Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.cer
File:                     4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.cer (raw, json)
Hash identifier:          xk98PFcUvVFAh9SWZAJoaZTux0QTXA1b8ZBDIWexa2w=
Subject key identifier:   4B:32:F7:C9:FF:0F:3B:6E:67:EC:94:88:DB:28:59:92:D0:B8:29:E9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       612CCC50421CD22BC1DDA4F8DFFD6E6E32C6C363
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 10 Aug 2023 21:45:50 +0000
Certificate not after:    Thu 08 Aug 2024 21:50:50 +0000
Subordinate resources:    AS: 266992
                          IP: 45.226.92.0/22
                          IP: 2804:467c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2c:cc:50:42:1c:d2:2b:c1:dd:a4:f8:df:fd:6e:6e:32:c6:c3:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Aug 10 21:45:50 2023 GMT
            Not After : Aug  8 21:50:50 2024 GMT
        Subject: CN=4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:af:b0:71:05:58:c3:96:6a:3d:ab:94:46:0d:
                    74:33:45:e8:ee:98:13:72:f0:2d:c6:d3:2a:60:a3:
                    9e:0e:0f:4c:72:b0:af:26:42:3b:ae:04:65:f9:c3:
                    84:5b:f2:07:da:30:e2:4c:b8:84:1d:8e:a0:17:ce:
                    b1:f4:62:e5:f0:69:49:6f:1b:68:56:dd:9b:7e:a9:
                    b0:0f:48:ce:12:b0:31:ca:ba:b9:18:38:4a:0e:9a:
                    9a:99:37:4e:91:15:53:ea:cd:46:16:99:ef:c4:9b:
                    dd:99:2a:10:53:e7:50:18:01:d7:9b:9b:28:a6:e6:
                    31:66:72:4f:66:6a:34:78:fa:f2:b1:cc:0d:4e:7a:
                    29:23:b7:47:a4:09:30:bd:d9:b4:51:ae:ea:24:78:
                    1a:71:32:ac:dd:bd:02:b6:63:63:8f:b4:19:64:f5:
                    6f:59:0d:5c:76:e9:44:f2:3f:ac:f9:d2:32:5d:0d:
                    cc:62:55:9b:e6:93:04:8f:7d:a4:69:7d:77:ad:19:
                    ec:4a:b5:6d:92:b7:00:9e:10:b3:aa:9b:ed:c0:c6:
                    d8:09:77:56:1a:d7:27:69:f8:c8:76:fd:86:f3:18:
                    53:e0:73:b5:5b:36:d7:00:83:df:f3:84:37:7a:f6:
                    0e:3b:44:70:b6:5e:8a:26:ce:4a:1c:e4:5d:7c:a5:
                    37:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:32:F7:C9:FF:0F:3B:6E:67:EC:94:88:DB:28:59:92:D0:B8:29:E9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CX8GxrNk7RDzjUQfVht3FYGVbgTpRWJLLp4AqxufP4bb/0/4B32F7C9FF0F3B6E67EC9488DB285992D0B829E9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.92.0/22
                IPv6:
                  2804:467c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266992

    Signature Algorithm: sha256WithRSAEncryption
         2a:8a:34:ff:c3:1d:3f:df:79:c2:24:4d:b7:2c:1d:c2:7a:74:
         90:65:4f:3b:c5:b3:b1:39:01:ec:c2:13:8d:9e:3b:8e:7e:a3:
         0d:31:f9:be:27:1e:35:18:dd:cb:84:a4:e9:ec:85:33:7b:cf:
         85:91:c4:49:fd:ed:91:32:76:16:10:77:78:44:bc:db:b2:da:
         a2:2d:87:69:88:21:6c:bc:83:b1:dc:7a:9f:62:09:b1:b6:62:
         e5:74:4e:76:22:00:09:4c:ca:d7:12:f8:c4:26:03:5c:3c:de:
         26:71:c9:1e:3b:99:17:58:3f:87:5a:bb:ec:0d:ec:bb:da:0c:
         15:d1:fc:6c:73:6d:f7:6e:c1:05:c0:d2:75:bf:d7:37:37:b5:
         5b:9c:e8:50:0c:17:85:66:7b:6d:0c:ab:aa:0d:5b:7b:d6:bc:
         58:65:6a:e3:4d:21:ff:e1:33:2f:81:5b:d0:d2:fb:22:33:9a:
         4c:10:7d:e4:bf:dc:86:8e:49:f8:a9:58:4c:70:4f:b3:26:10:
         33:c7:90:18:2d:ae:29:4b:f0:d9:87:24:16:b0:66:13:8a:dc:
         10:d7:a2:2c:ab:19:5f:2b:b1:37:d1:5d:0d:eb:05:ce:b0:d9:
         a4:9c:82:0b:4c:1a:44:4a:e0:8b:76:a7:9a:c8:6a:a1:a0:d0:
         56:fa:9d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org