Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.cer
File:                     49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.cer (raw, json)
Hash identifier:          klQK1q0F1xo0ZBJ3WhbZa8i+bBGaBV7G5xZVMAElNKQ=
Subject key identifier:   49:BD:49:68:7B:0A:FF:9D:AA:A0:1E:28:75:F9:DA:31:5A:BF:7E:A3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       3923A0371D67071FFDFA33B5F91122272F54C6BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 21 Jul 2022 17:13:07 +0000
Certificate not after:    Thu 20 Jul 2023 17:18:07 +0000
Subordinate resources:    AS: 266086
                          IP: 45.4.208.0/22
                          IP: 2804:3a64::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:23:a0:37:1d:67:07:1f:fd:fa:33:b5:f9:11:22:27:2f:54:c6:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 21 17:13:07 2022 GMT
            Not After : Jul 20 17:18:07 2023 GMT
        Subject: CN=49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:85:4b:4b:63:6c:7a:87:aa:03:7f:bc:c9:
                    ac:4e:09:d7:ef:9f:7d:80:cc:9a:d8:38:cc:09:c0:
                    da:1e:50:41:e1:54:99:f6:de:19:3c:54:11:cc:a3:
                    4e:57:5b:d8:d4:0b:20:49:23:a2:d9:ab:2c:96:51:
                    ef:6a:cd:89:41:2e:16:e2:c8:07:83:aa:3c:2f:e7:
                    aa:bb:09:87:ed:80:46:7d:05:2a:28:4b:7f:be:2c:
                    87:53:2f:86:1d:35:15:49:fb:f7:a0:3d:d5:4f:80:
                    50:96:e9:cd:b1:db:ca:19:f6:55:69:bd:b9:f4:93:
                    b0:7a:68:d9:30:e4:c1:83:6b:4b:04:b3:cf:ad:0d:
                    15:2f:a4:46:31:c7:4f:e5:5a:08:6e:42:d3:f8:88:
                    a6:03:09:0a:bd:4a:12:cf:9a:2d:14:27:42:9b:19:
                    db:e3:22:c8:c7:c1:4c:36:3b:df:c9:2f:1d:71:ea:
                    4c:14:39:85:9f:a6:12:b0:e9:60:d3:92:5f:b1:16:
                    53:fd:9d:60:a2:62:28:2b:e3:32:fe:66:09:60:b8:
                    0a:f1:6f:73:a1:4d:3e:90:38:2c:5c:e5:aa:0a:f4:
                    66:ce:ca:a0:5e:54:58:04:00:32:a0:66:0b:98:6b:
                    50:03:b2:b3:5e:d5:3c:05:eb:ba:e6:ea:76:f2:34:
                    02:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:BD:49:68:7B:0A:FF:9D:AA:A0:1E:28:75:F9:DA:31:5A:BF:7E:A3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.208.0/22
                IPv6:
                  2804:3a64::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266086

    Signature Algorithm: sha256WithRSAEncryption
         0e:a9:01:90:be:ca:1e:4b:a2:04:85:3b:cc:1e:20:6d:a2:58:
         96:90:bd:58:37:df:0e:e8:28:87:7f:bf:d1:a9:9a:90:ad:b7:
         f7:e7:66:e9:46:74:27:68:ef:3b:17:66:73:fd:0e:0d:60:b0:
         03:8d:1a:ca:6f:47:d6:a3:3e:c1:5c:53:0f:47:4b:48:d6:68:
         64:68:11:c8:3c:d7:f8:86:e7:41:c0:b1:51:69:6e:fe:23:98:
         94:e3:75:04:ca:45:cc:5b:22:84:f4:7a:a7:81:3e:3a:76:3b:
         75:f3:7b:fa:da:01:f1:4c:d0:41:b5:62:ad:86:d9:f9:ad:47:
         95:2b:e9:d0:84:bd:fa:02:b6:51:9b:9e:f5:1b:70:cb:d0:b3:
         6a:0f:35:91:ee:b3:62:27:8d:1d:c2:71:e3:63:cc:18:b7:80:
         88:0e:23:f6:ad:09:5c:96:09:a9:77:c6:da:13:5d:81:eb:35:
         c7:d5:66:df:82:70:96:bb:03:9d:f7:e8:5e:33:5d:a9:72:c8:
         1d:79:aa:1c:b7:05:7f:0a:81:19:4d:10:d9:21:95:23:8e:1f:
         4f:a4:4a:7b:ec:ef:4e:14:8e:ff:3e:b6:86:b8:47:b8:38:50:
         42:28:4c:17:b3:4f:c5:f8:bf:91:00:ff:3c:9f:f4:f6:f9:6b:
         b6:29:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org