Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer
File:                     4DADAA86614F6E4C3B10F48D9ABD50378962D295.cer (raw, json)
Hash identifier:          ElHMOTh2hFrvaGvzBpUWREOKyXtruwAdzA1lotOjz38=
Subject key identifier:   4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       188453166A2C674BF597A2344945BC45F4F6D923
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 31 Jan 2024 02:56:11 +0000
Certificate not after:    Wed 29 Jan 2025 03:01:11 +0000
Subordinate resources:    AS: 268323
                          IP: 45.175.188.0/22
                          IP: 45.232.88.0/22
                          IP: 45.238.116.0/22
                          IP: 170.246.68.0/22
                          IP: 177.53.128.0/21
                          IP: 177.125.184.0/21
                          IP: 187.45.48.0/20
                          IP: 187.95.48.0/20
                          IP: 187.95.176.0/20
                          IP: 191.37.144.0/21
                          IP: 192.141.196.0/22
                          IP: 200.9.160.0/22
                          IP: 201.158.40.0/21
                          IP: 2804:4f60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:84:53:16:6a:2c:67:4b:f5:97:a2:34:49:45:bc:45:f4:f6:d9:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 31 02:56:11 2024 GMT
            Not After : Jan 29 03:01:11 2025 GMT
        Subject: CN=4DADAA86614F6E4C3B10F48D9ABD50378962D295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b5:ec:7a:a0:d6:47:9b:d6:a4:5f:c8:bd:e3:
                    26:16:be:d7:5a:f9:eb:56:dc:bd:75:b1:3c:ca:b0:
                    11:db:0e:cb:39:4b:67:74:8c:dc:a6:a6:98:ea:dd:
                    07:6f:33:3d:9f:38:0b:2e:f8:33:6d:2e:98:b5:7a:
                    35:94:91:22:d4:0a:a3:c1:ee:f4:6c:8b:22:2c:91:
                    65:62:b3:08:e2:76:01:51:d2:c1:81:3a:af:8a:9e:
                    9b:1d:87:2a:a6:59:ee:5e:2c:bc:69:1f:0c:32:ff:
                    b2:04:17:24:66:81:24:8b:6a:dd:6c:3a:30:c6:77:
                    c1:cb:03:fb:f5:17:ef:e8:1e:a6:69:73:3c:33:1e:
                    2e:5b:2f:7e:f6:b8:8f:76:f3:45:e7:f0:c5:ad:34:
                    a0:2a:4f:02:47:b4:47:04:9a:d9:61:0a:cf:87:9a:
                    da:3e:7a:32:fb:4d:86:5b:7b:fb:2a:33:8b:a9:3d:
                    f2:33:4e:68:36:fa:45:09:9c:f3:39:fc:c0:a0:99:
                    07:a4:8c:39:7e:e8:fa:2a:2b:7c:59:9c:c9:d3:25:
                    41:fe:dc:f1:91:25:a6:5b:52:29:6c:61:40:2b:7d:
                    b7:bd:c2:c2:23:a7:00:cf:72:b5:7f:10:0e:ed:0e:
                    42:24:c6:a4:07:6d:47:15:50:5e:97:b3:46:d0:af:
                    54:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:AD:AA:86:61:4F:6E:4C:3B:10:F4:8D:9A:BD:50:37:89:62:D2:95
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BwAZVFpun8DRcf727MorKbtWvvtznASez2HuXpH81hnf/0/4DADAA86614F6E4C3B10F48D9ABD50378962D295.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.188.0/22
                  45.232.88.0/22
                  45.238.116.0/22
                  170.246.68.0/22
                  177.53.128.0/21
                  177.125.184.0/21
                  187.45.48.0/20
                  187.95.48.0/20
                  187.95.176.0/20
                  191.37.144.0/21
                  192.141.196.0/22
                  200.9.160.0/22
                  201.158.40.0/21
                IPv6:
                  2804:4f60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268323

    Signature Algorithm: sha256WithRSAEncryption
         11:40:35:f1:48:d9:3b:ba:19:92:91:27:a6:21:48:b7:5e:45:
         f4:e1:9c:59:f9:22:7b:46:4e:a7:04:aa:c7:d3:83:ec:ae:de:
         b9:4d:e0:e5:30:4a:fc:b4:8a:fd:47:27:eb:06:5e:5b:ef:2b:
         89:93:42:55:aa:64:c5:b7:0a:24:f9:d3:de:2f:c0:37:bf:72:
         74:04:d8:99:36:83:17:a0:ce:33:0d:25:e2:fe:5b:69:77:62:
         25:8c:35:06:5b:08:f9:25:3f:07:cd:3b:56:31:47:7c:0b:10:
         37:d1:2a:0f:87:6d:84:de:99:d6:a2:93:5f:bc:4d:e4:d2:c7:
         92:ce:ed:3b:a4:59:43:16:ab:14:9c:ec:4a:03:b2:ff:42:41:
         a7:0e:e0:00:42:4e:2e:cd:c5:03:04:56:97:4e:91:85:13:dd:
         b2:fc:17:f0:96:f4:1d:72:91:0c:87:e9:96:8d:f4:36:37:97:
         76:22:aa:78:f4:4a:61:f3:53:df:da:59:88:c9:65:bb:36:15:
         8c:c2:af:0d:aa:ce:49:3b:e7:bc:21:21:77:bf:22:d1:57:65:
         ae:f8:ad:6e:80:10:07:0c:a5:80:48:fb:76:12:4a:51:84:94:
         cf:9b:78:59:c9:18:6c:84:da:f6:15:63:05:94:29:d6:5a:ed:
         27:7b:87:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org