Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4F2B2C526ACD0C7496A105A8D8D5802334208EC9.cer
File:                     4F2B2C526ACD0C7496A105A8D8D5802334208EC9.cer (raw, json)
Hash identifier:          Sv3EQeVJo6WOcEzfaXBCJNW2O0c+SdTxkZTReSn8ldw=
Subject key identifier:   4F:2B:2C:52:6A:CD:0C:74:96:A1:05:A8:D8:D5:80:23:34:20:8E:C9
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       0994AE2EE07DD9F8C08BA3069133521D2D535B86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/4F2B2C526ACD0C7496A105A8D8D5802334208EC9.mft
caRepository:             rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 16 Feb 2023 11:43:24 +0000
Certificate not after:    Thu 15 Feb 2024 11:48:24 +0000
Subordinate resources:    AS: 263569
                          IP: 45.5.220.0/22
                          IP: 45.172.252.0/22
                          IP: 45.225.236.0/22
                          IP: 131.161.60.0/22
                          IP: 138.118.168.0/22
                          IP: 143.202.244.0/22
                          IP: 168.232.216.0/22
                          IP: 170.80.208.0/22
                          IP: 186.249.216.0/22
                          IP: 2804:f30::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:94:ae:2e:e0:7d:d9:f8:c0:8b:a3:06:91:33:52:1d:2d:53:5b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 16 11:43:24 2023 GMT
            Not After : Feb 15 11:48:24 2024 GMT
        Subject: CN=4F2B2C526ACD0C7496A105A8D8D5802334208EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:81:c5:0b:3f:45:c6:05:df:86:b2:c3:32:
                    ed:2c:15:05:96:52:69:28:d1:65:b9:34:da:93:6e:
                    42:fd:5c:05:aa:d2:75:3d:0c:4c:91:51:bc:f6:06:
                    0f:02:79:3f:6d:1c:ec:4f:c0:f7:a6:d6:3a:11:ae:
                    e6:dd:a6:d5:02:d8:8c:03:1b:29:42:4f:3a:59:95:
                    e8:e3:2c:35:19:31:94:74:e7:da:72:96:5d:e6:3e:
                    c6:7a:a3:59:42:f8:17:5c:6e:4d:83:6c:ae:32:ad:
                    66:9d:16:4b:69:ea:a3:2b:62:23:0b:86:97:8f:bd:
                    3d:02:f6:c9:0f:8d:af:39:9b:00:fe:42:cc:dd:7d:
                    39:d9:2d:02:52:3c:0a:c7:93:90:f9:01:cd:5b:1c:
                    ff:e4:34:ae:07:79:33:5c:2e:a6:d6:00:29:74:67:
                    96:f5:9d:09:f5:63:ef:ae:41:8e:0f:47:a1:7f:d4:
                    19:18:3c:27:fd:9f:3d:e0:e4:65:14:e3:02:1b:5e:
                    8c:73:4c:d8:d5:cb:94:2b:ad:81:24:59:8b:9d:9a:
                    c5:a9:9d:48:bb:51:a9:a1:1c:74:cb:0a:3b:62:3b:
                    e0:9e:ea:a4:94:5b:22:ca:ed:b0:08:e0:96:20:38:
                    ae:0a:ab:6f:34:8f:2f:f5:1b:da:be:31:f5:14:bf:
                    2f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:2B:2C:52:6A:CD:0C:74:96:A1:05:A8:D8:D5:80:23:34:20:8E:C9
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/HcfLhkqu7wwQc4FFSWiSdr2Jfb5nCbXumofhfDXPELXx/0/4F2B2C526ACD0C7496A105A8D8D5802334208EC9.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.220.0/22
                  45.172.252.0/22
                  45.225.236.0/22
                  131.161.60.0/22
                  138.118.168.0/22
                  143.202.244.0/22
                  168.232.216.0/22
                  170.80.208.0/22
                  186.249.216.0/22
                IPv6:
                  2804:f30::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263569

    Signature Algorithm: sha256WithRSAEncryption
         ab:aa:ff:49:64:fb:a6:a5:54:a8:f6:3f:4b:fc:a6:6a:53:77:
         3b:7a:85:9c:45:db:a6:57:45:23:3d:91:75:3b:81:74:fc:36:
         da:dc:50:04:e4:86:57:89:a5:dd:91:6b:f1:3c:e0:aa:8a:29:
         4e:e2:25:35:c0:d8:aa:05:95:11:88:36:ae:98:26:c0:3a:e3:
         47:6c:08:97:ba:10:71:ef:48:32:df:cf:93:9b:bf:64:2b:cc:
         c1:f2:75:b4:b1:d4:5d:9f:cf:05:d7:4b:f8:9c:9d:e4:1e:7b:
         72:b5:16:f7:44:aa:25:37:15:af:ed:69:15:b0:65:f4:79:eb:
         93:71:14:ff:55:c4:76:cb:7e:44:b5:f0:56:72:02:c2:d4:3a:
         f7:b4:d2:04:92:26:02:64:2c:fa:cb:4b:d8:7e:80:fd:d2:5c:
         eb:f7:ba:46:c5:97:74:9a:49:20:55:f8:b0:f5:72:a0:70:88:
         80:c9:9c:23:5d:7a:41:a4:ea:f5:24:3a:2e:84:2a:6b:3b:6d:
         c0:3c:1f:86:a7:16:3b:57:d6:91:44:a0:02:c9:53:ba:8d:ec:
         00:1a:2b:46:86:2f:39:9e:e8:7d:94:ee:d6:7a:31:96:3e:80:
         f3:f8:50:d0:ce:59:38:95:9a:1a:a6:c6:e9:44:8f:cc:93:1f:
         4c:da:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org