Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4D7068B77BEBEC7F14EDF2C09A731A5359106274.cer
File:                     4D7068B77BEBEC7F14EDF2C09A731A5359106274.cer (raw, json)
Hash identifier:          pn/fpJet50+0HsIQS9+AOYer9QjxN3xQhWAlMDAuGMg=
Subject key identifier:   4D:70:68:B7:7B:EB:EC:7F:14:ED:F2:C0:9A:73:1A:53:59:10:62:74
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       208075B9141E78ADC2177EAB90AE6A12B46B7AC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/4D7068B77BEBEC7F14EDF2C09A731A5359106274.mft
caRepository:             rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 14:16:56 +0000
Certificate not after:    Wed 04 Sep 2024 14:21:56 +0000
Subordinate resources:    AS: 264936
                          IP: 168.232.80.0/22
                          IP: 2804:3034::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:80:75:b9:14:1e:78:ad:c2:17:7e:ab:90:ae:6a:12:b4:6b:7a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Sep  6 14:16:56 2023 GMT
            Not After : Sep  4 14:21:56 2024 GMT
        Subject: CN=4D7068B77BEBEC7F14EDF2C09A731A5359106274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:58:8b:b3:ba:2d:f0:54:0d:07:65:bb:16:
                    89:53:73:96:2d:b1:c6:b2:8f:ba:63:dc:27:5e:7e:
                    34:bf:14:5a:50:c2:27:a7:0c:54:b0:1a:30:b0:3f:
                    33:73:99:fa:ab:d6:a8:52:6f:57:20:89:8c:73:20:
                    f4:59:bc:0f:5b:dd:0c:1e:69:df:ef:b6:aa:a8:4f:
                    ef:ca:39:9f:1e:f4:42:d6:de:26:72:4b:18:47:70:
                    53:23:1d:8d:fe:8e:43:9b:1e:f3:3a:c1:0d:6e:a8:
                    88:b5:38:11:eb:11:8f:c6:e0:ca:d6:1f:af:2c:54:
                    c1:56:62:89:16:d2:c7:2c:fc:c9:09:7c:ce:28:68:
                    9d:7c:f0:06:76:2d:1d:0f:96:4b:d7:56:99:23:04:
                    05:95:24:0e:7d:ac:7c:7c:ca:c3:70:f3:e6:1f:f6:
                    46:7e:93:1a:8b:2a:72:04:e9:e4:c1:4f:22:cc:95:
                    f3:fc:bb:48:7c:db:80:f4:9d:92:b3:46:aa:1d:59:
                    31:7d:fd:34:1e:ef:cd:8c:4c:cd:73:15:79:ef:71:
                    d3:a5:a7:3d:af:20:5e:a4:ac:61:c5:96:d9:5c:d0:
                    9d:02:fb:fb:22:9a:92:c1:c4:df:d8:5f:c0:ec:2f:
                    9e:46:0e:da:e8:91:8d:e8:e5:3b:9c:3a:58:85:90:
                    36:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:70:68:B7:7B:EB:EC:7F:14:ED:F2:C0:9A:73:1A:53:59:10:62:74
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/43r5HtNuaBtfqCD3LbVgGoawviriwV6NXYypba3raWPn/1/4D7068B77BEBEC7F14EDF2C09A731A5359106274.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.80.0/22
                IPv6:
                  2804:3034::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264936

    Signature Algorithm: sha256WithRSAEncryption
         27:fe:cf:f1:3c:06:62:5b:c8:d8:b8:a8:d3:08:e1:9e:81:7a:
         2b:c7:23:11:30:61:c7:bc:d8:1b:ce:15:d8:c8:76:6a:66:5e:
         c7:3e:cd:96:d0:4a:9c:de:d8:23:1a:38:fc:5a:b2:3b:d3:04:
         c1:82:a5:f9:4c:3c:fe:61:b9:32:99:99:d4:53:45:ec:c2:31:
         f1:53:de:3d:9b:f3:04:5e:23:a1:11:cd:4d:14:b2:4c:5c:9c:
         52:1a:92:b0:ba:a6:c4:82:f2:17:9d:e5:1f:e7:22:44:e7:d8:
         62:57:01:2a:55:53:a8:f7:13:dd:3e:f1:d6:6f:53:29:b2:07:
         19:ef:e1:bc:a1:78:2c:f2:c8:55:67:30:ca:db:21:28:8e:f9:
         4a:d2:41:d0:34:f5:4e:18:e5:ed:fd:20:1c:b8:f8:b7:3a:47:
         95:a8:fc:3b:4d:12:d3:b0:7d:f1:06:1e:04:d9:95:16:11:da:
         ca:e6:2a:29:5f:95:21:45:22:40:d7:f2:21:72:db:09:fc:64:
         c3:62:c0:49:eb:01:6e:0f:bf:ad:2b:54:3c:83:22:8d:e1:a5:
         47:bd:49:c3:37:73:87:4a:6c:2a:77:da:0b:54:ed:77:09:bf:
         cd:c3:93:4a:d5:8e:82:11:d2:48:68:ff:45:49:cb:e8:f6:56:
         87:a9:ac:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org