Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.cer
File:                     4F981104ADBA2CFF53B3D12A607771EC8089FFAB.cer (raw, json)
Hash identifier:          +obqFBDUSdtahzdfzH7WuiqgjXY8JW+WzXXFbcR5zBY=
Subject key identifier:   4F:98:11:04:AD:BA:2C:FF:53:B3:D1:2A:60:77:71:EC:80:89:FF:AB
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       6BB217534BC2862C3CA71FB16485DC28A1D19665
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Wed 11 Oct 2023 15:15:08 +0000
Certificate not after:    Wed 09 Oct 2024 15:20:08 +0000
Subordinate resources:    AS: 271424
                          IP: 181.224.8.0/22
                          IP: 2804:7b50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:b2:17:53:4b:c2:86:2c:3c:a7:1f:b1:64:85:dc:28:a1:d1:96:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Oct 11 15:15:08 2023 GMT
            Not After : Oct  9 15:20:08 2024 GMT
        Subject: CN=4F981104ADBA2CFF53B3D12A607771EC8089FFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:06:89:e6:d8:73:c4:5e:40:95:bf:08:89:76:
                    12:93:77:e5:96:92:41:fc:02:2f:f7:1d:20:38:19:
                    ed:dc:11:9c:1a:69:6c:3d:b2:2c:a9:44:b0:8a:e3:
                    02:7c:ed:64:1f:ac:83:3b:44:33:65:2d:00:cf:e4:
                    9c:1f:d7:83:ce:fe:a9:6a:4e:c9:33:55:ab:ad:3c:
                    2f:11:8a:bf:f5:e3:d8:70:78:b4:7e:2d:ec:2d:c5:
                    29:28:02:40:e1:3a:b6:1e:cf:8b:cf:74:f6:44:53:
                    b8:69:81:f9:20:39:b4:c4:5a:e2:d1:2f:86:03:cd:
                    03:57:a5:df:bb:a9:ee:93:ae:9d:73:b3:e2:3f:be:
                    34:9f:ef:73:ad:26:af:87:7f:d0:45:bc:26:09:48:
                    e5:a5:cd:be:c6:74:16:2b:1b:d0:db:69:05:15:8d:
                    37:a1:e3:ff:a1:26:4f:f0:29:37:1e:9d:2f:19:29:
                    6e:b0:4f:75:85:1b:44:10:d0:d2:9f:49:75:b7:a8:
                    61:b4:82:28:76:a3:97:2c:18:cd:54:4b:75:92:6f:
                    1b:5f:d6:63:12:82:e2:bf:23:09:cd:73:59:ad:81:
                    79:ba:b0:fe:38:b0:fd:05:46:d0:d2:48:70:21:08:
                    6f:7e:ae:af:dc:ff:c9:15:a5:ba:e1:d7:94:5c:b1:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:98:11:04:AD:BA:2C:FF:53:B3:D1:2A:60:77:71:EC:80:89:FF:AB
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GAvVRDuEX7Kff8t8CWmkDny9Wy9WpxBDE9NxcUSBKXBV/0/4F981104ADBA2CFF53B3D12A607771EC8089FFAB.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.8.0/22
                IPv6:
                  2804:7b50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271424

    Signature Algorithm: sha256WithRSAEncryption
         01:d9:a3:96:eb:e8:66:d2:1d:92:16:fe:12:93:a8:99:31:0d:
         53:ec:b4:89:64:b7:a8:eb:cc:b2:1d:31:80:b3:30:be:77:86:
         a1:91:7c:87:8e:e2:21:70:85:e4:dc:9a:a1:b6:35:71:75:09:
         41:fd:18:aa:80:68:61:da:8b:b4:66:cd:66:ba:16:fc:f5:a2:
         bb:f4:97:6a:99:03:21:02:e0:8a:18:c3:7b:18:22:d9:6e:a7:
         77:8f:c7:ae:b2:42:56:9e:af:a6:e9:14:e5:8b:a1:bc:bc:99:
         c4:bf:20:30:f4:b6:12:78:0c:a0:9a:d3:ab:b2:9b:ee:f4:ff:
         2b:91:c7:33:83:1f:fd:b4:bd:3b:69:42:05:7d:6d:a4:22:b0:
         ba:df:19:ef:b3:2c:97:7b:17:bf:d1:0e:9e:00:3a:cd:00:f8:
         44:0e:cd:46:db:d9:11:24:00:d0:ac:34:08:0e:50:e5:fe:21:
         4b:5d:11:b7:ec:fd:53:e0:02:bf:23:e7:5d:cd:92:5f:6e:d2:
         92:69:91:35:fb:99:06:d1:46:03:49:9a:c1:60:fa:0f:28:b3:
         bd:c3:cd:50:00:83:d1:3a:e2:38:5c:c5:e6:4d:16:3e:1e:c9:
         68:91:a5:b8:f6:90:28:4e:21:a7:6a:e0:f5:4b:67:05:b6:af:
         99:fa:f3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org