Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.cer
File:                     4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.cer (raw, json)
Hash identifier:          /k4qRCyKvoqxyzk4Wn0lZhVD0kHKUdu9k+4tC06aAXg=
Subject key identifier:   4E:F9:45:AE:26:4A:3E:CB:03:8F:D7:B0:6C:BD:C1:0A:85:E8:E3:B3
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       2B0B8D5A3F22E5E29B41383C99DAC0ECED95AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.mft
caRepository:             rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 16:55:23 +0000
Certificate not after:    Fri 07 Feb 2025 17:00:23 +0000
Subordinate resources:    AS: 269471
                          IP: 45.187.118.0/23
                          IP: 2804:6524::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:0b:8d:5a:3f:22:e5:e2:9b:41:38:3c:99:da:c0:ec:ed:95:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb  9 16:55:23 2024 GMT
            Not After : Feb  7 17:00:23 2025 GMT
        Subject: CN=4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:af:27:86:42:1a:0c:8c:84:88:4e:e6:de:
                    46:f0:2c:d6:b2:24:6d:aa:59:0d:f3:5b:3f:d5:d4:
                    45:55:b5:53:d6:8e:96:93:79:3b:c5:46:70:77:76:
                    92:fb:95:2f:a7:dc:f5:ce:c0:ff:69:02:a9:37:a7:
                    bf:75:da:09:94:ad:c6:10:a3:28:9b:65:a6:28:04:
                    dd:08:94:d6:27:fc:87:f1:e5:b6:30:a6:a5:da:90:
                    09:af:8e:15:6e:82:b0:e8:fa:c6:3b:c1:5c:bc:6d:
                    d5:6b:70:0e:56:0b:a1:c0:94:96:62:d7:3e:01:ee:
                    a9:70:28:c3:8f:2a:c2:13:f3:d1:94:cf:24:e2:72:
                    40:51:9a:08:75:c2:2e:87:33:45:d0:2b:f9:b6:3e:
                    19:f9:42:5e:b1:c3:50:e0:4e:91:46:c3:83:95:fe:
                    1f:95:fd:8f:78:a0:5f:0d:fa:8c:86:5b:a3:81:99:
                    09:b9:61:3c:95:7b:eb:a6:1a:2f:ee:4e:39:07:95:
                    a3:a0:e8:49:c0:da:66:46:ca:78:89:cc:b6:72:8f:
                    ea:d5:83:5e:d9:5b:58:f6:8a:c2:45:f7:c4:7a:72:
                    f4:5b:f0:3b:ab:38:8b:ab:73:e5:7a:25:cf:b3:61:
                    e4:14:f8:e2:0d:29:e0:d1:fb:96:bb:21:7a:04:8d:
                    74:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4E:F9:45:AE:26:4A:3E:CB:03:8F:D7:B0:6C:BD:C1:0A:85:E8:E3:B3
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/7hBZdoP28xFraUFqPCUTv5TLWFCAAQya9cxPFKpE29w8/0/4EF945AE264A3ECB038FD7B06CBDC10A85E8E3B3.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.118.0/23
                IPv6:
                  2804:6524::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269471

    Signature Algorithm: sha256WithRSAEncryption
         30:8c:dc:ca:4f:49:63:22:f6:63:07:ed:2d:60:5a:ca:03:a6:
         0c:10:35:af:8f:4e:12:d9:6f:4e:a6:86:b4:76:8f:34:59:2d:
         6a:c1:ad:e1:54:8b:1d:82:14:3e:5c:95:9e:54:81:06:d4:2f:
         fb:6b:9e:80:ed:b9:d4:29:ed:7a:c8:cb:72:97:7f:4a:84:f1:
         4c:9f:fb:9a:a4:60:4d:d3:62:43:12:78:a2:56:1e:41:8a:2c:
         08:ae:8f:30:46:4f:cd:7a:dc:0d:30:ea:1d:52:6d:28:88:ab:
         25:87:46:af:05:61:a8:0f:dc:e8:73:c4:72:e8:a1:42:37:49:
         95:01:34:cf:7b:ee:fb:18:e2:40:e9:6c:11:32:9e:f6:72:ef:
         70:c3:e3:bc:66:98:2d:97:ad:4b:e3:e9:90:a1:5d:7a:45:0a:
         dc:8c:a4:b2:24:cb:73:8b:9e:c3:c1:38:8c:30:a6:4d:33:4c:
         7b:35:95:64:d0:8e:bc:33:f0:b8:66:8e:fc:6a:0e:36:60:9c:
         1b:10:88:e5:27:6f:db:75:e7:9b:6a:b6:82:11:75:42:35:f2:
         ad:c7:a5:5f:e0:ce:f3:d4:08:fc:7c:22:05:85:40:82:a5:31:
         fa:f8:4c:55:40:51:b8:a3:f1:13:df:d6:68:a9:d6:84:fd:76:
         05:b1:06:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org