Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4FAD91E56F0594990903F5CFDF1A51C367F178C1.cer
File:                     4FAD91E56F0594990903F5CFDF1A51C367F178C1.cer (raw, json)
Hash identifier:          LhNwXUPM0Azog/P2RUfIrheGz/WgWKcyFdYkzvOsF34=
Subject key identifier:   4F:AD:91:E5:6F:05:94:99:09:03:F5:CF:DF:1A:51:C3:67:F1:78:C1
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       1C1B45B87E4C5A5EF2B663E82A65A413C857804C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/4FAD91E56F0594990903F5CFDF1A51C367F178C1.mft
caRepository:             rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 05 May 2022 21:28:28 +0000
Certificate not after:    Thu 04 May 2023 21:33:28 +0000
Subordinate resources:    AS: 61732
                          IP: 131.72.104.0/22
                          IP: 170.247.16.0/22
                          IP: 2804:1b84::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:1b:45:b8:7e:4c:5a:5e:f2:b6:63:e8:2a:65:a4:13:c8:57:80:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: May  5 21:28:28 2022 GMT
            Not After : May  4 21:33:28 2023 GMT
        Subject: CN=4FAD91E56F0594990903F5CFDF1A51C367F178C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:f2:a0:f9:e1:2a:82:38:bb:63:05:8f:f4:
                    c0:cc:c6:4c:88:db:bf:c0:cc:1f:8a:0c:93:9c:41:
                    38:21:43:a1:fd:0f:eb:0e:04:6e:7e:93:7f:bc:f2:
                    18:5a:93:d0:e0:94:bc:c2:4d:42:50:38:1d:39:94:
                    af:06:1f:c3:90:fa:dc:96:33:1f:8c:44:ab:9b:16:
                    56:17:0e:b9:b4:2d:e9:2a:b4:ab:8b:87:41:31:e0:
                    00:d5:78:3d:51:7f:21:ab:b5:12:77:3c:4f:b9:8a:
                    3c:b4:9c:03:72:0c:f2:df:e9:1c:f8:fe:a3:71:84:
                    7b:bf:37:d9:8c:48:3c:13:02:6e:40:bc:86:e6:7b:
                    c0:de:4c:56:51:d0:93:e6:86:02:97:69:8e:92:b0:
                    52:af:ef:f2:3e:1a:90:63:3d:0c:65:08:bf:ee:a8:
                    cc:77:a6:bc:71:99:3d:91:b3:da:45:32:e7:0a:c6:
                    1f:8f:cf:8d:af:e2:48:8a:5c:71:4f:5f:8f:f9:35:
                    02:1a:e3:7a:3e:22:13:a0:fc:d0:60:73:02:83:f0:
                    c8:40:6e:53:a4:d9:44:95:d2:2c:1e:6f:e2:32:4f:
                    3e:64:8f:ad:60:99:35:54:28:67:ef:71:29:bf:95:
                    39:a7:74:a1:95:b8:2c:7f:b7:21:07:2e:00:5b:38:
                    36:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:AD:91:E5:6F:05:94:99:09:03:F5:CF:DF:1A:51:C3:67:F1:78:C1
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/4FAD91E56F0594990903F5CFDF1A51C367F178C1.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.104.0/22
                  170.247.16.0/22
                IPv6:
                  2804:1b84::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61732

    Signature Algorithm: sha256WithRSAEncryption
         39:7d:01:e7:40:b7:25:03:39:2a:93:dc:86:bc:74:d3:7b:ce:
         29:ba:82:f9:13:eb:d5:53:5e:bc:6f:1b:a5:34:55:c8:e5:85:
         f6:de:c9:dc:e9:87:16:ac:24:bd:ce:16:78:a8:04:9d:d4:83:
         5d:89:20:9d:d8:b1:39:14:7c:ef:5e:5a:3b:ed:7e:72:8e:63:
         0d:c0:be:1f:6e:e3:e7:ce:ed:d8:41:d3:0e:74:3f:d8:8d:64:
         96:61:9c:40:1e:7e:82:0a:7c:35:49:f0:f4:69:2f:5c:29:c1:
         24:69:ea:6a:25:e1:be:39:f4:a3:cc:ea:a1:12:4e:36:98:6d:
         ac:b3:0d:60:be:19:68:a0:6b:a7:b1:b1:2c:cb:d3:26:82:81:
         80:aa:46:1e:c3:d4:f7:4c:5a:b9:fc:51:4f:ba:36:98:56:7a:
         a5:f0:c6:5f:94:db:c6:ae:03:6e:01:3e:45:73:96:67:ac:39:
         74:f8:f9:82:c9:2f:2c:ac:ad:3f:39:36:07:f5:85:14:3d:16:
         c6:58:b2:1a:98:32:59:bf:b8:60:39:ef:60:99:5d:b8:f2:fd:
         61:ce:ad:44:47:4a:a4:12:d3:d8:29:a8:44:78:b1:9b:23:36:
         7b:a9:e9:d6:22:cd:b2:11:f8:e4:d2:23:77:95:ae:d3:24:79:
         10:df:50:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:28 2024 by rpki-client on console-ams.rpki-client.org