Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4E796F1DC03FFA00CE3444AE95F35525432C41D3.cer
File:                     4E796F1DC03FFA00CE3444AE95F35525432C41D3.cer (raw, json)
Hash identifier:          Y7545na+ceHSkcT656GjqcwRCfGAj5FdjOfD8DhurnM=
Subject key identifier:   4E:79:6F:1D:C0:3F:FA:00:CE:34:44:AE:95:F3:55:25:43:2C:41:D3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       485A0B9AEE32CF2B3C47DC578D48A4F443F3D9CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/4E796F1DC03FFA00CE3444AE95F35525432C41D3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Sat 09 Apr 2022 19:59:58 +0000
Certificate not after:    Sat 08 Apr 2023 20:04:58 +0000
Subordinate resources:    AS: 269638
                          IP: 45.190.132.0/22
                          IP: 2804:6798::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5a:0b:9a:ee:32:cf:2b:3c:47:dc:57:8d:48:a4:f4:43:f3:d9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Apr  9 19:59:58 2022 GMT
            Not After : Apr  8 20:04:58 2023 GMT
        Subject: CN=4E796F1DC03FFA00CE3444AE95F35525432C41D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:c1:4a:95:0f:3e:44:c9:4f:19:01:fc:57:
                    c1:82:71:fe:32:9c:82:0d:44:fe:22:ca:bc:e7:29:
                    6f:cf:fa:06:7e:b8:55:53:4e:b5:f2:5a:96:95:26:
                    ae:4a:68:5f:fc:53:16:21:ed:b5:bf:ed:05:51:ab:
                    8b:93:f0:82:b1:ea:63:2e:e2:e9:d0:01:9e:07:a6:
                    c3:c3:ae:f5:81:23:24:96:ed:3b:e6:a0:1b:59:67:
                    d0:9d:d0:cd:9a:2c:6b:a6:5a:d8:c0:80:96:06:b2:
                    53:d0:5d:24:e0:ac:03:46:87:05:df:2c:0d:3b:08:
                    57:41:c3:fc:f2:5f:89:9a:d2:24:e8:c2:bc:e6:a9:
                    5a:3b:64:c9:9d:f6:b0:c7:93:37:c9:53:5f:a4:d5:
                    c2:67:59:55:86:a2:04:49:39:18:41:5f:38:4e:4d:
                    96:4d:eb:39:64:46:5a:87:72:99:4c:dc:ae:55:25:
                    51:fe:8e:e1:14:db:ae:81:98:14:e8:92:48:49:c4:
                    d6:e6:86:bf:5f:0c:64:45:f4:71:a0:e9:0c:dd:3e:
                    fc:de:19:80:45:ae:06:e2:07:e1:c4:c8:53:3c:34:
                    8b:4d:15:e4:0b:aa:34:df:10:e0:0b:f5:12:c9:44:
                    da:c7:3c:af:03:3e:cc:21:11:87:dc:ac:34:09:ac:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:79:6F:1D:C0:3F:FA:00:CE:34:44:AE:95:F3:55:25:43:2C:41:D3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/G9TRFfP2mu8tmgDajicexhEZ2uCXt5dF7yisEayx4oSK/0/4E796F1DC03FFA00CE3444AE95F35525432C41D3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.132.0/22
                IPv6:
                  2804:6798::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269638

    Signature Algorithm: sha256WithRSAEncryption
         4a:40:46:c7:53:de:f0:5c:a1:73:a4:83:be:2e:b0:ed:fa:14:
         11:e5:5c:93:76:4d:36:2f:80:2d:99:50:ba:24:66:a6:62:e0:
         88:be:5f:58:a8:e3:38:ef:71:1f:e2:a1:eb:0b:96:6a:ca:d2:
         a8:91:f5:c5:75:12:4f:00:e3:a8:2a:40:be:cd:7e:fd:97:4a:
         4d:cb:78:f0:c2:0e:a7:41:75:b5:45:d8:59:42:96:22:0d:ee:
         70:0b:9b:45:56:91:6a:a1:a9:b6:50:bb:78:72:9c:75:78:f5:
         71:96:d8:a7:9f:a3:5b:2c:e2:48:6d:e9:c0:89:f6:70:93:d9:
         0b:89:78:12:41:84:92:b1:f0:a5:f9:95:e2:69:78:e7:39:7e:
         19:07:d8:1b:0d:80:f4:97:59:9d:de:91:11:85:a7:46:af:7e:
         70:ac:6d:09:26:00:b9:4e:af:7b:a5:5f:79:d9:9e:68:3a:3c:
         ca:84:a2:56:86:f5:1e:b0:d3:08:68:7f:2f:e6:7f:5f:16:a1:
         73:ec:5b:fe:5b:2b:7d:85:0a:8e:77:1b:3a:50:7b:22:73:b9:
         63:d3:76:62:2a:c0:79:d1:85:35:bc:fe:7f:05:98:f2:b4:a2:
         46:0b:30:55:f9:7e:8d:ed:e9:74:16:f9:33:12:34:61:6d:0a:
         30:9a:35:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org