Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4C5E4BEB7398912F161523952333D01C9BF59452.cer
File:                     4C5E4BEB7398912F161523952333D01C9BF59452.cer (raw, json)
Hash identifier:          RrqdkaI0633uqqQp/FJr0uIyVty1k8vf0vOkPZN8KBw=
Subject key identifier:   4C:5E:4B:EB:73:98:91:2F:16:15:23:95:23:33:D0:1C:9B:F5:94:52
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       524DE1301A78689C0D1304B7312C0AAF47BBDE8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/4C5E4BEB7398912F161523952333D01C9BF59452.mft
caRepository:             rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 23 Dec 2023 11:40:30 +0000
Certificate not after:    Sat 21 Dec 2024 11:45:30 +0000
Subordinate resources:    AS: 262645
                          IP: 138.97.132.0/22
                          IP: 168.194.96.0/22
                          IP: 170.246.240.0/22
                          IP: 177.105.160.0/20
                          IP: 192.140.44.0/22
                          IP: 2804:23b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:4d:e1:30:1a:78:68:9c:0d:13:04:b7:31:2c:0a:af:47:bb:de:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 23 11:40:30 2023 GMT
            Not After : Dec 21 11:45:30 2024 GMT
        Subject: CN=4C5E4BEB7398912F161523952333D01C9BF59452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f3:ee:37:47:d9:79:61:2b:2f:ea:cf:65:ca:
                    de:67:ee:04:5d:c6:c4:c1:68:cf:7b:98:fb:68:ab:
                    44:1a:da:98:a5:b7:2f:de:c7:fe:37:a6:0f:c6:3b:
                    8e:78:7e:0c:65:45:b2:1e:98:8b:25:03:ad:ac:95:
                    a7:44:7f:19:db:55:68:27:6e:f9:e1:69:66:71:a9:
                    cf:df:9d:d5:4d:79:1a:85:27:9c:29:ef:4d:21:fb:
                    28:8e:31:1f:b7:c7:37:ff:dc:6a:62:a3:be:1a:b9:
                    51:15:ff:4d:e0:54:7b:d3:f9:79:b2:94:09:61:0f:
                    ba:04:6d:6a:9b:0d:66:33:59:b9:06:5d:e7:b0:ab:
                    0a:17:c9:61:a1:28:a6:ef:67:8d:bf:48:14:40:ad:
                    92:a9:3f:44:f0:fe:6e:9c:95:fd:dd:94:ef:3e:a8:
                    c1:b1:dd:bd:e4:c9:5c:4b:d6:d1:7a:53:40:7f:27:
                    2f:68:6d:9a:4b:5a:4d:a3:cf:a6:59:83:ca:54:b1:
                    0f:a2:3c:06:92:2a:26:38:e8:5c:36:ba:dc:4a:4c:
                    7d:30:71:e1:df:8f:8f:e2:4b:b0:ad:3f:61:56:fb:
                    77:b4:47:f6:58:59:59:2b:c2:8a:f1:da:9c:89:97:
                    e1:6e:85:e9:f0:d5:4b:db:f1:cc:c9:f9:f2:fd:fa:
                    8b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:5E:4B:EB:73:98:91:2F:16:15:23:95:23:33:D0:1C:9B:F5:94:52
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/9MfHRzzSZ269cnQbozgyRbNpwp4gLnWBNWFPWZEmWGXs/0/4C5E4BEB7398912F161523952333D01C9BF59452.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.132.0/22
                  168.194.96.0/22
                  170.246.240.0/22
                  177.105.160.0/20
                  192.140.44.0/22
                IPv6:
                  2804:23b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262645

    Signature Algorithm: sha256WithRSAEncryption
         5d:28:40:be:cb:c2:8e:fe:05:75:00:b8:c9:96:b3:31:e9:cc:
         03:d4:00:b0:99:52:a5:d6:44:67:3a:54:66:a9:25:22:1e:f7:
         00:77:b3:d6:ff:90:45:7f:56:3f:fd:22:3d:51:2f:72:54:c2:
         4b:0a:dd:72:f0:8e:e6:69:7b:14:3d:8c:9b:f8:54:9a:73:0f:
         b7:45:a8:cb:6f:89:f4:f0:cd:ce:59:cb:b9:0e:eb:9a:7a:2e:
         3d:68:54:b8:d9:6c:45:88:13:c5:82:65:01:2a:96:cf:5f:9c:
         59:ff:5d:9a:7d:8f:48:e1:9c:68:ff:b7:09:22:42:67:1b:72:
         63:1d:58:62:3e:31:9b:81:dc:0d:3f:e4:f4:70:2d:4a:48:4c:
         24:c1:64:7d:b4:fc:bc:a4:bf:c3:be:d7:ca:12:dd:82:07:83:
         2e:f6:61:d8:7e:01:35:4e:46:25:fb:51:c8:90:46:cf:c0:9e:
         e6:e7:59:1e:af:a5:85:2c:1c:b0:89:ed:0b:54:91:7c:1e:f6:
         f5:6a:a5:30:89:64:3f:3c:8f:49:39:69:4f:de:39:e1:11:c0:
         df:b0:98:13:67:c0:2a:14:86:0d:58:19:a4:e7:33:a8:af:9a:
         b0:49:0c:07:48:e4:4e:43:e6:f2:58:69:8f:58:87:26:f3:57:
         56:87:ac:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org