Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4BFEFFE6CC9AE632BEBE201045FA264E613EC9F1.cer
File:                     4BFEFFE6CC9AE632BEBE201045FA264E613EC9F1.cer (raw, json)
Hash identifier:          oMUpKrVWpckRSX/mKfLtmksyL38tV09ggF2RpvFfylU=
Subject key identifier:   4B:FE:FF:E6:CC:9A:E6:32:BE:BE:20:10:45:FA:26:4E:61:3E:C9:F1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       62EC31A2FD07161129B68FFAE1882E81A7E776D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/4BFEFFE6CC9AE632BEBE201045FA264E613EC9F1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Jul 2022 18:35:11 +0000
Certificate not after:    Sat 22 Jul 2023 18:40:11 +0000
Subordinate resources:    AS: 52634
                          IP: 177.124.188.0/22
                          IP: 2804:d7c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:ec:31:a2:fd:07:16:11:29:b6:8f:fa:e1:88:2e:81:a7:e7:76:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 23 18:35:11 2022 GMT
            Not After : Jul 22 18:40:11 2023 GMT
        Subject: CN=4BFEFFE6CC9AE632BEBE201045FA264E613EC9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:83:30:83:2b:9d:80:e6:cb:7e:8e:e7:54:
                    cd:c5:de:50:44:f7:f7:f7:ab:cc:44:ef:17:c7:b4:
                    90:6d:a7:f3:8a:94:45:97:9d:02:b2:b2:24:91:5a:
                    95:b9:d5:e6:a6:f0:e5:d9:22:e6:f0:23:5d:20:05:
                    96:93:2f:b2:4b:42:2e:18:23:21:28:16:11:c5:34:
                    d3:46:a0:c5:8a:9d:48:7f:55:67:ad:5d:9c:06:7c:
                    c1:eb:e9:bd:88:7e:4f:ea:32:c5:2f:b9:d6:2c:e2:
                    5c:07:bd:ba:6b:f5:5e:ba:fe:8b:f6:79:36:fe:80:
                    94:df:c3:1d:f0:2b:16:ce:4b:5e:fb:1d:4e:6a:1d:
                    1d:7c:fa:6f:7a:36:43:79:54:c7:b0:83:52:aa:03:
                    b9:d7:da:ef:23:c6:5a:34:3c:7f:ef:b5:87:aa:d5:
                    31:e5:53:97:85:88:16:69:04:76:43:e7:15:11:1e:
                    9b:69:ae:68:86:65:ce:db:bf:59:85:2e:57:85:5d:
                    8f:cb:b4:67:91:4c:9e:4a:3b:e1:61:12:7a:24:a5:
                    7a:a0:eb:79:8d:d8:58:6a:99:41:64:67:31:0b:d2:
                    69:78:6f:19:9b:c4:78:1c:93:60:d0:68:10:7a:95:
                    ac:42:71:2f:1e:cc:e9:61:de:a9:fe:f8:b4:eb:b9:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4B:FE:FF:E6:CC:9A:E6:32:BE:BE:20:10:45:FA:26:4E:61:3E:C9:F1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/D6sGrET41JpqmK78jndkcVwGfAGkrvHagmLquokDiZqc/0/4BFEFFE6CC9AE632BEBE201045FA264E613EC9F1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.188.0/22
                IPv6:
                  2804:d7c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52634

    Signature Algorithm: sha256WithRSAEncryption
         b2:c3:11:2c:fb:6a:91:32:c6:7f:4a:a0:d4:a2:18:c3:25:1b:
         84:5c:58:33:e1:fa:d4:c7:9a:38:1e:8a:1c:b5:4f:e1:43:5c:
         1f:d9:61:f1:d8:95:60:c1:f1:ac:82:b4:d8:c1:39:22:5b:8f:
         50:fc:c2:df:26:10:af:d4:6a:77:cc:27:e0:f2:64:a6:3e:61:
         b6:65:8e:49:8b:a2:e4:04:fe:c6:cc:c7:f0:9b:f1:fa:65:d6:
         06:39:69:69:75:c9:1a:0a:9b:b3:78:1f:17:40:df:8c:84:f6:
         1c:3a:b2:37:14:93:6f:c7:f3:c4:68:38:2a:52:13:34:97:5d:
         ea:3a:90:71:4a:de:c4:7d:05:c4:19:2a:44:f7:8a:3b:87:31:
         31:36:8c:81:6f:c4:1f:f2:0c:d6:5e:2d:2b:7c:60:71:2f:0f:
         f0:b6:ae:86:88:45:da:79:c6:54:5c:f8:a5:c0:f4:9b:41:fa:
         4d:ef:02:d7:ed:0d:a8:70:d1:c9:8c:51:e7:52:73:19:12:1d:
         20:f1:b4:26:67:30:0b:12:03:f0:b9:a4:27:f7:00:c7:5a:21:
         28:7d:ec:85:61:c2:d9:d3:e3:d7:ec:1b:23:b0:cc:a1:e5:4b:
         0a:fd:d0:ac:5c:a8:8c:4e:bc:16:50:43:64:75:04:10:80:7c:
         6b:e2:82:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org