Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.cer
File:                     4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.cer (raw, json)
Hash identifier:          DRJIEf8x3fxOOkBYGOPiTF6HTW1rdY8ZHgnenxxXXSo=
Subject key identifier:   4C:FB:DC:F7:FE:7E:54:B8:9F:D3:C7:FA:AC:3A:D7:82:B9:8E:AF:96
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       35E6A376DF475C9B378FC845DCCFB563191263FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.mft
caRepository:             rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Mon 12 Dec 2022 12:06:13 +0000
Certificate not after:    Mon 11 Dec 2023 12:11:13 +0000
Subordinate resources:    AS: 266607
                          IP: 45.7.192.0/22
                          IP: 2804:3e94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e6:a3:76:df:47:5c:9b:37:8f:c8:45:dc:cf:b5:63:19:12:63:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 12 12:06:13 2022 GMT
            Not After : Dec 11 12:11:13 2023 GMT
        Subject: CN=4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:f6:42:c5:5c:c5:a2:49:05:28:95:0b:06:
                    d3:25:92:71:3c:fd:ee:82:f4:0b:91:e3:ab:d6:b0:
                    5a:8d:2d:f2:13:d6:66:f3:3c:e2:40:62:48:d1:02:
                    b1:56:33:5a:02:05:c6:a1:9a:9a:59:b1:7b:97:b2:
                    0c:27:ed:3c:34:1e:69:89:05:5e:b7:1d:fa:75:de:
                    e1:fb:82:e9:23:9d:69:3e:13:ab:c7:6e:bf:0b:3f:
                    70:d0:b5:56:e3:d3:cf:62:27:d9:0b:9e:8f:68:17:
                    f2:3f:b4:9c:71:11:6d:3b:bc:c4:32:95:83:a6:b7:
                    1e:55:c6:93:e1:98:e6:11:12:fc:8b:bd:6d:48:bd:
                    4f:c7:8d:8f:85:8e:9e:13:f9:72:a8:32:62:00:1c:
                    a9:28:42:6f:21:65:9f:07:a0:60:14:9e:3a:62:b2:
                    47:0a:0b:0c:ab:44:ae:3d:5b:8a:d5:aa:c4:9b:8b:
                    15:da:28:b7:dd:2a:21:66:2e:4e:2b:8c:c6:71:8a:
                    9a:14:04:87:9e:fe:ef:14:28:73:5e:46:87:82:aa:
                    9c:a2:47:bd:ed:6b:e8:54:50:93:e1:da:bd:00:33:
                    45:d0:9e:a8:40:12:f7:e6:dc:ef:3e:60:53:6e:f5:
                    0f:0c:04:18:56:26:36:c8:d4:6f:87:a9:3c:37:41:
                    36:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4C:FB:DC:F7:FE:7E:54:B8:9F:D3:C7:FA:AC:3A:D7:82:B9:8E:AF:96
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/Ew4Fd2v4sQ3xwmtVCVKdiZzsprVokfTkKXDJ9JBZeThp/0/4CFBDCF7FE7E54B89FD3C7FAAC3AD782B98EAF96.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.192.0/22
                IPv6:
                  2804:3e94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266607

    Signature Algorithm: sha256WithRSAEncryption
         13:b3:8d:03:b7:ed:fd:14:64:2e:26:5f:e3:34:a3:73:90:72:
         3d:75:ba:56:18:ec:90:cb:f5:18:8c:88:5c:7b:6a:34:df:f0:
         a3:1b:0a:04:cb:85:5d:c8:88:1a:b2:e5:42:6b:87:12:29:6a:
         98:c1:fa:d1:15:d8:5d:e3:35:fa:91:51:a7:62:e6:47:45:f6:
         d7:eb:65:4a:3e:7a:bf:76:28:2d:55:68:99:55:2a:2f:0d:50:
         73:26:eb:bf:2a:ff:0d:e0:f7:c6:66:f0:18:9c:a0:82:ef:a8:
         57:5b:52:ed:5c:40:ab:25:91:2d:52:4a:33:f9:73:18:01:de:
         9f:56:a2:74:63:15:27:50:d6:5d:e1:4c:14:c1:de:62:ff:b5:
         53:d1:86:16:ed:d3:42:04:15:6a:be:cb:70:48:d5:5e:35:14:
         d6:0b:68:74:9c:f8:d5:d9:c4:b2:d0:2f:27:14:e3:c5:90:40:
         93:45:89:c3:d4:11:56:ee:df:66:af:01:c4:df:6e:3d:88:0f:
         92:03:2e:44:bd:d5:92:b1:e9:b1:18:5c:57:d0:5b:0c:9f:8e:
         70:7a:2d:fb:2f:36:ce:81:0a:d1:67:0a:08:d0:da:f5:d2:ab:
         c0:ba:20:ee:70:f6:89:56:b7:96:df:4b:d1:6f:36:35:02:d9:
         78:a8:a0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org