Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4B8DF8D852CACD55345E7E125DD4A6D45F2105A8.cer
File:                     4B8DF8D852CACD55345E7E125DD4A6D45F2105A8.cer (raw, json)
Hash identifier:          rlp4ruPNZQgv0MD+VwbDpiyj8eX7/8WoRlktOUnTFeU=
Subject key identifier:   4B:8D:F8:D8:52:CA:CD:55:34:5E:7E:12:5D:D4:A6:D4:5F:21:05:A8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1A9C0DF5E2F4B1C45795AC196ADA5FB90AA1FE75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/4B8DF8D852CACD55345E7E125DD4A6D45F2105A8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 24 Feb 2023 18:23:08 +0000
Certificate not after:    Fri 23 Feb 2024 18:28:08 +0000
Subordinate resources:    AS: 263362
                          IP: 191.37.152.0/21
                          IP: 2804:14f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:9c:0d:f5:e2:f4:b1:c4:57:95:ac:19:6a:da:5f:b9:0a:a1:fe:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 24 18:23:08 2023 GMT
            Not After : Feb 23 18:28:08 2024 GMT
        Subject: CN=4B8DF8D852CACD55345E7E125DD4A6D45F2105A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:07:c7:57:0d:88:33:6a:ac:8a:b8:be:3e:
                    58:81:e0:91:0a:b1:60:e3:6a:13:e0:4d:39:c7:19:
                    38:10:8b:c4:39:86:2d:7f:af:0e:bc:55:1b:d0:91:
                    a3:cb:48:59:1b:c8:e7:eb:91:cf:1e:5d:e9:2f:9e:
                    2c:f0:d8:34:0e:18:d6:18:7a:9f:40:6f:ce:1e:40:
                    01:3a:ec:c1:49:f2:a0:e9:71:f4:8c:16:af:0f:23:
                    60:34:18:d6:87:be:96:b6:05:10:29:a1:68:18:71:
                    41:0c:57:8c:11:93:a6:d8:2f:6e:ce:25:65:b0:04:
                    8d:94:03:7c:f3:3a:fd:4c:9a:a1:8d:07:d6:09:0b:
                    4d:63:5a:bb:ce:1f:57:b9:c5:e3:54:ed:48:a5:5b:
                    8a:ed:c2:21:ac:19:b8:20:eb:20:c8:ff:1e:c4:ec:
                    5d:2f:ec:b9:78:53:91:33:a8:aa:13:9d:ae:a9:e4:
                    8e:a7:54:f6:cf:88:a4:87:7a:94:ef:ce:56:90:10:
                    2f:cd:58:67:ab:a4:ba:fb:76:60:02:63:8b:b3:37:
                    a1:2a:e1:df:b0:7b:b5:0c:c8:42:b4:1f:df:59:81:
                    42:15:fa:19:35:1d:30:23:67:68:12:3a:e1:2f:45:
                    ed:ce:f8:52:20:57:6e:3f:54:b8:02:00:21:0d:73:
                    57:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:8D:F8:D8:52:CA:CD:55:34:5E:7E:12:5D:D4:A6:D4:5F:21:05:A8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/AK7m7J3nYu4HoFtyrRFsQ8QG7GsEqo9ssQqc3NdtRQA4/0/4B8DF8D852CACD55345E7E125DD4A6D45F2105A8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.37.152.0/21
                IPv6:
                  2804:14f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263362

    Signature Algorithm: sha256WithRSAEncryption
         45:b7:d9:8e:38:dc:e8:84:08:09:b2:cd:13:22:36:6e:70:21:
         06:3e:0f:e5:05:e3:96:7c:10:b2:64:10:8f:f3:69:91:2d:ca:
         c2:0e:34:b4:63:5c:9d:c6:fd:a1:7e:3e:76:eb:90:db:86:ce:
         ef:35:22:0d:fc:f6:ea:a6:a6:17:2a:06:17:42:ba:a2:3e:83:
         fb:6e:1c:36:32:3e:17:28:56:60:60:2f:ed:16:ab:43:bd:c3:
         46:11:0e:b2:79:ee:c4:7c:aa:ba:b7:da:09:2c:8b:12:93:fa:
         f5:62:d0:01:07:26:06:d9:4d:e6:a1:1d:96:4a:b8:2b:82:ed:
         fb:ef:d9:6f:26:4a:53:11:b9:e5:de:c2:2e:c5:bf:87:e4:bd:
         1a:47:00:32:db:07:74:a3:63:55:c7:a8:ac:e5:f8:55:7c:74:
         b2:f6:d4:3f:fe:45:5f:cd:4a:c4:cd:ad:97:ac:fb:23:6e:83:
         83:24:91:78:a8:97:12:00:5c:68:ea:a4:7b:0d:f7:16:5c:1a:
         82:7e:7f:62:a4:07:a0:76:f7:09:14:95:19:57:49:44:33:35:
         34:9d:cd:37:51:61:36:c8:b7:df:9d:a8:a3:53:65:50:3a:f3:
         fe:10:40:2f:f6:7f:c1:c7:7b:78:2e:b4:ec:38:f6:da:54:4b:
         8f:38:af:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org