Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/4FD295297397B893A1B648DB8C85A6991BC16458.cer
File:                     4FD295297397B893A1B648DB8C85A6991BC16458.cer (raw, json)
Hash identifier:          xv2hj8XFjBHIp1DEMjGEb4R5fm30lJySf17gU7JVf60=
Subject key identifier:   4F:D2:95:29:73:97:B8:93:A1:B6:48:DB:8C:85:A6:99:1B:C1:64:58
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       424FEBB7E4514048E0D99DCDEF5A887DCB64A6E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/0/4FD295297397B893A1B648DB8C85A6991BC16458.mft
caRepository:             rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 16:35:09 +0000
Certificate not after:    Thu 13 Feb 2025 16:40:09 +0000
Subordinate resources:    AS: 267322
                          IP: 192.144.72.0/23
                          IP: 2801:80:2380::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:4f:eb:b7:e4:51:40:48:e0:d9:9d:cd:ef:5a:88:7d:cb:64:a6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Feb 15 16:35:09 2024 GMT
            Not After : Feb 13 16:40:09 2025 GMT
        Subject: CN=4FD295297397B893A1B648DB8C85A6991BC16458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c2:47:64:dd:7b:9a:93:69:02:14:73:71:bf:
                    e3:59:1f:c4:0c:66:b2:11:3b:85:98:2a:9c:2b:52:
                    78:5f:17:f5:81:d3:b4:44:90:98:00:27:5f:0d:cf:
                    ce:cd:9e:13:21:be:f2:cf:81:9e:9a:85:12:fa:04:
                    36:ad:5a:80:22:c7:53:f9:72:89:1e:b1:14:58:0a:
                    6b:d0:53:6e:d2:83:ca:fd:a0:77:a8:da:7b:a5:f2:
                    c1:d6:63:20:9e:3a:1f:29:8c:5e:32:e8:95:15:74:
                    66:30:2a:fc:b2:85:ee:aa:a6:95:53:a0:26:43:c8:
                    8c:4b:4f:c0:31:6a:56:08:30:e8:7b:ce:1f:a6:31:
                    3d:99:64:b2:2c:71:e0:55:7a:5f:e4:cf:fd:14:eb:
                    80:9a:d6:7a:cb:97:77:2f:5a:23:5a:bd:8c:24:64:
                    64:c7:96:7c:07:f8:a5:97:29:a3:8a:5d:eb:55:8e:
                    c5:d7:00:ae:2e:43:65:02:19:9c:6b:b3:a1:36:cc:
                    99:4b:11:88:34:92:ae:26:8c:e0:c9:d2:c1:c0:e2:
                    07:7a:f6:8a:57:c6:67:96:53:f0:50:05:c1:56:ad:
                    6e:37:f4:8a:99:ff:69:34:81:cc:99:14:a1:b4:63:
                    26:5f:03:6e:b0:5a:9b:02:52:f4:51:ea:4b:46:2a:
                    f0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                4F:D2:95:29:73:97:B8:93:A1:B6:48:DB:8C:85:A6:99:1B:C1:64:58
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/FvPPg2KDY3De4mDA7Eiyc6fF6wKh3aRSyQ5faJQZ8mfD/0/4FD295297397B893A1B648DB8C85A6991BC16458.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.72.0/23
                IPv6:
                  2801:80:2380::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267322

    Signature Algorithm: sha256WithRSAEncryption
         0a:49:12:fc:8e:f3:e2:51:bf:8a:22:9b:1a:71:b0:22:33:0a:
         6e:34:02:c1:1b:fe:69:a0:1f:ed:d7:9f:e0:42:19:1a:39:f3:
         de:1e:c4:4c:13:f7:82:94:c0:71:4f:27:e8:f1:3b:23:39:23:
         55:e1:a0:75:10:74:58:42:5b:dd:18:67:05:e4:ff:26:e2:29:
         b6:97:d6:ee:c4:6d:dc:70:65:af:ce:5f:e6:d1:f5:be:f3:c5:
         dd:7f:20:7d:43:b2:3e:eb:42:94:6e:e8:e0:1a:dd:2a:14:9a:
         d2:d1:fd:62:60:25:ee:e0:5f:f0:d0:6b:97:32:f5:1e:59:bb:
         ab:fb:ea:d2:7f:f7:6a:8d:38:7e:14:a8:de:3f:47:36:6f:22:
         0f:3f:9f:3e:e8:bc:13:c3:1e:e4:4e:8c:fd:68:fb:ec:a8:c2:
         f1:50:54:fb:f8:0d:c6:22:dd:c3:64:93:32:bc:c9:69:76:70:
         5f:7e:a5:72:dd:a0:2d:d5:93:3e:a0:1d:34:28:8d:c1:49:d5:
         6d:e4:2d:a5:0c:4a:0a:4c:2e:69:c2:56:33:f7:da:9c:4b:d5:
         07:9f:52:d2:cc:1e:82:db:6b:f6:f6:e6:a8:a9:6f:df:96:9a:
         82:a5:75:a2:e8:75:0e:4e:01:8c:68:2a:53:7b:7f:59:bf:71:
         c8:86:67:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:16 2024 by rpki-client on console-fra.rpki-client.org