Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4F8D0C704227A42DB2A4039E324000F4D79DFEF8.cer
File:                     4F8D0C704227A42DB2A4039E324000F4D79DFEF8.cer (raw, json)
Hash identifier:          icwq2x3ipm5BHwc9M1nkcXSMZpXQWnhDYkEdv9UnQXU=
Subject key identifier:   4F:8D:0C:70:42:27:A4:2D:B2:A4:03:9E:32:40:00:F4:D7:9D:FE:F8
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       51E2D468DDF3C5E446EDED267F8EB623EE9DD6EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/4F8D0C704227A42DB2A4039E324000F4D79DFEF8.mft
caRepository:             rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 14:22:36 +0000
Certificate not after:    Tue 07 Jan 2025 14:27:36 +0000
Subordinate resources:    AS: 264385
                          IP: 131.108.148.0/22
                          IP: 2804:1dac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e2:d4:68:dd:f3:c5:e4:46:ed:ed:26:7f:8e:b6:23:ee:9d:d6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Jan  9 14:22:36 2024 GMT
            Not After : Jan  7 14:27:36 2025 GMT
        Subject: CN=4F8D0C704227A42DB2A4039E324000F4D79DFEF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:60:bd:34:45:d5:58:96:60:26:79:1a:64:
                    bc:99:a2:76:7f:88:61:c1:cc:94:bd:6b:5a:0b:39:
                    fe:ee:90:a7:da:c9:4a:3d:41:4f:21:e8:4f:52:b1:
                    bc:2d:d3:ef:82:7f:6b:94:83:b4:11:0c:7b:94:c2:
                    f4:3d:88:9c:a6:91:a0:e6:fa:9b:45:7b:a5:7e:91:
                    af:f4:7c:c6:81:05:5f:61:16:78:74:63:51:9b:ae:
                    9f:bb:54:37:1f:ae:db:fc:11:1b:0f:b9:51:5c:bb:
                    ac:99:23:79:67:99:da:11:5c:85:c2:94:ec:e0:37:
                    ed:c2:26:6d:8a:e0:75:49:3e:02:f4:d3:72:87:83:
                    2e:2c:dd:f3:57:6c:95:fd:e2:9a:7f:fe:5b:17:32:
                    7a:91:ed:5c:ba:41:18:1d:e1:30:0f:1c:2b:3d:a6:
                    92:7f:8e:12:10:4f:89:e0:a0:a6:17:41:14:9c:16:
                    42:8d:6e:60:59:5f:8c:49:65:14:eb:f2:b7:0d:97:
                    05:4e:c4:24:e1:b0:dc:42:4c:3b:d5:e3:19:8d:52:
                    92:bd:e4:cc:a4:1e:c8:64:54:69:3d:40:c9:12:f9:
                    72:fb:ba:a4:49:3a:01:08:49:fd:7c:9a:10:3f:18:
                    07:0f:76:86:2c:d7:ff:1a:27:01:9f:2f:b9:44:b2:
                    5c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:8D:0C:70:42:27:A4:2D:B2:A4:03:9E:32:40:00:F4:D7:9D:FE:F8
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/BMUSYRu4t6eVwwmktEQjzGW4kjjXfFHnkTC1pTwZM7EF/0/4F8D0C704227A42DB2A4039E324000F4D79DFEF8.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.148.0/22
                IPv6:
                  2804:1dac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264385

    Signature Algorithm: sha256WithRSAEncryption
         b2:80:65:49:b8:a8:47:69:e1:6d:95:14:fa:01:91:4f:f3:70:
         a6:b1:40:d3:e3:c0:b3:39:88:18:f3:18:39:75:7f:1f:95:a3:
         31:82:ee:f1:29:c3:f0:7f:59:87:04:f3:f1:b4:fa:1c:ad:cd:
         fe:f7:d0:76:68:bc:e7:99:93:17:04:3d:5c:1b:02:e6:f0:b4:
         34:9f:b3:25:f8:60:88:1b:43:45:bb:a3:e0:0d:63:4d:4a:94:
         ca:f7:73:67:7c:a5:8c:31:83:e9:35:dc:8e:a6:45:0a:8e:cc:
         8c:00:c4:df:33:d1:57:77:1f:55:71:33:8b:4d:a6:93:a8:a1:
         9b:7c:d1:fb:0d:7d:f2:fe:ef:89:b7:da:26:79:22:5d:6f:75:
         a7:90:83:aa:69:a9:46:03:d2:3a:13:fc:63:47:dd:f0:1b:93:
         da:77:88:fa:fa:17:42:fb:af:cd:56:75:6a:c7:3d:e3:8d:c9:
         88:b7:e3:0b:1d:78:20:31:e7:2e:91:5c:ea:cd:cf:0d:dd:ec:
         d0:1b:cc:62:e5:3a:62:f1:4a:45:7a:57:b5:0f:5a:4d:e0:99:
         9c:67:e3:e7:8a:b7:81:46:8a:02:1e:7e:03:08:81:2c:8b:ae:
         23:7a:e5:a7:56:e2:8c:52:55:a0:ca:ae:22:b0:20:44:19:86:
         07:f3:67:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org