Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4FB6275B5BB36F1335FA0BFAE0C2FA2ED57FF138.cer
File:                     4FB6275B5BB36F1335FA0BFAE0C2FA2ED57FF138.cer (raw, json)
Hash identifier:          wFJ8PSIax1LnYly1Xpyp+nhNgpVSzeeK2AYov7HA19E=
Subject key identifier:   4F:B6:27:5B:5B:B3:6F:13:35:FA:0B:FA:E0:C2:FA:2E:D5:7F:F1:38
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       06A3FF17A55367BDCEE8A1E3C5553FDB5C4A36A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/4FB6275B5BB36F1335FA0BFAE0C2FA2ED57FF138.mft
caRepository:             rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Fri 25 Nov 2022 12:44:58 +0000
Certificate not after:    Fri 24 Nov 2023 12:49:58 +0000
Subordinate resources:    AS: 268737
                          IP: 45.171.252.0/22
                          IP: 2804:59f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:a3:ff:17:a5:53:67:bd:ce:e8:a1:e3:c5:55:3f:db:5c:4a:36:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Nov 25 12:44:58 2022 GMT
            Not After : Nov 24 12:49:58 2023 GMT
        Subject: CN=4FB6275B5BB36F1335FA0BFAE0C2FA2ED57FF138
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bf:5e:9c:a2:37:9c:d4:cd:84:08:92:42:f6:
                    18:8e:f4:a4:de:a5:33:df:37:49:f7:5a:8c:f2:6b:
                    40:34:c6:fc:14:13:b7:38:e2:f4:b2:8f:2c:5f:0d:
                    76:d3:db:b4:7a:3e:ae:9e:53:3f:e6:84:32:89:4f:
                    cb:d5:0a:ed:5c:a2:e2:a2:04:4c:ae:08:cc:14:8e:
                    74:20:99:1e:48:ce:fa:b3:01:20:b1:af:46:5a:83:
                    be:88:4c:37:85:e9:7b:37:19:52:fb:1c:f5:2e:26:
                    bf:30:50:5d:e4:43:7f:0b:1a:43:f4:51:f6:28:b5:
                    87:10:4d:31:1a:bb:a9:5e:8d:b4:0b:a6:c3:50:b9:
                    2a:24:9e:2b:cd:ba:ba:6c:7f:48:38:d5:76:02:07:
                    12:1c:6f:a6:e5:cc:2d:8c:9d:c1:09:74:54:3d:65:
                    e6:7b:21:bd:ff:54:9d:15:64:a1:21:b3:e0:1f:d6:
                    e8:1a:a1:51:f2:3b:0b:e2:d9:07:44:b5:19:46:8c:
                    20:dd:83:aa:98:61:26:bf:a1:24:a1:47:a8:77:0a:
                    37:39:ac:cc:56:34:45:f0:6d:48:65:e1:5c:6e:b4:
                    0c:12:a4:25:0d:9f:24:e1:ff:14:b3:db:92:6b:b8:
                    36:e6:8a:60:b0:0a:ee:2f:a9:a1:b6:6b:f5:5b:49:
                    0a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:B6:27:5B:5B:B3:6F:13:35:FA:0B:FA:E0:C2:FA:2E:D5:7F:F1:38
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8Kn8wgQarpo36gohR3sxauuVgCR6gGWdLFXeVca4wviK/0/4FB6275B5BB36F1335FA0BFAE0C2FA2ED57FF138.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.252.0/22
                IPv6:
                  2804:59f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268737

    Signature Algorithm: sha256WithRSAEncryption
         64:29:3a:e9:f8:ed:6b:a1:75:03:bf:ae:8e:19:38:4a:e0:97:
         fc:f2:92:62:fa:eb:11:29:f2:f7:03:3e:cc:2e:d3:2e:fa:fd:
         d7:8b:da:7c:1b:87:2a:f6:1a:03:06:2b:5f:49:b9:13:a9:66:
         6e:ed:8f:73:43:f9:2c:16:12:fc:33:95:41:fe:35:f3:4c:20:
         50:e2:c5:61:d6:1c:c9:6a:f9:e4:9e:0f:49:d3:1a:eb:95:d1:
         94:eb:e5:6f:7c:7a:71:ea:d0:4f:99:7b:f3:1f:c2:94:28:42:
         81:34:66:18:7c:5e:ab:31:95:f4:eb:d5:04:01:5e:8b:f5:68:
         59:60:17:e8:36:c5:65:c1:3c:01:41:92:2f:24:49:c2:28:0c:
         d8:08:c2:1a:7d:2c:aa:af:40:14:86:2f:bb:0f:b9:c1:b4:1b:
         25:e1:cc:9b:da:ce:d9:36:47:85:03:38:95:c2:c6:79:3b:5e:
         f6:b7:bb:22:e2:3b:2e:34:a1:ba:11:96:87:69:95:da:88:3c:
         a4:60:eb:55:f2:21:ab:15:e7:e5:c6:8c:68:bd:f3:d4:7d:ec:
         e6:41:75:d2:da:ad:3c:b5:51:a7:ad:04:68:04:4a:c4:35:c5:
         13:97:26:7d:bc:97:f9:34:1a:42:9d:45:e4:55:ab:1b:30:51:
         95:ef:87:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:20 2024 by rpki-client on console-fra.rpki-client.org