Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4BBEABA88EF44652C0A031E2A8833FCA3801E899.cer
File:                     4BBEABA88EF44652C0A031E2A8833FCA3801E899.cer (raw, json)
Hash identifier:          S2Hae5plTNSEbMeK2PKJ5C5ob9nkoXHgvQ6PD8uB0IQ=
Subject key identifier:   4B:BE:AB:A8:8E:F4:46:52:C0:A0:31:E2:A8:83:3F:CA:38:01:E8:99
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       48E6D2B38A595F5E93D9D7A39D0B14FD4C3DB016
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/4BBEABA88EF44652C0A031E2A8833FCA3801E899.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 14 Oct 2022 16:17:17 +0000
Certificate not after:    Fri 13 Oct 2023 16:22:17 +0000
Subordinate resources:    AS: 271150
                          IP: 179.42.108.0/22
                          IP: 2804:7708::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e6:d2:b3:8a:59:5f:5e:93:d9:d7:a3:9d:0b:14:fd:4c:3d:b0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 14 16:17:17 2022 GMT
            Not After : Oct 13 16:22:17 2023 GMT
        Subject: CN=4BBEABA88EF44652C0A031E2A8833FCA3801E899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e5:2b:12:dc:ed:1f:48:be:e5:82:bd:54:7d:
                    0a:bf:11:4a:96:42:f9:f9:41:60:cd:e8:0a:53:a0:
                    64:4e:8a:ef:a5:88:3f:2d:f5:5c:9d:cb:88:d6:cb:
                    49:e5:d6:4a:8a:44:4d:3f:25:a4:36:7a:62:72:6a:
                    06:a1:d7:1d:cb:a3:49:bc:b6:24:27:57:36:e5:67:
                    33:e5:13:53:00:88:66:9e:af:d5:29:98:00:f5:14:
                    f2:cf:4a:e9:36:8c:56:e6:34:5f:46:de:ae:af:6d:
                    c1:65:96:e0:c3:09:19:aa:e9:c3:41:96:2c:fa:1f:
                    93:23:39:77:ee:b5:26:95:44:12:7a:71:5d:a8:41:
                    a0:19:a0:cc:2b:89:c3:f5:34:81:c0:91:f9:9b:9d:
                    46:ab:04:9c:70:24:87:53:2e:61:ce:e0:71:ac:f2:
                    bd:9b:9e:7d:3a:4b:2f:56:13:3e:fe:d1:0c:e8:39:
                    f5:ba:08:a1:20:1d:13:67:81:58:c9:81:ab:fe:72:
                    cf:ee:24:e3:40:44:3d:08:0b:99:41:6a:78:70:63:
                    34:b6:de:d2:43:f8:9e:58:ad:41:36:5b:71:53:26:
                    be:29:3e:d9:c1:0f:5f:88:89:d9:77:43:c2:8b:a7:
                    97:66:41:71:d2:07:7c:10:b4:73:12:43:68:46:7f:
                    89:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:BE:AB:A8:8E:F4:46:52:C0:A0:31:E2:A8:83:3F:CA:38:01:E8:99
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GaLd6ApocDBCeWjwwPnuPuRnkyXPKRC2YTeDdGc4daE4/0/4BBEABA88EF44652C0A031E2A8833FCA3801E899.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.108.0/22
                IPv6:
                  2804:7708::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271150

    Signature Algorithm: sha256WithRSAEncryption
         9f:d3:c7:a6:33:1a:e6:1e:89:12:00:f1:1c:a0:c6:10:87:e5:
         02:16:69:39:47:95:48:c8:9a:3f:50:b7:d4:ef:5f:8b:f9:8a:
         a7:c0:60:62:f2:1b:a4:97:ce:aa:e4:42:90:9a:4e:9c:38:c0:
         e6:16:de:00:32:54:42:d4:70:64:56:bb:19:fa:c9:75:9e:59:
         c3:d6:73:9f:a6:36:eb:88:fe:1f:fe:62:f2:8c:b5:44:28:30:
         1c:37:5c:bb:44:ea:ae:8a:a5:40:05:e7:cb:a5:e6:36:a7:ba:
         68:de:f2:16:e1:27:3b:7d:94:85:69:18:ab:db:0a:92:c1:27:
         8a:a4:0a:ce:42:e6:9c:f7:62:90:a9:27:a0:f7:b5:fc:91:f4:
         9d:ac:e3:71:bf:38:e6:80:a4:8f:03:14:8e:04:05:7d:71:4e:
         f5:de:cf:4b:dc:c5:12:a6:4a:6a:06:6f:0e:3e:95:84:e5:73:
         5e:64:23:52:b0:4a:81:99:00:3b:16:7e:93:37:55:17:d4:6a:
         c4:ed:0f:70:50:4c:05:e9:21:2f:3c:40:94:0b:40:82:9e:25:
         6b:35:04:48:70:83:e3:a1:14:10:fc:a3:0a:7f:ad:75:40:59:
         8c:06:82:40:28:1e:bd:06:57:6f:33:39:fa:bc:9f:b7:52:60:
         ff:37:3e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org