Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
File:                     4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer (raw, json)
Hash identifier:          LjbnU2y3om41i1P/ivRe7+lpYw7W8ff1ce7kCNC6kTw=
Subject key identifier:   4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0E81F3BC76E212D3AEE85AFFF11BC222A0A94A89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.mft
caRepository:             rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 27 Mar 2023 17:34:19 +0000
Certificate not after:    Mon 25 Mar 2024 17:39:19 +0000
Subordinate resources:    AS: 28656
                          AS: 262514
                          AS: 264228
                          IP: 45.190.116.0/22
                          IP: 168.195.100.0/22
                          IP: 170.80.64.0/22
                          IP: 177.55.176.0/20
                          IP: 177.55.224.0/20
                          IP: 179.0.72.0/22
                          IP: 190.52.72.0/22
                          IP: 190.109.64.0/22
                          IP: 201.77.160.0/20
                          IP: 2804:568::/32
                          IP: 2804:2488::/32
                          IP: 2804:33cc::/32
                          IP: 2804:7944::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:81:f3:bc:76:e2:12:d3:ae:e8:5a:ff:f1:1b:c2:22:a0:a9:4a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 27 17:34:19 2023 GMT
            Not After : Mar 25 17:39:19 2024 GMT
        Subject: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f1:ae:20:91:93:3c:23:f8:78:28:3a:bf:16:
                    66:b1:df:61:69:cc:a8:5f:5f:87:6b:22:41:bb:eb:
                    47:b4:08:de:97:5b:c6:f2:ae:37:8d:22:85:03:9e:
                    e1:89:e7:b8:4b:b2:16:33:5e:af:3c:f6:00:42:ce:
                    f5:59:53:5b:38:76:a5:d0:02:ac:91:b2:db:81:e4:
                    8f:4f:06:1b:b2:f8:2e:e4:ee:b9:d2:27:59:3f:7b:
                    d7:14:74:21:3e:0e:b1:3e:c3:4e:a9:c4:c5:b0:60:
                    0b:2e:5d:43:02:39:2a:6d:ef:d9:0d:17:6e:e5:cb:
                    a7:e5:fe:70:4e:ad:8a:a6:5e:6f:3c:a6:dd:1f:8e:
                    10:ad:5d:8e:22:37:ae:ba:65:80:b3:01:fe:16:26:
                    6e:07:f9:da:05:7f:8e:7e:26:b7:90:fe:fa:5c:05:
                    c4:cd:47:23:86:9b:a6:e1:59:5d:b0:bf:5d:b0:21:
                    01:fa:06:14:cf:cc:04:e0:ba:61:26:3f:65:65:6f:
                    62:d9:b4:af:30:64:93:1c:cf:4c:cd:89:ee:6a:12:
                    94:d2:25:e1:41:a9:f9:1f:fb:9d:3a:b1:f0:69:da:
                    47:68:ef:a3:c9:de:05:47:fb:25:64:34:d3:ce:ba:
                    0a:7a:32:8c:e3:d9:47:fe:d8:a1:5e:30:4a:73:bc:
                    cf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.116.0/22
                  168.195.100.0/22
                  170.80.64.0/22
                  177.55.176.0/20
                  177.55.224.0/20
                  179.0.72.0/22
                  190.52.72.0/22
                  190.109.64.0/22
                  201.77.160.0/20
                IPv6:
                  2804:568::/32
                  2804:2488::/32
                  2804:33cc::/32
                  2804:7944::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28656
                  262514
                  264228

    Signature Algorithm: sha256WithRSAEncryption
         96:ea:56:38:d8:77:06:b4:24:63:75:ba:eb:9f:db:07:64:ba:
         65:cb:46:e3:29:ab:45:ba:7f:6d:47:96:7b:19:d2:ee:01:34:
         68:50:27:67:3b:36:cb:f1:3d:15:48:fa:a1:d5:1a:b3:3d:d2:
         d1:5e:23:64:ac:42:07:36:3e:28:e4:ad:b7:06:ea:8e:eb:f5:
         be:4d:a7:a4:16:18:75:e5:62:63:56:5f:ee:6a:d5:3c:76:29:
         63:26:ff:54:59:e3:65:a1:3c:1b:24:80:2c:00:13:78:a0:14:
         57:f3:48:81:a7:80:43:51:13:ee:42:d0:b1:83:54:40:63:6a:
         91:5a:36:31:32:af:b6:98:31:bd:41:1f:2c:0f:03:b7:13:4a:
         91:4e:5c:0e:57:92:02:74:55:4b:1b:dc:d7:98:c1:08:e5:ee:
         de:f7:f8:f3:5e:42:45:24:00:27:91:73:a3:ca:08:18:48:03:
         a9:76:53:91:00:f5:d4:18:e2:e0:62:1d:f0:00:22:75:e0:d6:
         de:9c:87:5f:4e:22:62:3e:7e:13:5e:40:e0:71:57:0a:c7:70:
         dc:57:d2:b7:c9:2e:d7:37:4c:cf:ca:55:b4:3c:af:46:e7:e6:
         d3:f5:cd:0c:0b:8f:fa:d6:15:14:a6:1c:60:91:62:77:b8:21:
         45:66:2b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org