Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4C196B57B27C15104F424597FA0E07778E1C16A1.cer
File:                     4C196B57B27C15104F424597FA0E07778E1C16A1.cer (raw, json)
Hash identifier:          gj0BXUmC0ZGFrqvvOQF07XO/B4XYSwdSMkb0oWFShyM=
Subject key identifier:   4C:19:6B:57:B2:7C:15:10:4F:42:45:97:FA:0E:07:77:8E:1C:16:A1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       4E2064486C8A6F6E5CDA5C73D1578301A4EC4326
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/4C196B57B27C15104F424597FA0E07778E1C16A1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 26 Jul 2023 00:42:25 +0000
Certificate not after:    Wed 24 Jul 2024 00:47:25 +0000
Subordinate resources:    AS: 61726
                          IP: 131.72.96.0/22
                          IP: 2804:1b68::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:20:64:48:6c:8a:6f:6e:5c:da:5c:73:d1:57:83:01:a4:ec:43:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jul 26 00:42:25 2023 GMT
            Not After : Jul 24 00:47:25 2024 GMT
        Subject: CN=4C196B57B27C15104F424597FA0E07778E1C16A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c9:12:f7:be:df:e1:fd:5c:78:4e:05:5c:73:
                    54:cb:0a:40:73:aa:ae:0a:a0:32:4e:ea:d0:6e:9a:
                    77:00:77:92:45:16:ca:2e:ab:c8:15:74:8a:1d:23:
                    a5:48:af:fd:8b:01:cf:a3:7e:c9:6a:58:22:11:be:
                    5b:47:e1:71:84:65:b9:51:d9:76:80:a6:6d:ec:57:
                    5f:9a:f0:da:c8:f4:9d:f0:2a:03:6e:80:2b:a4:1a:
                    8f:58:07:8d:2c:b9:e9:c5:e2:41:87:6a:72:3d:30:
                    25:5a:a8:86:56:f8:9e:5f:ed:0d:9f:b7:d1:ce:fe:
                    96:ca:b9:4e:68:09:7e:3f:6c:7e:81:7d:dd:5b:bf:
                    c9:95:55:e6:64:b8:ef:14:57:57:c0:bb:7e:72:15:
                    72:f0:2c:35:d2:44:72:6b:d3:92:29:d5:c9:5d:ee:
                    fc:86:35:14:74:3f:c5:5d:7b:ec:12:30:12:c5:11:
                    0b:b9:cc:32:48:ac:5e:6c:56:c1:4b:d3:83:e6:6b:
                    84:2a:5e:6c:35:75:a5:59:fc:f8:e6:59:16:cd:ae:
                    79:10:d3:cb:ce:61:f3:3b:e6:5e:81:87:a0:2e:f0:
                    00:08:95:a2:ac:0f:08:d9:df:8d:9d:d4:6d:4e:e9:
                    be:36:45:af:e3:dd:87:67:19:9f:82:46:9f:ad:3c:
                    f8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:19:6B:57:B2:7C:15:10:4F:42:45:97:FA:0E:07:77:8E:1C:16:A1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/4C196B57B27C15104F424597FA0E07778E1C16A1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.96.0/22
                IPv6:
                  2804:1b68::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61726

    Signature Algorithm: sha256WithRSAEncryption
         36:a2:f2:26:06:c6:77:3b:5d:52:6f:d1:78:9b:36:4e:52:a3:
         36:30:a3:57:36:cb:17:d4:4f:22:20:60:f3:23:81:a8:3c:91:
         27:a8:35:03:f3:17:15:13:06:29:33:d1:45:25:4d:85:6a:f2:
         4f:68:26:c6:3c:16:3c:2a:b8:cf:40:f8:d9:dc:7d:7a:49:7c:
         ca:15:41:a3:f2:87:6d:2f:49:70:3e:c6:88:21:d6:f4:70:cb:
         47:50:7d:31:cc:17:00:91:60:2f:47:93:2d:9a:fa:7b:36:b4:
         5a:85:73:ab:04:21:82:11:0c:5f:10:f2:41:07:69:7c:c4:1d:
         b5:90:75:e1:fb:26:7f:07:6a:79:68:32:02:83:b7:26:3a:d2:
         c0:db:ef:93:8c:1e:d7:54:aa:f7:78:07:e6:cf:65:0f:6e:16:
         1c:77:7c:c4:e2:0b:06:09:c7:52:f9:6e:5f:16:b4:2a:57:83:
         b3:f7:90:c7:69:d4:33:08:e0:66:54:64:c5:c0:4a:12:15:19:
         73:ff:59:5d:3f:82:c3:1d:e1:66:b6:f7:4e:fd:1d:d7:89:19:
         89:93:2a:a7:f9:50:42:d1:0c:e3:ad:20:64:46:df:6e:96:4a:
         b8:a1:65:0a:7b:0f:36:9a:d7:63:15:9f:de:44:b4:3a:9d:dc:
         32:9e:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org