Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4FD1583A2767C7C1451A64515B36244406B1BE70.cer
File:                     4FD1583A2767C7C1451A64515B36244406B1BE70.cer (raw, json)
Hash identifier:          SKod8uOzbTrs3Dwz7R3g+yllkdFnmpN7UAdr5/1iZmA=
Subject key identifier:   4F:D1:58:3A:27:67:C7:C1:45:1A:64:51:5B:36:24:44:06:B1:BE:70
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       115BE9D039F296DA79162367780E576365FC10C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/4FD1583A2767C7C1451A64515B36244406B1BE70.mft
caRepository:             rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 16:52:33 +0000
Certificate not after:    Tue 03 Dec 2024 16:57:33 +0000
Subordinate resources:    AS: 267549
                          IP: 201.182.236.0/22
                          IP: 2804:431c::/32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:5b:e9:d0:39:f2:96:da:79:16:23:67:78:0e:57:63:65:fc:10:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Dec  5 16:52:33 2023 GMT
            Not After : Dec  3 16:57:33 2024 GMT
        Subject: CN=4FD1583A2767C7C1451A64515B36244406B1BE70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:12:cd:c7:a2:5d:a4:c2:bc:60:09:72:6c:
                    93:17:d2:1f:84:f6:c5:6f:73:c5:93:40:be:2f:a2:
                    2d:f5:a8:c1:a2:7e:51:8d:63:3e:f1:02:56:de:c3:
                    a7:04:1f:58:3a:86:55:a8:22:23:07:ae:c7:c3:22:
                    55:b3:1c:d4:8c:4f:1a:17:4c:13:22:81:9c:1f:f3:
                    4d:2b:80:da:a5:be:fb:ec:bb:ba:e2:ec:d5:d3:ef:
                    f7:d5:e2:b9:33:be:bf:33:17:46:77:fa:07:ee:e0:
                    b2:8f:c6:6d:cc:69:18:37:af:85:7d:74:f7:d0:7e:
                    69:a6:8c:69:bc:d9:d2:77:cd:3e:b2:c0:73:84:39:
                    f9:13:f7:16:18:7a:80:0f:d7:c4:f1:cb:46:67:0c:
                    27:b0:39:20:4f:20:43:d4:40:2e:e6:9c:a8:3a:02:
                    b4:78:93:07:70:c5:e0:1b:71:22:95:26:85:1e:16:
                    b5:91:b8:86:18:06:9d:53:10:11:42:21:73:9d:f9:
                    e6:12:3b:9d:cf:5f:95:a5:84:34:ce:e8:f4:23:90:
                    7d:ac:81:8c:e1:fd:35:ab:8d:e6:88:4d:89:70:e0:
                    10:b9:03:5b:28:f3:d2:9f:6e:65:87:58:ef:c2:5b:
                    f5:ca:db:d2:84:64:71:bf:87:21:13:36:fe:b9:29:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:D1:58:3A:27:67:C7:C1:45:1A:64:51:5B:36:24:44:06:B1:BE:70
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/CAi4BdcBNb2kBSJYgNNFYCQeqzx4ufjeUt2zSHHTBHkt/0/4FD1583A2767C7C1451A64515B36244406B1BE70.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.236.0/22
                IPv6:
                  2804:431c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267549

    Signature Algorithm: sha256WithRSAEncryption
         a0:d8:e0:08:cf:77:08:d7:ea:1b:c4:09:b4:5d:c6:e7:ce:f0:
         14:42:b1:f3:d4:c7:9b:eb:14:e0:cb:83:36:7b:46:7c:6e:27:
         82:14:1e:77:f5:4f:76:d0:4e:6b:54:72:cc:ce:21:8d:6d:1a:
         f4:eb:96:81:ca:10:73:85:66:51:e6:d9:21:b9:78:3f:cd:26:
         30:8e:bc:21:c0:3e:aa:dd:a7:bc:d5:aa:39:cd:90:06:ab:3b:
         72:43:ce:9d:06:3e:bb:41:4c:ea:3e:59:6c:e3:64:43:f3:20:
         02:ad:c6:16:99:5f:8f:5c:2a:3b:9f:e4:70:92:db:09:b6:9d:
         0b:8e:bf:41:c6:c6:da:b5:ce:4b:a7:55:29:76:59:41:cd:84:
         3b:91:6b:55:69:97:19:7b:ce:e1:06:56:0b:c6:47:84:23:e8:
         f9:be:2d:56:ad:1b:12:42:d7:8c:5f:9f:c5:fe:31:ae:1e:5f:
         53:f0:f4:0e:5c:f3:4d:d6:d6:64:5a:cd:ad:01:9e:22:22:ca:
         32:a1:a4:91:02:41:7b:f3:b3:99:1c:92:61:5a:64:73:e1:ee:
         df:82:5b:74:dd:4f:8b:ff:ab:bf:f0:04:2a:73:ac:17:b6:47:
         8b:b1:74:82:64:ed:da:64:b0:e2:5c:9a:0a:4e:29:82:f5:50:
         29:d2:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:58 2025 by rpki-client