Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer
File:                     49BF5E85349EBDC5882B3BC22BB811D867E4BE70.cer (raw, json)
Hash identifier:          fZJUQIRhtqHUPv77s7k0FeJ7xLlCkmn3IobmngoS6y8=
Subject key identifier:   49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       303F3664588C55E8B8E84B4E67CD61C1F72BC986
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.mft
caRepository:             rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 10:58:48 +0000
Certificate not after:    Mon 31 Mar 2025 11:03:48 +0000
Subordinate resources:    AS: 52653
                          IP: 138.122.180.0/22
                          IP: 177.221.80.0/20
                          IP: 2804:bf8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3f:36:64:58:8c:55:e8:b8:e8:4b:4e:67:cd:61:c1:f7:2b:c9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  1 10:58:48 2024 GMT
            Not After : Mar 31 11:03:48 2025 GMT
        Subject: CN=49BF5E85349EBDC5882B3BC22BB811D867E4BE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a4:c1:ad:40:98:15:d4:0b:d7:4d:82:f6:4c:
                    8a:17:a6:f9:a0:fa:9a:01:a0:a2:b8:b5:74:62:0c:
                    55:53:f8:a3:45:bd:e3:a3:c3:f5:59:31:70:9f:9f:
                    3d:6d:53:a0:1c:70:55:04:a7:65:88:24:34:dc:87:
                    7c:19:5b:58:ea:cf:c8:60:c0:7b:fc:db:ae:62:31:
                    e8:af:83:b5:bb:df:85:7d:26:96:c6:06:ae:3e:c9:
                    05:08:5c:9e:c9:c6:cb:a4:95:ca:1f:fe:4b:fc:dc:
                    57:b4:79:23:91:0f:42:98:04:be:eb:c1:7b:7b:81:
                    7c:48:db:19:c8:eb:06:a2:ab:1d:ba:cc:03:06:dc:
                    82:21:f9:1c:e6:07:0d:1f:7e:09:6b:ca:a9:66:37:
                    7d:79:5f:51:69:78:7b:0d:de:f4:39:86:b4:40:ca:
                    54:30:40:0d:8d:8c:bb:40:4a:72:58:cd:e2:1b:a7:
                    70:aa:29:2c:73:8f:b4:32:07:c6:b9:df:c4:4d:dc:
                    a4:ba:44:5a:de:9a:df:7a:ba:3c:d6:cf:c4:4e:08:
                    ee:de:f8:bc:7f:d5:19:67:f8:7d:39:30:ed:2c:db:
                    e7:91:cf:32:5d:b2:d8:2a:42:91:b2:84:d7:59:58:
                    77:c3:d5:2d:00:0f:af:9b:d8:85:ee:1c:45:06:09:
                    22:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                49:BF:5E:85:34:9E:BD:C5:88:2B:3B:C2:2B:B8:11:D8:67:E4:BE:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/0/49BF5E85349EBDC5882B3BC22BB811D867E4BE70.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.180.0/22
                  177.221.80.0/20
                IPv6:
                  2804:bf8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52653

    Signature Algorithm: sha256WithRSAEncryption
         32:cc:b0:6c:95:50:3e:2c:5d:41:ec:7d:e2:c7:96:6f:b1:99:
         51:6c:ce:12:da:73:cd:1b:4a:ab:85:d3:56:3b:e2:d5:86:b0:
         cd:77:ea:d8:99:ed:6a:b7:fc:c8:09:66:b9:7e:e5:34:ae:f2:
         3c:a5:d3:fa:3c:ba:ee:f2:15:18:96:c4:e4:9f:8a:89:30:40:
         4a:1e:35:8f:79:8c:32:d3:b0:dc:93:60:0f:a7:4c:48:48:1a:
         f4:2b:21:52:b2:29:be:53:25:de:25:74:aa:6b:ef:52:6e:5c:
         34:db:90:e5:6b:b4:61:7f:90:c9:46:34:7b:5d:b4:8b:27:d6:
         fc:66:b0:55:c9:55:d5:35:49:8d:7f:3d:c4:02:f4:95:5d:0b:
         6e:4b:41:a7:2a:74:30:e3:4b:89:76:09:22:68:89:74:59:4e:
         56:fd:93:4a:17:89:63:b7:ca:22:a6:f0:be:f5:f6:14:40:37:
         23:36:23:9e:45:2b:64:14:83:1c:4e:bb:b7:19:11:8e:59:1d:
         da:f9:3c:90:15:e1:e4:1e:df:71:ae:80:97:c6:27:16:0d:8d:
         14:1d:f8:db:1d:ef:fd:7a:df:2f:3d:1a:00:9f:90:95:33:db:
         5a:a3:df:ce:3b:c5:2c:21:ee:2b:ba:2a:10:00:3f:6e:6c:80:
         39:f6:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org