Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.cer
File:                     4AD23F69FEB6F0C4185CED1CD33614808371B5CA.cer (raw, json)
Hash identifier:          01APVbsqzt1Y6yQw5erUPLf7yhRxfO8uJEsaEKeV2vw=
Subject key identifier:   4A:D2:3F:69:FE:B6:F0:C4:18:5C:ED:1C:D3:36:14:80:83:71:B5:CA
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       68103F391140DD500746C822CCA657ED15BB1E4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 14 Dec 2022 19:17:04 +0000
Certificate not after:    Wed 13 Dec 2023 19:22:04 +0000
Subordinate resources:    AS: 268459
                          IP: 45.161.128.0/22
                          IP: 2804:518c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:10:3f:39:11:40:dd:50:07:46:c8:22:cc:a6:57:ed:15:bb:1e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 19:17:04 2022 GMT
            Not After : Dec 13 19:22:04 2023 GMT
        Subject: CN=4AD23F69FEB6F0C4185CED1CD33614808371B5CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5f:73:26:9c:f8:f2:91:90:dd:81:36:2e:9d:
                    37:8e:81:cb:78:b2:3a:6f:2d:31:b0:1f:45:eb:20:
                    b7:7b:aa:37:3c:1b:10:1c:6b:e3:1a:0f:b8:94:7d:
                    b5:96:ec:b4:57:20:36:12:84:c8:5c:2b:78:0e:78:
                    54:ca:dd:06:60:18:c1:c3:7f:3e:6b:21:aa:19:aa:
                    94:90:a2:05:13:97:8a:dd:ff:a1:36:b8:b4:1a:9c:
                    a1:8e:02:05:0b:f5:3e:c7:20:e6:83:15:1b:5b:4a:
                    bc:c1:ba:08:b7:f9:04:b2:f3:c1:77:90:62:9d:0b:
                    56:d0:99:67:0e:96:a1:38:62:58:10:dd:f2:96:34:
                    79:11:e3:66:f9:0f:61:d4:d0:8b:2e:fa:a8:22:2d:
                    84:6d:9e:cd:c9:ca:61:bc:fb:d4:16:68:cd:0a:d8:
                    0d:c7:e0:2d:0f:2a:47:a6:d5:b0:c8:fc:81:05:06:
                    24:17:63:79:d0:c2:ce:e0:23:66:8e:47:b7:cd:0c:
                    52:91:74:32:0d:f1:cc:ef:6a:d2:33:d6:a2:a8:4d:
                    5c:33:db:af:b8:91:24:2e:13:c8:b0:c9:24:37:d7:
                    41:0c:91:02:1a:a8:55:46:24:62:d2:38:b9:77:d7:
                    14:9c:c8:6c:ae:1a:ab:c1:59:a4:77:c4:c1:4e:04:
                    24:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4A:D2:3F:69:FE:B6:F0:C4:18:5C:ED:1C:D3:36:14:80:83:71:B5:CA
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7Eyv6yMWgkb6d1YoF65VUixTdB3eeDBkKEAr67pwnWys/0/4AD23F69FEB6F0C4185CED1CD33614808371B5CA.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.161.128.0/22
                IPv6:
                  2804:518c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268459

    Signature Algorithm: sha256WithRSAEncryption
         83:53:c1:88:63:e4:f3:dd:a2:cf:5c:ff:7f:51:d0:63:0d:59:
         fb:85:a8:07:c7:a2:43:45:84:56:05:97:b3:91:47:b6:44:08:
         22:02:ee:3d:cf:65:20:a6:23:e5:94:02:73:90:05:a4:ef:39:
         93:e6:ad:30:a8:a6:5f:b9:1c:15:bc:3d:6a:b3:36:b3:e3:7a:
         13:9b:86:3c:40:d4:fd:64:b3:18:63:64:0e:28:35:7f:f3:a6:
         6e:8a:11:a5:44:b6:86:3a:50:9a:49:dd:0c:5b:cd:35:b5:30:
         9e:b0:ef:4f:9d:66:38:37:69:02:1e:d4:20:0f:eb:19:ac:f4:
         ba:c9:08:21:b7:0c:b6:1d:4e:b9:d9:b7:6e:1e:a7:6f:7b:76:
         0a:b1:50:2d:1c:87:1b:3b:ae:64:0c:51:aa:a6:b3:8e:ae:4d:
         3d:b4:a6:c4:42:14:74:02:65:4b:d7:4d:90:56:fd:3a:d5:02:
         1d:56:4c:9f:97:9e:9c:bf:36:0a:8d:f2:d1:cf:d9:b5:7f:5c:
         c9:40:b9:b9:8e:bc:44:c8:44:e3:79:7d:4b:a0:5d:0f:41:04:
         9f:0c:23:35:a7:7a:97:65:75:4d:57:ea:9d:61:a3:e8:66:ba:
         24:42:06:0f:63:d3:05:0d:d0:41:47:8a:3d:d4:bd:26:82:2f:
         ee:0b:3a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org