Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4A991C2717908721615683766C88FB5488945AAF.cer
File:                     4A991C2717908721615683766C88FB5488945AAF.cer (raw, json)
Hash identifier:          B90SGVkyN/L1iS73N+vUUK5e1Iq0IclSCE5iC53jpzw=
Subject key identifier:   4A:99:1C:27:17:90:87:21:61:56:83:76:6C:88:FB:54:88:94:5A:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       461E9D629A3B89590ADB62B5FDD8499D38D4E54C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/4A991C2717908721615683766C88FB5488945AAF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 07 Dec 2022 18:20:37 +0000
Certificate not after:    Wed 06 Dec 2023 18:25:37 +0000
Subordinate resources:    AS: 269359
                          IP: 45.184.68.0/22
                          IP: 45.230.84.0/23
                          IP: 2804:6368::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1e:9d:62:9a:3b:89:59:0a:db:62:b5:fd:d8:49:9d:38:d4:e5:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  7 18:20:37 2022 GMT
            Not After : Dec  6 18:25:37 2023 GMT
        Subject: CN=4A991C2717908721615683766C88FB5488945AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:aa:18:f4:49:63:bd:4d:40:1c:9b:49:6c:f5:
                    ce:bf:21:ac:30:5b:7f:3c:76:32:46:83:24:74:91:
                    97:e5:fe:94:55:69:36:d2:00:13:14:b5:1f:e4:da:
                    07:ce:90:7c:07:34:39:0c:fa:cb:1c:92:41:fd:55:
                    7e:17:fe:4b:9c:ae:f3:c7:25:21:a5:60:cd:9a:90:
                    5b:97:46:cd:ce:28:37:27:33:96:e9:7e:24:eb:c1:
                    68:51:74:9d:0e:c1:ef:6a:d5:9b:91:df:63:76:c6:
                    72:0b:84:1b:c4:ce:21:3e:5f:23:e6:0a:33:55:21:
                    b0:81:b3:cf:89:d8:56:06:a3:8a:61:7b:e2:f0:8d:
                    ff:d9:53:dd:cd:37:f4:cc:2c:0a:b1:4b:bd:c8:72:
                    8b:84:9e:6d:c1:4b:d8:7c:d6:7d:21:51:c0:86:82:
                    7c:44:e3:ac:ba:50:da:eb:f2:bb:f8:74:85:73:7c:
                    8f:11:61:36:1d:51:5c:c0:b4:4f:1f:11:a7:3e:e1:
                    82:43:b4:ed:cf:b5:c7:69:2b:73:65:ec:72:a8:4e:
                    bb:35:7b:63:0f:4e:d5:56:48:71:9e:61:34:8d:64:
                    8f:55:6f:ec:a0:b9:0f:f1:b5:01:22:6e:3c:f3:b4:
                    48:dd:38:73:37:ac:33:c9:b0:66:97:64:bd:b0:b0:
                    ca:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:99:1C:27:17:90:87:21:61:56:83:76:6C:88:FB:54:88:94:5A:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/4A991C2717908721615683766C88FB5488945AAF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22
                  45.230.84.0/23
                IPv6:
                  2804:6368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269359

    Signature Algorithm: sha256WithRSAEncryption
         7e:ab:20:0e:77:65:48:5a:95:76:82:fd:04:60:cd:07:d7:d1:
         c3:8c:a8:a9:ee:b8:20:a3:c3:73:63:9c:7c:6f:06:6c:d6:77:
         df:eb:41:4c:85:1c:93:18:0a:a6:1f:c8:69:55:2d:35:ae:94:
         4e:ec:01:bd:b4:02:0a:18:8f:53:42:9d:3a:64:10:bb:59:02:
         d1:3e:56:c1:d8:ac:8a:25:ce:19:49:58:fc:ae:eb:d9:58:0f:
         98:3a:8f:03:ac:80:7c:34:a5:7c:25:2d:5d:6f:6a:10:f0:2a:
         15:6e:29:84:8b:47:c9:b3:6d:13:db:90:90:e3:69:8c:9e:54:
         94:b6:38:72:0c:19:51:27:ea:56:ed:5d:ae:6b:ab:85:59:66:
         50:68:da:ad:85:c8:90:03:aa:e4:69:be:c1:47:cd:fd:ff:e8:
         b2:dd:22:97:36:0f:64:a4:0e:c6:d4:fc:33:d2:d5:4b:2a:fb:
         ec:58:15:b1:f6:9a:ee:fb:80:72:68:31:f5:f9:79:bf:11:48:
         07:d4:a4:54:7c:74:cf:56:93:03:09:2e:15:9d:8a:3f:02:e3:
         ee:ab:df:ff:4e:ea:c9:45:72:ff:27:2f:6f:a5:63:d1:f2:63:
         f2:f7:fe:77:05:a5:16:b8:8a:af:79:65:8a:eb:32:d5:61:91:
         72:1f:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:39:43 2025 by rpki-client