Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4B073A71EB19E4C125AF4141445C69F0A187A5A2.cer
File:                     4B073A71EB19E4C125AF4141445C69F0A187A5A2.cer (raw, json)
Hash identifier:          Ru3rJtULaHOGEo6ndYcV9ZHBxtzClERiA89Q59xj8/U=
Subject key identifier:   4B:07:3A:71:EB:19:E4:C1:25:AF:41:41:44:5C:69:F0:A1:87:A5:A2
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6F626076B2B63723BFF9A8118E3A6BF3D4727CB0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8buYUZVuHfKGfKG5Q5sc8FTLTVsRtfDdpVHkfZksR8Tn/0/4B073A71EB19E4C125AF4141445C69F0A187A5A2.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8buYUZVuHfKGfKG5Q5sc8FTLTVsRtfDdpVHkfZksR8Tn/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 14:27:02 +0000
Certificate not after:    Tue 21 Jan 2025 14:32:02 +0000
Subordinate resources:    AS: 267590
                          IP: 45.70.224.0/22
                          IP: 2804:43cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:62:60:76:b2:b6:37:23:bf:f9:a8:11:8e:3a:6b:f3:d4:72:7c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 23 14:27:02 2024 GMT
            Not After : Jan 21 14:32:02 2025 GMT
        Subject: CN=4B073A71EB19E4C125AF4141445C69F0A187A5A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9d:24:ff:f4:00:56:63:fb:81:59:b1:4d:f7:
                    08:df:3b:7d:db:2b:c3:c2:c6:50:f5:f5:c2:c3:69:
                    e7:77:bc:66:38:cb:4d:45:0b:94:03:ec:b6:f5:93:
                    ee:72:3a:86:f8:0d:a1:92:74:7f:29:98:34:ce:c3:
                    16:6c:1c:f2:1b:0b:d2:f4:ec:8b:d3:bf:9c:47:83:
                    b8:3c:29:d2:60:29:7a:fa:4a:0b:7b:c7:7a:03:14:
                    4a:d4:1b:45:dd:f2:77:d5:93:17:38:f3:9f:ad:4e:
                    76:c9:17:15:1d:0b:8d:36:68:54:94:74:c7:5c:3f:
                    26:8d:7b:95:23:e7:ac:db:da:53:5f:e3:84:ee:e1:
                    94:14:19:94:5d:da:53:08:f2:c5:d4:47:09:01:5c:
                    0a:69:e4:8b:06:02:d6:7e:ae:0f:8e:0d:19:4f:dc:
                    cd:b2:84:1f:d7:11:44:39:8d:e9:0f:8c:df:d7:fb:
                    61:0d:fb:b3:eb:57:cd:d4:7d:71:24:5e:f8:58:65:
                    9b:02:c6:e5:aa:98:40:68:37:89:f6:cd:74:45:b9:
                    d5:fb:b7:b1:d1:21:57:b2:93:02:5b:3c:d0:97:d8:
                    3b:20:b7:47:d2:15:bb:e9:06:cb:bb:61:3d:70:f2:
                    5e:e1:b3:cb:c8:28:2f:1d:58:32:81:c5:02:4f:71:
                    47:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:07:3A:71:EB:19:E4:C1:25:AF:41:41:44:5C:69:F0:A1:87:A5:A2
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8buYUZVuHfKGfKG5Q5sc8FTLTVsRtfDdpVHkfZksR8Tn/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8buYUZVuHfKGfKG5Q5sc8FTLTVsRtfDdpVHkfZksR8Tn/0/4B073A71EB19E4C125AF4141445C69F0A187A5A2.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.224.0/22
                IPv6:
                  2804:43cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267590

    Signature Algorithm: sha256WithRSAEncryption
         56:22:87:ef:ed:57:9f:5c:9c:7e:ba:fc:71:fc:7b:36:f0:dc:
         27:56:fc:d9:c7:43:9a:61:47:e7:22:7b:4e:92:be:3e:4d:37:
         2d:fb:7e:2e:e8:3b:f0:41:5c:bd:58:8b:0c:65:0e:7c:e2:03:
         30:8b:0f:f3:d1:2d:69:02:f8:43:ee:78:3f:13:66:18:40:74:
         4b:36:7f:9b:96:08:06:1a:af:cc:60:df:98:08:5e:1f:ba:f5:
         68:1a:98:4f:25:1a:37:dd:8d:d5:f7:22:d1:db:ed:ac:f9:8c:
         3d:ca:e7:89:1b:3f:54:57:b9:1d:36:2c:0d:e2:d9:ed:d8:9f:
         b7:cb:9f:cf:e8:55:6a:a6:4f:5f:51:13:3e:58:c0:f8:b2:7a:
         1d:3f:34:ad:ee:4f:11:6f:db:db:b6:81:e6:6e:de:f4:db:b7:
         f8:7c:03:d5:70:13:0d:1e:1e:7c:94:2d:d8:92:47:82:9b:b3:
         a4:98:55:16:be:13:59:99:27:f0:02:02:11:bb:88:a4:2f:58:
         1c:54:99:bb:8a:d3:ef:bb:8d:05:8c:31:6a:c9:95:ed:d0:3c:
         d8:d4:f4:76:95:5b:6a:91:ae:47:80:84:56:02:b5:6d:ed:cc:
         21:e3:cb:df:1f:24:0e:aa:e8:ff:55:f6:64:05:96:40:e6:dd:
         93:9f:84:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org