Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4DF04DE3305B3700D931F1DFB0BEDC97FAB94109.cer
File:                     4DF04DE3305B3700D931F1DFB0BEDC97FAB94109.cer (raw, json)
Hash identifier:          wR3A/IWex6IPKxc+GeVwMFudBRgb6hAs+4iHNFEIkCA=
Subject key identifier:   4D:F0:4D:E3:30:5B:37:00:D9:31:F1:DF:B0:BE:DC:97:FA:B9:41:09
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       10C125BFD3A7527A932873D5BB725423766CE4BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/4DF04DE3305B3700D931F1DFB0BEDC97FAB94109.mft
caRepository:             rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 20 Jan 2023 18:26:55 +0000
Certificate not after:    Fri 19 Jan 2024 18:31:55 +0000
Subordinate resources:    AS: 265263
                          IP: 168.90.32.0/22
                          IP: 2804:2d20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c1:25:bf:d3:a7:52:7a:93:28:73:d5:bb:72:54:23:76:6c:e4:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan 20 18:26:55 2023 GMT
            Not After : Jan 19 18:31:55 2024 GMT
        Subject: CN=4DF04DE3305B3700D931F1DFB0BEDC97FAB94109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:15:4e:45:a4:2a:57:0a:64:99:93:d2:70:
                    a5:e2:75:c6:98:07:42:50:56:50:73:81:f5:94:af:
                    10:36:f7:de:93:8d:8e:c9:f1:70:dd:56:5c:04:7b:
                    77:7b:97:fc:73:8c:0e:d5:75:0e:bd:0c:db:14:86:
                    4d:3a:0e:59:b3:d1:e8:92:91:8c:44:d1:51:38:ef:
                    2e:6d:2b:64:8d:20:bd:15:cb:d8:d4:6b:8e:62:32:
                    93:5b:a9:47:fe:8d:ec:eb:11:3b:f3:8d:4a:48:6d:
                    99:76:84:39:0c:55:d8:b9:6b:b3:bb:09:6c:f1:f2:
                    67:2c:26:f6:2e:b7:6e:c1:49:d6:54:92:a5:45:65:
                    00:a8:27:f2:0b:da:7f:9b:4b:f9:ee:04:82:59:dd:
                    14:a3:e6:74:0a:a8:dc:06:09:01:79:bc:a9:3f:95:
                    f2:c0:10:0c:a0:f8:81:6a:8f:96:80:e2:e8:b6:52:
                    1b:03:e0:e4:a2:a9:20:d3:3b:95:70:91:14:75:34:
                    37:ab:da:f6:9b:7d:c8:92:00:24:0c:af:46:96:2a:
                    9c:5a:dc:fc:b0:f4:64:6c:a1:ab:2a:64:8c:7e:9a:
                    ae:84:3c:8b:22:35:aa:2f:f7:10:49:14:8f:57:33:
                    f1:51:ca:68:5d:78:2e:58:1a:b3:80:a5:e0:ba:05:
                    60:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4D:F0:4D:E3:30:5B:37:00:D9:31:F1:DF:B0:BE:DC:97:FA:B9:41:09
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/XAebTZaEnWSRUNgM4a4aST8KoE8cmVDp36ReNviFqTP/0/4DF04DE3305B3700D931F1DFB0BEDC97FAB94109.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.32.0/22
                IPv6:
                  2804:2d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265263

    Signature Algorithm: sha256WithRSAEncryption
         69:20:33:89:a1:b4:13:56:5f:7b:99:54:98:a6:43:3a:a4:68:
         bf:e2:52:68:4d:48:7a:77:4c:6e:37:d6:db:a8:52:ea:27:17:
         78:d1:20:fe:4a:e2:9f:4f:5e:5b:24:c0:df:75:cc:1b:00:c1:
         b0:3a:a6:87:21:80:80:60:86:15:9b:56:21:80:22:2f:1e:ba:
         0c:7a:7f:ab:f6:9e:58:c8:51:81:31:11:e6:10:8e:c2:e1:62:
         17:e1:3f:9c:4d:46:8f:6c:3b:00:e3:5b:91:ea:d2:11:b6:fb:
         df:a7:5c:18:6d:f8:31:1b:c6:93:77:c5:e2:24:6f:9c:b5:e5:
         39:fd:3e:f5:7d:9c:19:3e:4f:da:5f:c7:3a:e5:11:d4:fc:92:
         43:c1:dd:61:d8:81:09:33:8b:88:d9:d3:e1:2f:6c:84:90:02:
         be:d6:9d:9f:e3:ae:49:33:9f:56:0e:1c:af:41:f3:30:63:a3:
         91:4d:54:fc:25:cb:a8:5c:9a:69:71:49:9e:39:18:62:04:d6:
         56:3d:f7:a1:5b:c5:ce:b1:2f:93:ac:03:50:9f:2d:cb:45:00:
         a5:de:7b:0d:a9:f0:be:f7:b3:02:42:6a:93:89:77:9a:f2:67:
         2f:56:33:ce:82:02:20:0c:b6:bf:04:1c:15:8a:24:2e:00:f6:
         86:ae:79:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org