Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.cer
File:                     4A0CF634A638CADFFABAC397E0D1615D2CA89C53.cer (raw, json)
Hash identifier:          4RZunYt91pv5WF7kBdpPjQQ7BpBj5QtwBP1Q+TTTPXM=
Subject key identifier:   4A:0C:F6:34:A6:38:CA:DF:FA:BA:C3:97:E0:D1:61:5D:2C:A8:9C:53
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       696ABF75BA96067BF3C8E2DA9CEC61080FB33798
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.mft
caRepository:             rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 15 Dec 2023 12:43:15 +0000
Certificate not after:    Fri 13 Dec 2024 12:48:15 +0000
Subordinate resources:    AS: 267124
                          IP: 45.229.52.0/22
                          IP: 2804:487c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6a:bf:75:ba:96:06:7b:f3:c8:e2:da:9c:ec:61:08:0f:b3:37:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 15 12:43:15 2023 GMT
            Not After : Dec 13 12:48:15 2024 GMT
        Subject: CN=4A0CF634A638CADFFABAC397E0D1615D2CA89C53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3a:2d:bd:75:a4:0d:4d:b7:02:ab:af:6e:7e:
                    f8:4f:ee:f0:29:87:ce:ed:04:9b:a4:cf:97:42:26:
                    28:6d:90:2a:db:7a:e3:ec:bd:c4:9d:cd:7f:fe:e7:
                    3e:36:02:fc:42:99:65:73:08:99:4d:da:b2:7f:c2:
                    09:b2:9f:cb:67:e4:3a:64:5d:7e:a6:9f:ab:24:af:
                    99:0f:28:40:02:84:60:ff:ef:66:e0:d1:29:29:99:
                    8a:24:c8:22:31:6b:a9:09:e2:ff:33:2b:51:83:d5:
                    0f:8a:52:ce:57:56:bf:68:df:b8:8e:a2:d8:6e:e2:
                    5c:98:b5:bc:dd:b5:ea:4a:c1:f0:03:0a:3b:85:7f:
                    61:e7:bd:3a:f4:b2:42:d2:4f:a1:a1:60:4e:08:4c:
                    ce:cb:ef:35:12:89:20:fb:33:70:0d:19:c2:db:67:
                    b4:3e:9b:7a:88:85:bb:b9:a4:aa:db:b2:78:8f:bc:
                    85:ca:64:85:ff:15:9b:63:75:ed:79:72:90:e9:96:
                    99:2c:fe:75:50:ab:96:85:f4:d2:86:3d:3a:98:4e:
                    90:ff:2c:eb:81:be:97:4c:84:00:2d:5e:0f:bd:d0:
                    e3:a4:0a:f9:c2:df:a4:91:78:66:e7:7f:5c:45:4c:
                    35:91:75:43:8e:1d:16:1b:13:fc:3c:59:bd:ad:03:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:0C:F6:34:A6:38:CA:DF:FA:BA:C3:97:E0:D1:61:5D:2C:A8:9C:53
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/4A0CF634A638CADFFABAC397E0D1615D2CA89C53.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.52.0/22
                IPv6:
                  2804:487c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267124

    Signature Algorithm: sha256WithRSAEncryption
         33:85:34:ae:a5:77:aa:68:7d:ce:2e:82:77:3b:09:33:24:ef:
         08:85:0b:ab:2e:a4:76:1d:96:9a:22:28:19:c5:ff:1e:0d:b1:
         f2:7a:5c:47:c1:db:de:14:c5:1f:81:83:cc:64:71:05:ef:08:
         c3:da:47:75:2f:e1:fd:1b:e9:05:93:07:72:73:95:2f:89:53:
         85:0c:02:eb:60:34:e0:d3:67:b0:93:fd:1b:5e:77:35:77:fa:
         3e:b8:37:8e:d4:00:fa:fb:86:55:04:d9:8f:4a:00:f1:4b:52:
         f3:ac:f3:18:15:46:55:98:1c:16:10:7b:48:0e:fe:7b:3f:4a:
         e3:b9:cb:5c:99:41:90:e5:c3:34:65:2f:b7:d7:b1:5d:d8:16:
         85:8d:61:e7:ac:b7:28:10:a1:eb:fe:81:98:cd:4c:1d:1d:bc:
         28:50:54:c8:d2:fd:bc:64:bf:57:2c:ec:0d:b7:b0:64:d3:0a:
         81:b8:a2:78:5a:49:4d:93:a3:c8:11:df:62:8f:bf:b9:f8:be:
         ec:66:83:b0:2b:88:4d:f2:12:52:1b:6f:bd:34:33:9d:fb:79:
         5a:e6:1b:d0:77:d2:c1:88:8c:10:b7:a4:f1:22:ef:e1:9e:21:
         e2:96:7a:0e:1a:bf:3a:fb:ce:21:96:7f:9d:ca:f2:d3:4d:51:
         47:63:f2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org