0:87:60:01:25:ec:b3:cb:17:8b:e9:
                    92:1c:8f:75:32:aa:84:58:52:d2:34:7f:21:f4:cc:
                    24:05:6b:62:2a:10:df:14:5f:49:ea:a6:75:a9:55:
                    6b:52:34:70:c6:af:6b:e7:7d:68:e9:cd:15:81:6a:
                    3d:36:f2:6e:b1:bf:46:5d:b6:a8:5a:b0:26:d2:f5:
                    a2:74:45:61:0b:66:47:32:31:41:0a:05:a2:eb:5f:
                    02:a1:c8:53:95:f1:7c:cd:02:e5:e7:29:32:d3:4d:
                    e1:79:f6:1b:33:7d:4b:b3:8d:19:7a:5f:78:b8:a4:
                    50:1f:ee:76:f3:4e:7c:0c:0e:ce:29:3f:44:83:65:
                    28:12:20:7a:c4:58:92:f1:86:cc:a2:18:0b:93:53:
                    da:00:29:18:a3:ec:0f:d0:e9:38:5d:5e:ec:6f:50:
                    52:71:3b:fe:a2:37:0d:36:f2:77:d6:02:6b:a8:94:
                    f8:6b:f4:e2:4f:b1:bf:3b:e6:c3:ab:29:03:3b:86:
                    32:d5:ff:b3:8a:89:0c:b4:e1:19:6c:81:b7:64:bf:
                    35:26:1e:77:3d:9e:01:53:5d:f0:de:b0:df:41:37:
                    b5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:BB:9F:7C:DC:62:7D:70:A8:5A:CF:A0:92:3F:62:8A:7F:A0:48:C8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/49BB9F7CDC627D70A85ACFA0923F628A7FA048C8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.212.0/22
                  45.191.168.0/22
                  45.231.8.0/22
                  45.235.116.0/22
                  131.161.4.0/22
                  138.59.20.0/22
                  138.117.204.0/22
                  138.121.64.0/22
                  138.185.24.0/22
                  168.181.80.0/22
                  168.195.64.0/22
                  168.227.8.0/22
                  170.239.192.0/22
                  170.239.220.0/22
                  170.254.160.0/22
                  177.125.80.0/20
                  177.152.160.0/20
                  177.221.72.0/21
                  179.189.96.0/20
                  181.225.180.0/22
                  186.216.128.0/20
                  186.251.200.0/22
                  187.1.48.0/20
                  187.17.240.0/20
                  187.73.0.0/20
                  187.86.64.0/20
                  187.108.48.0/20
                  189.90.240.0/20
                  191.5.80.0/20
                IPv6:
                  2804:5c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28201

    Signature Algorithm: sha256WithRSAEncryption
         af:6c:ed:ba:13:5e:e8:1e:85:a1:90:dd:e5:c2:99:f7:d7:ad:
         15:54:df:b3:34:44:60:94:97:80:6c:fd:91:f2:2b:89:f7:24:
         a9:d8:7c:9d:10:3e:bf:74:16:15:52:cd:a5:f1:e8:ff:5a:fe:
         36:87:88:6a:a2:ab:47:f9:6c:e0:e9:11:5c:5a:a0:6b:84:f6:
         6b:80:a3:85:03:31:5f:76:b0:63:56:9d:e8:8d:2a:5c:6e:90:
         36:ca:16:31:2a:e8:37:6c:0f:be:17:d3:ed:36:33:ab:67:73:
         d3:55:ff:39:02:77:46:f9:a4:8a:be:ef:96:15:71:db:96:b8:
         c3:fe:c3:69:db:f9:bb:37:6c:f0:2d:e2:65:6e:8d:a0:b8:75:
         83:96:cd:d7:fa:ee:e0:ad:cd:6b:88:83:e5:96:15:ba:b9:31:
         0b:2b:53:37:1a:b6:59:ed:77:77:1e:50:c3:7c:7e:04:70:db:
         76:bd:3f:07:cf:39:4b:4d:b1:51:0b:63:45:64:e9:ee:ae:4e:
         c9:35:a3:3e:82:59:d1:5c:c1:49:29:e9:b0:cb:17:3d:43:96:
         14:89:d1:3d:29:83:3b:36:5a:36:aa:44:33:76:ef:a3:1f:b0:
         31:9e:39:49:0e:2b:b4:07:cd:1d:84:60:12:83:e7:be:a2:b8:
         30:76:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org