Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4BA7962563F2AD2885E80A088A50C5E789664E55.cer
File:                     4BA7962563F2AD2885E80A088A50C5E789664E55.cer (raw, json)
Hash identifier:          kDakh1pz1UEgcm1VPcfMwBlSRo7qpTQNQLTeArE//8I=
Subject key identifier:   4B:A7:96:25:63:F2:AD:28:85:E8:0A:08:8A:50:C5:E7:89:66:4E:55
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       7B7450AA4BB396B6284D3E04ACF1203785FC013D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/DdDuZqZkBJPmn2kzyLiFFQDbBEUiBbbhGHqGdJ2UtbhC/0/4BA7962563F2AD2885E80A088A50C5E789664E55.mft
caRepository:             rsync://rpki-repo.registro.br/repo/DdDuZqZkBJPmn2kzyLiFFQDbBEUiBbbhGHqGdJ2UtbhC/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 31 Oct 2023 00:52:05 +0000
Certificate not after:    Tue 29 Oct 2024 00:57:05 +0000
Subordinate resources:    AS: 266622
                          IP: 45.7.212.0/22
                          IP: 2804:3ed0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:74:50:aa:4b:b3:96:b6:28:4d:3e:04:ac:f1:20:37:85:fc:01:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 31 00:52:05 2023 GMT
            Not After : Oct 29 00:57:05 2024 GMT
        Subject: CN=4BA7962563F2AD2885E80A088A50C5E789664E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8b:c1:b1:71:20:90:12:5a:14:d7:bd:52:c4:
                    46:1a:3e:07:e8:2e:ec:ef:03:27:1b:62:08:eb:da:
                    8e:08:9a:c8:dd:4a:33:14:17:d7:cd:be:8f:3e:9b:
                    e0:f3:81:f5:85:b1:15:9a:81:bb:16:4a:a0:7c:78:
                    2c:98:5b:f0:f4:00:40:47:63:04:a6:81:89:5d:db:
                    26:11:8b:fd:f8:54:fb:08:c1:e7:3f:ab:2a:58:f3:
                    34:39:9c:a9:3e:45:80:27:e1:70:99:fc:fa:64:7f:
                    2d:f3:39:57:6d:58:c7:b8:2d:61:0d:f7:a6:75:e5:
                    35:3d:45:2e:67:a4:40:ff:07:64:6e:67:aa:f2:a6:
                    4e:0d:4f:59:17:9e:3f:0b:63:81:1b:51:30:dc:99:
                    42:37:3a:23:d6:bf:50:00:0a:d2:b1:35:b0:c5:b0:
                    c6:72:9f:78:a9:ef:5e:ec:38:07:ee:58:b5:4b:ea:
                    3d:ab:3c:e4:9e:e3:e7:86:f7:09:3c:b5:56:c6:fe:
                    81:1b:02:59:b6:83:34:7c:21:27:65:22:25:4d:b5:
                    db:1c:79:5e:b8:d9:6d:f8:7a:d7:03:45:c3:57:8d:
                    4a:30:bf:c4:7d:91:c0:0b:c8:06:f3:06:ea:05:0a:
                    f5:22:b8:7e:09:ac:9d:bf:7d:e0:6d:c2:12:c3:45:
                    50:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:A7:96:25:63:F2:AD:28:85:E8:0A:08:8A:50:C5:E7:89:66:4E:55
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/DdDuZqZkBJPmn2kzyLiFFQDbBEUiBbbhGHqGdJ2UtbhC/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/DdDuZqZkBJPmn2kzyLiFFQDbBEUiBbbhGHqGdJ2UtbhC/0/4BA7962563F2AD2885E80A088A50C5E789664E55.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.212.0/22
                IPv6:
                  2804:3ed0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266622

    Signature Algorithm: sha256WithRSAEncryption
         7f:9b:08:9a:ca:be:22:26:8d:ea:b2:b6:18:d0:c6:c7:88:5f:
         e6:89:bf:97:c7:1d:0c:18:ac:c6:6c:66:9c:70:e3:45:9e:3a:
         57:d1:af:83:26:7d:ec:95:db:b1:3d:a5:6c:51:8e:73:50:91:
         d5:4c:7d:bf:d3:44:2f:f7:02:73:81:0f:ae:29:ff:fd:68:20:
         57:db:6d:31:6c:6a:23:ca:9c:72:0a:16:a0:2e:d1:d3:8c:9c:
         34:6f:39:40:34:f7:98:e9:a2:17:f1:c7:3f:cd:93:19:b6:9a:
         11:e3:3f:c8:95:75:e7:a1:e4:77:b4:6b:ec:ad:9d:91:c6:61:
         81:f4:34:57:94:10:39:c3:08:f9:82:f1:1a:ae:d4:5b:e4:09:
         39:69:2c:89:e8:b1:64:62:a2:01:15:fc:6f:36:78:6e:b3:76:
         9c:27:7e:1f:a0:37:3f:3e:e9:45:45:02:a2:01:36:c0:63:aa:
         13:9c:26:30:79:cc:92:e3:16:22:df:00:3f:b3:04:d9:dc:48:
         33:f2:9d:d8:4a:b6:16:96:39:b6:59:09:cf:21:c3:2f:5a:30:
         15:18:34:a4:5d:fc:35:40:1b:35:2c:b5:cb:68:3e:23:0f:a9:
         38:3b:93:3f:1d:ae:33:e5:60:05:44:9b:a4:f8:df:80:75:37:
         6a:ac:09:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org