Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.cer
File:                     4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.cer (raw, json)
Hash identifier:          NytXPl7njiFkyDmjV3Soze8E12GOEDd8kWmS4haIF0Y=
Subject key identifier:   4E:98:76:5D:4D:92:82:DA:10:8E:F0:EE:4C:B3:84:67:08:EB:3B:2D
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       38E99C58CE0C68F02CDE3846019AF8541579B123
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.mft
caRepository:             rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 12:42:04 +0000
Certificate not after:    Thu 12 Dec 2024 12:47:04 +0000
Subordinate resources:    AS: 268573
                          IP: 45.163.72.0/22
                          IP: 177.70.246.0/23
                          IP: 2804:5344::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e9:9c:58:ce:0c:68:f0:2c:de:38:46:01:9a:f8:54:15:79:b1:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec 14 12:42:04 2023 GMT
            Not After : Dec 12 12:47:04 2024 GMT
        Subject: CN=4E98765D4D9282DA108EF0EE4CB3846708EB3B2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:06:12:6c:c0:7d:08:5e:02:e9:6c:4b:93:55:
                    3f:ed:1c:55:5f:f9:cc:a7:d1:ff:23:e8:cd:22:71:
                    6d:a3:e4:d8:ef:b4:21:48:80:eb:73:aa:53:2b:36:
                    ec:d1:13:a9:fb:28:f2:74:0f:e7:cc:02:b9:d2:d5:
                    fa:a4:df:8a:d5:65:d3:96:15:e7:bb:4c:d1:c5:dc:
                    51:d4:00:f1:b8:ae:1e:db:f9:9f:ea:67:04:ea:96:
                    4e:5a:cf:31:fe:fa:d8:13:70:69:df:69:7f:3b:c0:
                    30:b1:14:31:8c:3d:dd:7c:5e:22:2e:4d:eb:38:c5:
                    b2:c3:42:07:a0:2d:02:e8:2c:db:a6:9f:8a:a3:be:
                    bd:1c:eb:27:40:55:42:77:47:ca:26:b6:4b:c8:63:
                    a7:a9:09:17:49:cb:68:69:40:bb:a7:de:e5:cc:e2:
                    72:43:a0:0c:0c:fb:14:22:ce:54:8b:68:e0:c9:cc:
                    9b:57:85:7f:0e:18:24:bc:0d:f2:f7:20:67:33:64:
                    e5:85:b0:37:66:3b:ba:18:a6:c9:b9:6b:67:28:5e:
                    35:b2:29:b4:ac:89:74:c8:a2:24:05:d3:5e:21:ce:
                    f6:42:e9:86:ed:b9:66:d2:64:f2:9b:d9:f2:61:39:
                    39:16:d3:a7:ee:a3:e5:9a:7e:8d:38:e7:2e:6a:3a:
                    a3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:98:76:5D:4D:92:82:DA:10:8E:F0:EE:4C:B3:84:67:08:EB:3B:2D
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/25Pj2NuqSpcuCtgWnpU8HQtdkVXho9kkha9qWoMCW6Ec/0/4E98765D4D9282DA108EF0EE4CB3846708EB3B2D.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.72.0/22
                  177.70.246.0/23
                IPv6:
                  2804:5344::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268573

    Signature Algorithm: sha256WithRSAEncryption
         7c:66:dd:a4:d8:89:2b:2c:d5:85:09:5e:01:71:f0:ed:88:72:
         49:e6:9c:a4:9b:49:ef:bc:56:79:2d:5a:ad:30:5d:40:54:01:
         20:e0:9a:28:2d:26:0a:bb:6c:61:b2:40:a0:de:69:a4:27:23:
         82:0e:8e:96:6c:b4:68:59:49:d0:db:c5:c3:ed:6e:3d:0a:b9:
         3d:fa:43:04:dc:ed:5f:f5:b5:74:e0:32:94:1d:a6:66:c3:b5:
         d3:17:3d:d3:3e:7c:1e:e7:28:1a:da:b8:e3:8a:7c:90:69:97:
         4c:2d:e2:9a:65:1f:71:47:81:f9:f2:20:04:53:23:e1:2c:4e:
         70:d1:49:54:1f:f5:98:cc:ee:02:fb:d6:06:e1:98:c3:d3:ca:
         30:b0:88:f7:a7:03:7d:88:e0:4a:d1:1c:18:2b:90:2f:e7:2e:
         80:46:b2:46:d5:1d:b9:35:12:c6:8e:8f:04:0a:ec:62:36:90:
         6c:c0:f0:ec:a2:49:1b:eb:7b:8c:52:d1:d0:13:e6:a0:fa:37:
         30:ff:1b:7d:4b:50:2c:7b:b4:ad:10:78:ab:9c:f0:f5:0a:c6:
         1a:e9:a1:80:0f:7c:34:61:aa:a0:1e:63:18:1b:bb:10:15:8a:
         0c:56:ff:03:c8:d0:56:d5:95:65:84:14:b2:c4:4c:3d:66:0d:
         34:57:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org